Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/jECFVXifI2PML21GlnCLdBYUig0.roa
File: jECFVXifI2PML21GlnCLdBYUig0.roa (raw, json)
Hash identifier: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=
Subject key identifier: 8C:40:85:55:78:9F:23:63:CC:2F:6D:46:96:70:8B:74:16:14:8A:0D
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019888DDF60241A28B573CFE7FFE2B35CB62
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/jECFVXifI2PML21GlnCLdBYUig0.roa
Signing time: Fri 08 Aug 2025 08:48:24 +0000
ROA not before: Fri 08 Aug 2025 08:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203101
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.232.0/24 maxlen: 24
45.56.233.0/24 maxlen: 24
45.56.234.0/23 maxlen: 23
45.56.236.0/22 maxlen: 23
45.56.238.0/23 maxlen: 23
45.56.240.0/20 maxlen: 20
72.46.154.0/23 maxlen: 23
72.46.154.0/24 maxlen: 24
72.46.155.0/24 maxlen: 24
172.93.4.0/23 maxlen: 23
185.98.100.0/22 maxlen: 22
199.5.180.0/23 maxlen: 23
199.195.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:dd:f6:02:41:a2:8b:57:3c:fe:7f:fe:2b:35:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Aug 8 08:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c408555789f2363cc2f6d4696708b7416148a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:8d:c6:82:01:37:6b:dd:34:ff:bb:a8:dd:
c6:c6:da:66:8d:17:6d:6c:7b:49:8c:50:1d:9e:c9:
67:ac:34:e1:6c:2b:b8:1f:5e:09:c8:60:87:05:d8:
63:00:6b:83:34:0b:41:c2:37:2a:5c:09:d0:1c:ad:
22:2e:cb:c4:9d:ba:8c:73:bb:72:cd:57:35:f4:9f:
48:b4:82:7f:7e:11:12:3a:b9:2d:65:28:88:b2:81:
c3:08:f9:75:73:b6:17:85:f8:1a:99:3d:b9:b4:c0:
73:e9:53:1a:4a:0c:81:7c:e8:88:e7:3c:28:63:ee:
cb:38:30:81:d0:eb:cb:b3:db:b6:b4:4c:02:a3:02:
e8:e2:4c:c4:32:e3:ae:53:ac:83:a6:d7:77:f8:6c:
d0:fa:ec:fd:43:fa:22:d9:ee:53:e7:c6:cd:ff:8d:
17:60:c3:18:ac:9e:9d:12:03:fb:2e:50:7b:8e:f5:
17:71:97:d8:1f:db:99:a4:40:53:a2:d4:36:15:7c:
7c:58:b2:a8:72:d9:64:dd:18:ed:a0:1e:67:1f:ac:
d6:f4:e8:57:52:83:42:a6:bd:fa:ee:7f:22:cc:99:
97:70:9a:d9:2b:14:6c:9f:33:43:50:ba:07:07:24:
b7:71:4f:55:6c:86:06:4c:ca:f3:8d:60:86:0e:47:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:85:55:78:9F:23:63:CC:2F:6D:46:96:70:8B:74:16:14:8A:0D
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/jECFVXifI2PML21GlnCLdBYUig0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/19
72.46.154.0/23
172.93.4.0/23
185.98.100.0/22
199.5.180.0/23
199.195.130.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a1:a1:1e:51:a4:d7:c8:b7:c3:f2:83:7b:2d:14:04:53:89:
96:15:77:8a:c4:dc:40:df:19:f3:6d:67:ca:59:52:67:99:db:
79:b4:37:7f:2e:f6:2f:a6:7b:ad:be:34:53:b1:15:c4:93:f4:
9b:8c:35:67:0a:b2:ba:25:4d:3b:c8:92:47:01:01:f6:de:73:
d7:27:b7:60:47:de:08:04:49:97:0b:b1:61:ec:ff:a2:a5:85:
a9:6a:fc:e8:03:0e:a3:f6:f0:70:db:9e:11:c1:81:2b:3e:72:
69:fe:29:38:e1:ee:b3:99:39:ad:d7:21:db:16:99:1b:a5:76:
d2:89:15:0c:23:56:36:ce:a8:cb:40:f6:47:e9:31:f7:52:e0:
2d:15:93:37:49:f9:1f:9e:10:c2:f7:58:aa:7e:7b:56:97:52:
91:60:28:81:97:eb:16:f2:7d:ca:bf:fc:b0:f7:5e:ae:34:8e:
0c:4b:18:b3:57:c7:6e:10:0c:a7:cb:b7:74:cb:d2:0f:2e:fc:
ae:36:cd:b2:fd:24:f7:30:c4:cd:a1:45:bf:9a:b1:4d:23:91:
f9:8f:44:a8:33:ea:be:d7:2a:c0:bc:f4:82:6b:69:d1:87:af:
59:29:47:71:7d:4f:b1:09:58:20:ba:2c:7a:14:1f:16:ed:df:
9b:0b:7a:18
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZiI3fYCQaKLVzz+f/4rNctiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUwODA4MDg0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQwODU1NTc4OWYyMzYzY2MyZjZkNDY5NjcwOGI3NDE2MTQ4YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AyNxoIBN2vdNP+7qN3GxtpmjRdt
bHtJjFAdnslnrDThbCu4H14JyGCHBdhjAGuDNAtBwjcqXAnQHK0iLsvEnbqMc7ty
zVc19J9ItIJ/fhESOrktZSiIsoHDCPl1c7YXhfgamT25tMBz6VMaSgyBfOiI5zwo
Y+7LODCB0OvLs9u2tEwCowLo4kzEMuOuU6yDptd3+GzQ+uz9Q/oi2e5T58bN/40X
YMMYrJ6dEgP7LlB7jvUXcZfYH9uZpEBTotQ2FXx8WLKoctlk3RjtoB5nH6zW9OhX
UoNCpr367n8izJmXcJrZKxRsnzNDULoHByS3cU9VbIYGTMrzjWCGDkdXhwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIxAhVV4nyNjzC9tRpZwi3QWFIoNMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEvakVDRlZYaWZJMlBNTDIxR2xuQ0xkQllVaWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFLTjgAwQB
SC6aAwQBrF0EAwQCuWJkAwQBxwW0AwQBx8OCMA0GCSqGSIb3DQEBCwUAA4IBAQAz
oaEeUaTXyLfD8oN7LRQEU4mWFXeKxNxA3xnzbWfKWVJnmdt5tDd/LvYvpnutvjRT
sRXEk/SbjDVnCrK6JU07yJJHAQH23nPXJ7dgR94IBEmXC7Fh7P+ipYWpavzoAw6j
9vBw254RwYErPnJp/ik44e6zmTmt1yHbFpkbpXbSiRUMI1Y2zqjLQPZH6TH3UuAt
FZM3SfkfnhDC91iqfntWl1KRYCiBl+sW8n3Kv/yw916uNI4MSxizV8duEAyny7d0
y9IPLvyuNs2y/ST3MMTNoUW/mrFNI5H5j0SoM+q+1yrAvPSCa2nRh69ZKUdxfU+x
CVgguix6FB8W7d+bC3oY
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:46:08 2025 by rpki-client