Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YOxJOhEaAlqOx1A04OY51lh73jE.roa
File: YOxJOhEaAlqOx1A04OY51lh73jE.roa (raw, json)
Hash identifier: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=
Subject key identifier: 60:EC:49:3A:11:1A:02:5A:8E:C7:50:34:E0:E6:39:D6:58:7B:DE:31
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019972431844BAF32E10E4F6DB5D05289575
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YOxJOhEaAlqOx1A04OY51lh73jE.roa
Signing time: Mon 22 Sep 2025 16:30:23 +0000
ROA not before: Mon 22 Sep 2025 16:30:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.64.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.66.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
45.154.48.0/22 maxlen: 22
45.154.48.0/24 maxlen: 24
45.154.49.0/24 maxlen: 24
185.206.88.0/24 maxlen: 24
185.206.89.0/24 maxlen: 24
185.206.90.0/24 maxlen: 24
185.206.91.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 32
2a0e:9881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:43:18:44:ba:f3:2e:10:e4:f6:db:5d:05:28:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Sep 22 16:30:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ec493a111a025a8ec75034e0e639d6587bde31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:9a:5a:ce:ae:13:4d:a1:1d:6b:3f:62:82:
35:82:50:08:02:76:aa:59:62:be:91:95:8d:3c:5e:
8d:44:8e:02:ba:2f:56:ca:19:f4:5d:1b:cb:e5:91:
53:aa:c6:0d:74:06:6a:da:50:a5:30:83:a8:51:ec:
28:8d:34:77:c6:ad:9a:60:74:73:58:3d:46:27:1c:
5e:40:18:3e:62:5e:36:fa:6e:93:5a:e2:52:4f:b7:
25:9e:0c:34:2f:00:ac:f6:90:6b:89:75:81:8a:c0:
f5:fb:15:f7:62:6d:cf:8a:b7:fe:aa:27:13:69:76:
0e:23:a5:2d:03:3e:01:b8:45:5b:13:c5:86:04:93:
ff:29:f0:7e:f6:70:27:b9:3c:c2:22:39:30:27:68:
dc:7f:1c:12:42:a1:81:ef:38:fd:5b:90:a6:2e:ec:
f1:8d:8b:39:8f:30:07:51:ee:96:bc:3d:0f:3d:3d:
eb:44:4e:d3:d7:e8:ed:5c:e1:68:fb:7a:02:9c:17:
ef:0f:a5:c2:ef:98:19:39:98:98:3c:ee:e3:04:92:
97:f9:2c:86:db:89:f7:1d:b9:e3:93:40:d7:12:51:
bc:a3:23:b1:a5:98:ae:9a:ef:d3:e5:79:19:52:1d:
a7:49:2c:1c:8b:c1:ae:68:ae:d3:2d:3c:6b:1a:dd:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:49:3A:11:1A:02:5A:8E:C7:50:34:E0:E6:39:D6:58:7B:DE:31
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YOxJOhEaAlqOx1A04OY51lh73jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
45.154.48.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
51:0e:c1:4a:e6:c5:ea:26:57:02:3c:1d:8a:d0:de:ca:b7:4c:
45:5a:db:75:6b:16:32:89:a7:e0:a1:0c:ba:73:81:d3:6c:03:
57:c2:a0:46:2b:1f:59:ea:c9:0d:f7:ac:c2:20:78:6e:b6:e3:
93:97:30:2e:fa:0c:31:02:be:ff:be:64:54:bf:f4:57:f9:5c:
9e:e5:a8:7a:96:e9:53:a3:13:bf:c9:ed:1f:30:9e:77:1d:f0:
09:a9:e3:73:99:e8:e1:32:28:5f:4d:53:25:be:f7:3d:4c:86:
ed:9d:3f:3c:42:f0:24:c5:6a:68:67:45:75:cc:45:36:5c:a4:
4b:ab:8d:4c:d9:18:7b:32:c0:7b:5c:0c:95:72:1c:8c:e2:92:
a0:c6:49:f5:23:19:92:6f:77:5f:ba:5a:d6:31:d2:f6:d0:1e:
12:c0:44:f9:84:21:53:88:e3:ad:40:d8:84:13:79:03:42:4e:
31:8e:c6:45:9e:9e:3c:77:a3:da:54:f4:38:da:ab:50:ab:e1:
8c:77:7a:c3:f6:5d:b2:24:8a:9a:f8:b2:8d:37:52:08:ab:e2:
06:a3:b8:cc:09:e1:ab:5d:a9:65:97:3a:53:29:a0:8d:94:9c:
60:32:46:b0:c5:ef:45:b5:28:3c:29:f6:9f:4b:f4:80:39:4c:
ca:0b:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:59 2025 by rpki-client