Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/DYFmv5SEYYlddrISWWXVdY1hSCw.roa
File: DYFmv5SEYYlddrISWWXVdY1hSCw.roa (raw, json)
Hash identifier: TKf7tOlhVLq0cOqQ0nNkYPFgdP68RF3GWaqOQkMnAHw=
Subject key identifier: 0D:81:66:BF:94:84:61:89:5D:76:B2:12:59:65:D5:75:8D:61:48:2C
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0198C86E1E4C9CA28DE9078E8FB49156AA25
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/DYFmv5SEYYlddrISWWXVdY1hSCw.roa
Signing time: Wed 20 Aug 2025 17:01:56 +0000
ROA not before: Wed 20 Aug 2025 17:01:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213250
IP address blocks: 45.155.172.0/22 maxlen: 22
2a0f:580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:6e:1e:4c:9c:a2:8d:e9:07:8e:8f:b4:91:56:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Aug 20 17:01:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8166bf948461895d76b2125965d5758d61482c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:17:7e:20:aa:95:b3:a4:97:92:3f:db:d7:
b5:5e:55:10:e2:83:02:e9:66:88:44:58:c7:78:2e:
13:42:9b:62:d1:e7:da:a8:8c:fe:6b:c0:5b:2a:90:
7d:c5:57:e9:88:17:ca:68:da:53:92:c8:f9:0b:ff:
df:2f:63:2a:06:3a:c2:35:3e:2c:8a:11:a5:74:25:
da:6b:7a:77:97:2e:6d:f7:8c:30:1a:d7:64:fa:d3:
ba:f3:c1:dd:0f:bd:ae:4f:dc:b8:be:dd:fd:fc:6b:
3c:1e:74:bc:b4:f5:95:0d:b1:aa:7b:0b:c9:96:c0:
62:e5:e3:70:c9:5b:77:83:d4:bb:6c:cc:69:5d:fe:
ae:74:54:51:91:15:ea:60:ba:55:15:6c:8a:a2:22:
5d:43:6f:db:73:e2:4b:86:59:21:7f:c7:e9:87:f3:
81:7a:55:2e:e9:63:e7:b9:37:7c:66:84:10:8f:14:
2c:2d:ee:95:60:b2:9b:5c:1e:8a:6a:48:52:7a:79:
25:f2:4b:0d:67:5b:3e:b3:46:62:9c:e2:b7:25:8b:
b4:80:88:31:8a:c9:7a:e9:e1:4a:95:1b:b9:04:76:
fc:dc:16:e4:b1:67:b2:b3:37:9d:7c:fc:1b:f2:b2:
5e:45:f3:44:a5:16:3b:07:a1:ec:4f:26:d4:09:96:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:81:66:BF:94:84:61:89:5D:76:B2:12:59:65:D5:75:8D:61:48:2C
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/DYFmv5SEYYlddrISWWXVdY1hSCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.172.0/22
IPv6:
2a0f:580::/29
Signature Algorithm: sha256WithRSAEncryption
32:71:a3:12:ba:51:d9:71:39:01:0f:01:20:34:6b:06:65:2c:
3f:1d:8a:0f:18:bf:ac:ec:f1:da:16:0f:c7:34:0d:0d:52:9e:
d2:06:3c:4c:32:2e:de:6a:15:38:d6:f0:d0:4f:2d:f1:2f:76:
55:62:c3:99:f5:1b:e8:95:8c:2a:d5:56:cf:ac:25:5c:4a:d5:
9d:be:67:54:0b:6c:68:c2:53:58:12:c8:3a:9b:1f:da:c6:b2:
34:17:e8:2a:25:d4:f0:3f:b6:a4:35:21:b9:b5:a8:6c:75:e8:
ce:69:94:87:23:7e:4e:69:95:46:9b:55:94:71:32:28:35:7b:
c4:87:a0:75:f2:b3:14:82:ff:5f:c1:e4:5c:35:b8:ed:e9:f9:
af:e0:6d:9f:8a:60:18:0b:ca:37:1c:d5:4c:53:2f:13:16:0b:
50:36:f8:b6:8e:d3:9a:0f:a4:d8:00:81:d8:71:20:1c:dd:4d:
bc:7a:17:76:e7:4b:ec:8f:9d:a3:0b:bf:86:d8:9a:48:44:d5:
92:6f:2d:29:d4:45:56:06:a3:7c:4c:72:8c:87:5a:ea:1c:c8:
a4:13:a3:25:f2:c7:ea:89:7c:86:32:06:ec:2f:57:e1:ab:2c:
a3:cd:79:a7:f1:59:bd:3f:d7:a9:77:a7:43:d2:c9:14:b4:60:
7a:a3:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:40 2025 by rpki-client