Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/ddztps0hN4VMdXyjS1k_lHAPDQI.roa
File: ddztps0hN4VMdXyjS1k_lHAPDQI.roa (raw, json)
Hash identifier: FuonT4M3ClmAeThBArgxMo2zntTmX1+p4F4rL/ngyiQ=
Subject key identifier: 75:DC:ED:A6:CD:21:37:85:4C:75:7C:A3:4B:59:3F:94:70:0F:0D:02
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0198C2A892C82564BCE94966E14A1E6D0EB0
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/ddztps0hN4VMdXyjS1k_lHAPDQI.roa
Signing time: Tue 19 Aug 2025 14:08:04 +0000
ROA not before: Tue 19 Aug 2025 14:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56504
IP address blocks: 178.237.57.0/24 maxlen: 24
178.237.58.0/24 maxlen: 24
2a0d:5540:1::/48 maxlen: 48
2a0d:5540:2::/48 maxlen: 48
2a0d:5540:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:a8:92:c8:25:64:bc:e9:49:66:e1:4a:1e:6d:0e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Aug 19 14:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75dceda6cd2137854c757ca34b593f94700f0d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:1a:c0:71:77:1f:a6:d7:53:d4:58:b1:ab:
fc:dc:74:cf:e5:22:94:94:c5:27:84:1b:cf:b5:d4:
7f:ed:96:2b:45:c6:a5:26:42:21:29:b4:a2:08:a8:
a4:6d:ca:a0:d6:ea:39:07:92:dd:f1:93:67:68:dd:
ab:99:cd:9f:40:39:56:44:10:df:3c:b8:d3:e4:75:
6b:91:34:59:d9:f9:f8:3f:f5:e7:e4:e8:47:b7:57:
dd:08:7f:bd:26:f2:b6:56:62:da:0c:fd:09:cb:96:
c1:23:54:bf:f6:23:10:f0:4d:a1:5f:b4:50:c8:d2:
c7:c9:ed:46:79:ed:5e:4b:0e:03:8b:c3:44:b9:57:
ea:d5:6d:fc:de:45:5c:c5:da:15:e6:0e:22:72:25:
59:7a:74:44:50:55:55:12:35:1e:c3:e5:13:bd:64:
ed:cf:03:ad:8f:59:b6:9e:b4:38:05:20:3c:15:9b:
b7:95:a3:6e:ad:a7:69:41:28:c9:e6:dd:b5:57:51:
52:08:86:c9:c8:73:52:51:f0:f0:f9:1f:6d:8f:c2:
57:e1:91:de:41:40:6d:ef:86:b8:9a:61:39:7c:f2:
47:6b:0b:3a:8a:7b:7d:d5:c4:ad:a5:22:12:7f:c0:
c2:16:08:ad:47:c0:65:c1:ff:4b:7a:e4:a8:0c:eb:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:ED:A6:CD:21:37:85:4C:75:7C:A3:4B:59:3F:94:70:0F:0D:02
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/ddztps0hN4VMdXyjS1k_lHAPDQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.57.0-178.237.58.255
IPv6:
2a0d:5540:1::-2a0d:5540:2:ffff:ffff:ffff:ffff:ffff
2a0d:5540:a::/48
Signature Algorithm: sha256WithRSAEncryption
29:62:4c:27:18:e7:db:1d:02:1e:dd:25:8f:92:1b:e7:9d:e9:
70:10:5f:db:a9:ff:d2:01:ea:87:b1:45:47:5f:20:f0:7f:25:
d8:86:23:79:24:f4:55:d8:fc:57:ad:ec:9b:50:0c:72:7d:db:
7a:3f:52:ce:86:92:aa:5b:b3:91:66:e5:41:d1:9b:57:81:c3:
00:7a:42:86:06:51:33:76:cd:9e:94:30:30:79:98:08:ee:a3:
c4:6d:29:c5:a7:25:32:95:a8:37:2f:52:9d:b0:f5:98:1f:f9:
9d:ed:b1:67:cf:a4:83:a9:60:11:26:dd:50:41:70:92:a6:57:
0c:8e:33:22:70:f1:b0:db:01:ac:e7:d3:c0:b7:0b:99:99:9c:
5e:92:91:c3:36:16:42:0d:f1:e9:c7:88:f1:da:a6:26:52:09:
23:fe:09:4b:2c:16:35:84:94:0e:87:0e:6e:0c:b9:aa:79:e6:
83:21:2b:66:df:e4:e1:b4:fa:20:f4:16:4f:a9:98:47:00:c7:
eb:5c:e2:61:f3:6e:ce:8d:d4:83:df:fc:65:2d:43:bb:e1:73:
89:f4:1c:c8:1d:db:e1:a1:cc:df:a0:1d:f2:80:9b:e2:f8:21:
c1:5f:f4:b9:35:5d:25:b7:61:84:1d:8e:bc:20:bd:cb:49:81:
40:28:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:41 2025 by rpki-client