Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq2Napw6DgW3whmGGC3gvvBynVU.roa
File: Yq2Napw6DgW3whmGGC3gvvBynVU.roa (raw, json)
Hash identifier: 9tfCwtSidiI/QYHCx5SVPxNO66El2Vfq2YClL4sDZfA=
Subject key identifier: 62:AD:8D:6A:9C:3A:0E:05:B7:C2:19:86:18:2D:E0:BE:F0:72:9D:55
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0197AC4882ABE0207546D18AC4413AEA9178
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq2Napw6DgW3whmGGC3gvvBynVU.roa
Signing time: Thu 26 Jun 2025 12:48:42 +0000
ROA not before: Thu 26 Jun 2025 12:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48399
IP address blocks: 45.147.195.0/24 maxlen: 24
77.83.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:48:82:ab:e0:20:75:46:d1:8a:c4:41:3a:ea:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 26 12:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ad8d6a9c3a0e05b7c21986182de0bef0729d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:96:45:9b:d1:3e:a4:21:40:fa:ad:fb:11:
b4:17:67:14:e5:69:60:c1:ee:0b:6c:c9:f5:1a:85:
f4:6d:9c:57:68:b4:0e:57:b5:8d:14:59:30:1f:6a:
98:32:f5:b6:9b:51:00:be:24:b4:ab:f4:73:58:4c:
35:6f:03:e9:d8:e7:82:08:46:b4:08:8c:0e:fd:4a:
d1:46:4a:78:d3:d5:0a:93:05:36:b5:01:93:06:d5:
96:bf:26:72:eb:28:13:b6:01:51:f4:78:a2:1e:9a:
39:21:7e:72:04:9b:7f:76:bd:c9:e6:d3:03:12:d3:
11:9f:49:b9:6d:cc:69:33:c7:ed:06:55:a9:ef:38:
bb:4d:a2:68:09:bc:48:57:ff:2b:19:99:fe:e3:e0:
57:22:3e:28:0f:a9:af:ed:7c:6e:e0:d0:0f:11:f6:
4e:cb:73:58:41:54:4f:7c:a4:ce:1a:f5:9f:98:f8:
04:46:bc:06:5c:42:bb:44:08:28:54:d2:d2:87:da:
12:a1:4b:ee:fc:ca:11:86:d8:45:8a:88:54:ef:e5:
00:71:35:9b:30:3a:46:16:25:1b:f2:9d:5d:49:de:
a4:ab:fe:1f:55:1b:1a:b1:8c:25:72:23:1f:c5:fe:
6e:1e:e9:69:16:ab:52:a5:2a:1d:bd:ca:b9:c3:22:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:8D:6A:9C:3A:0E:05:B7:C2:19:86:18:2D:E0:BE:F0:72:9D:55
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Yq2Napw6DgW3whmGGC3gvvBynVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.195.0/24
77.83.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:76:1d:08:dd:7a:cc:13:da:8a:4c:df:40:87:d4:ea:40:b4:
27:81:d7:03:6d:61:c6:bf:e0:f2:60:2a:aa:8c:08:2d:2f:fa:
50:9a:06:f5:a2:94:80:d2:2b:07:6c:c1:fd:d4:ae:c1:95:97:
11:74:6f:b0:62:4b:e0:72:6e:98:2a:9b:11:5d:9d:0e:22:bc:
9a:d6:6d:c0:e8:d0:1d:76:b3:89:e9:f6:68:ec:29:79:46:15:
85:9a:ab:e6:aa:54:e7:31:b5:83:e7:c7:9e:d2:52:3a:2f:0a:
54:77:ad:be:51:10:33:fb:22:ae:81:e0:f5:85:a2:8a:d9:79:
2e:2c:ba:ff:72:d1:e2:66:b0:d3:1d:88:5d:8c:d8:0c:2d:6d:
86:6b:92:aa:fa:5b:26:bc:26:c2:8b:cf:59:bb:7f:a2:1b:ac:
78:5d:08:56:a4:5e:5b:a7:87:16:45:c8:f3:2e:6f:f2:e0:58:
44:af:84:97:f6:6b:bd:b5:2c:1a:07:3b:4a:38:9b:de:02:b8:
8c:df:9c:4b:df:f7:83:d0:99:d2:05:5c:a9:c8:65:2a:dd:38:
d7:30:eb:b8:6b:14:0b:0b:22:eb:99:99:ac:8b:9c:54:e6:74:
3d:60:8b:58:5a:ed:c0:d5:ab:37:d6:a6:78:f9:db:03:97:ca:
56:24:d4:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZesSIKr4CB1RtGKxEE66pF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwNjI2MTI0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmFkOGQ2YTljM2EwZTA1YjdjMjE5ODYxODJkZTBiZWYwNzI5ZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtGWRZvRPqQhQPqt+xG0F2cU5Wlg
we4LbMn1GoX0bZxXaLQOV7WNFFkwH2qYMvW2m1EAviS0q/RzWEw1bwPp2OeCCEa0
CIwO/UrRRkp409UKkwU2tQGTBtWWvyZy6ygTtgFR9HiiHpo5IX5yBJt/dr3J5tMD
EtMRn0m5bcxpM8ftBlWp7zi7TaJoCbxIV/8rGZn+4+BXIj4oD6mv7Xxu4NAPEfZO
y3NYQVRPfKTOGvWfmPgERrwGXEK7RAgoVNLSh9oSoUvu/MoRhthFiohU7+UAcTWb
MDpGFiUb8p1dSd6kq/4fVRsasYwlciMfxf5uHulpFqtSpSodvcq5wyIt2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGKtjWqcOg4Ft8IZhhgt4L7wcp1VMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWXEyTmFwdzZEZ1czd2htR0dDM2d2dkJ5blZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZPDAwQA
TVNIMA0GCSqGSIb3DQEBCwUAA4IBAQArdh0I3XrME9qKTN9Ah9TqQLQngdcDbWHG
v+DyYCqqjAgtL/pQmgb1opSA0isHbMH91K7BlZcRdG+wYkvgcm6YKpsRXZ0OIrya
1m3A6NAddrOJ6fZo7Cl5RhWFmqvmqlTnMbWD58ee0lI6LwpUd62+URAz+yKugeD1
haKK2XkuLLr/ctHiZrDTHYhdjNgMLW2Ga5Kq+lsmvCbCi89Zu3+iG6x4XQhWpF5b
p4cWRcjzLm/y4FhEr4SX9mu9tSwaBztKOJveAriM35xL3/eD0JnSBVypyGUq3TjX
MOu4axQLCyLrmZmsi5xU5nQ9YItYWu3A1as31qZ4+dsDl8pWJNRZ
-----END CERTIFICATE-----
Generated at Fri Jul 4 01:07:37 2025 by rpki-client