Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ReY2tPX210-enwDcd_knQa9-DQY.roa
File: ReY2tPX210-enwDcd_knQa9-DQY.roa (raw, json)
Hash identifier: 2jOnLIUq8fBeQ/tq35cU67+fxV+LGlNJaoKupdGfzn4=
Subject key identifier: 45:E6:36:B4:F5:F6:D7:4F:9E:9F:00:DC:77:F9:27:41:AF:7E:0D:06
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01987CC78C107A877B4D71CBBB6FFF690671
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ReY2tPX210-enwDcd_knQa9-DQY.roa
Signing time: Wed 06 Aug 2025 00:28:28 +0000
ROA not before: Wed 06 Aug 2025 00:28:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41012
IP address blocks: 91.103.32.0/23 maxlen: 23
94.119.40.0/23 maxlen: 23
94.119.42.0/23 maxlen: 23
94.119.64.0/18 maxlen: 18
94.119.128.0/18 maxlen: 18
94.119.255.0/24 maxlen: 24
194.42.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:c7:8c:10:7a:87:7b:4d:71:cb:bb:6f:ff:69:06:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Aug 6 00:28:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e636b4f5f6d74f9e9f00dc77f92741af7e0d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:12:4e:21:a4:a4:10:fc:a2:bb:90:88:76:
1e:22:7c:87:8c:48:27:e1:0d:2b:c9:55:b3:39:03:
dc:a9:5f:ae:e6:91:0c:5d:e1:59:48:61:57:13:dd:
b9:1e:58:8b:3f:83:9c:75:f4:55:df:78:62:9b:55:
8d:6d:b0:31:4b:d6:23:77:0c:8b:fe:ee:2a:ee:80:
a5:4e:cd:d5:de:5f:a6:34:d0:e3:1e:3e:29:f8:9c:
d9:65:9a:3e:f5:0e:11:ae:c6:34:bb:89:bd:53:55:
c9:d3:9a:dd:de:a0:74:e0:60:0d:9f:c7:4e:1a:24:
08:7f:01:30:ca:68:15:e7:d2:25:30:a3:01:95:0d:
27:79:04:10:4e:5a:94:ba:01:f4:16:07:da:ff:bb:
97:c6:d2:8c:aa:2f:fa:a2:42:c7:36:87:cb:45:86:
10:2c:06:cc:2e:a0:a2:fd:ee:cc:b8:7c:00:b6:e9:
84:f3:04:47:c1:56:9e:76:47:fb:3f:be:51:44:13:
b1:c9:7f:46:e6:b7:7d:b6:d3:2a:4e:8b:72:2e:0e:
84:d0:21:b8:a9:3c:5a:6b:af:91:1f:61:21:b3:da:
e1:97:e1:63:dc:a5:f6:1b:e6:24:cd:e7:f7:c9:be:
bf:f8:08:45:45:a0:c4:62:c2:66:98:81:fe:bb:fa:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E6:36:B4:F5:F6:D7:4F:9E:9F:00:DC:77:F9:27:41:AF:7E:0D:06
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ReY2tPX210-enwDcd_knQa9-DQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.32.0/23
94.119.40.0/22
94.119.64.0-94.119.191.255
94.119.255.0/24
194.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:2f:61:40:4a:4c:44:60:2d:6d:92:cb:d5:cb:df:1a:b0:d6:
af:82:e9:63:17:43:5f:82:11:73:62:fd:ec:0e:72:47:2b:18:
fd:05:8a:a1:d5:1f:2a:ae:5f:f4:1e:bf:30:02:86:53:a1:e3:
71:81:9a:e7:72:35:69:08:0d:be:f4:dc:b7:fb:fe:f8:2b:21:
6a:f7:0e:47:22:df:b8:d2:b8:3d:e8:70:00:0d:1d:07:b5:41:
15:85:b4:ac:a4:01:6f:b4:1a:8d:1f:99:46:04:f5:c5:84:15:
df:69:57:14:17:bd:8f:71:ca:92:6b:73:eb:42:7d:30:5f:6b:
68:71:6f:e0:50:39:88:d6:6b:9f:9b:c5:1e:fe:2f:e1:8b:6e:
bc:03:8c:2f:a8:22:a2:dc:5d:f0:53:f6:d0:5c:b8:b7:7a:f2:
87:7b:bb:a5:81:d4:02:0b:12:bc:20:cd:b4:69:a7:07:71:ca:
cb:60:d0:2f:aa:51:b4:68:23:ff:f6:40:51:8f:ae:a2:ef:4d:
f8:96:0c:ce:d1:96:1f:4c:d4:69:aa:b9:07:13:2d:3c:c8:6f:
56:00:03:f4:fc:5a:ab:fc:55:49:e4:fa:1b:03:a4:e4:33:4e:
d6:34:65:e6:8d:8b:36:9f:a2:cf:e7:7d:cf:da:e5:38:8f:1c:
b6:1f:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:21 2025 by rpki-client