Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YFz6rAUzGpohLtyvc_KB5nklIPk.roa
File: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (raw, json)
Hash identifier: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=
Subject key identifier: 60:5C:FA:AC:05:33:1A:9A:21:2E:DC:AF:73:F2:81:E6:79:25:20:F9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01992545A17F97AC8B70B08137189E2FD502
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YFz6rAUzGpohLtyvc_KB5nklIPk.roa
Signing time: Sun 07 Sep 2025 17:42:24 +0000
ROA not before: Sun 07 Sep 2025 17:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 192.40.69.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:45:a1:7f:97:ac:8b:70:b0:81:37:18:9e:2f:d5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 7 17:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=605cfaac05331a9a212edcaf73f281e6792520f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:87:60:ba:d6:fc:ae:fc:0f:53:70:fc:e8:
44:5d:9f:fc:c0:d8:cc:7b:6f:aa:fd:97:22:80:ce:
5a:9e:a5:7b:f2:01:6e:8d:a4:58:0a:46:b1:bd:57:
02:02:d1:cd:98:7c:d7:e6:ff:3e:ce:89:21:25:48:
3d:4f:f6:94:ed:5d:e3:f9:57:91:8e:d2:35:16:da:
26:d1:89:df:75:53:3d:80:82:bc:13:bc:da:7c:40:
07:7f:4f:37:ef:03:62:62:0c:63:db:6e:b3:5a:4a:
8f:7c:00:bf:11:93:dd:ac:a9:e1:d1:df:be:bc:7f:
2b:61:17:58:ca:51:e5:af:fd:f3:fd:83:bd:11:e7:
80:d9:1c:af:0c:aa:3b:8a:c0:11:e0:96:13:02:31:
ca:eb:b9:4b:4a:44:7d:6d:fe:9e:2e:48:bc:aa:08:
7f:3c:0b:7b:9b:02:f4:49:4a:98:3a:99:e5:92:20:
1e:bd:c9:b8:6a:16:9e:22:1c:6c:4f:dc:2e:b1:b3:
98:b8:01:fa:8f:25:08:c0:5b:79:63:b0:4b:1c:e4:
f7:e8:d1:9d:6a:e7:00:6a:5a:47:c2:89:81:1e:83:
2b:7f:e1:a0:8d:0c:66:11:8e:35:ff:21:fa:6c:dd:
f8:36:18:66:d9:22:85:1b:43:7d:03:d2:66:1e:ed:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5C:FA:AC:05:33:1A:9A:21:2E:DC:AF:73:F2:81:E6:79:25:20:F9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YFz6rAUzGpohLtyvc_KB5nklIPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.69.0/24
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2f:6d:5f:70:69:f0:eb:19:9d:be:be:62:5b:5b:80:f6:40:
83:91:4f:af:b0:4d:29:7b:d9:ff:6b:80:c1:1b:7b:5d:2f:83:
c2:cd:4e:85:9f:7b:8c:c1:4b:23:f7:5a:ad:13:cc:c1:2b:05:
cf:a7:c3:ed:fb:a9:4e:19:ff:70:4c:b7:d8:f9:ba:e1:d3:2b:
97:31:e9:af:8d:da:33:5c:ee:51:09:90:d0:89:3b:22:0c:f1:
8d:f7:49:cf:53:ac:23:f0:50:4d:96:78:41:97:75:e4:10:a5:
f4:d1:f2:28:d6:fe:57:24:b4:e8:5e:e4:eb:48:02:40:e2:eb:
42:bf:2f:66:b7:10:07:a3:df:c2:6d:fd:7c:fb:e8:bf:68:ea:
d5:82:de:a6:eb:99:7c:8b:80:18:63:63:27:7b:86:86:4a:58:
98:52:06:6a:ad:22:19:1c:cd:a7:7c:12:f4:7f:cf:ca:11:47:
0f:d2:90:e2:69:e1:fa:27:e4:7a:89:e9:dd:f3:b3:b1:e6:f3:
18:df:da:8b:4c:8d:d5:64:20:0c:b7:28:45:bc:38:5f:48:db:
ad:2a:69:8d:57:16:07:3d:9d:f8:33:1f:3f:e9:53:f7:52:9a:
17:6f:c3:2e:fd:08:69:b0:36:e5:f4:2b:3f:4a:ae:79:92:d5:
50:8b:09:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZklRaF/l6yLcLCBNxieL9UCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwOTA3MTc0MjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDVjZmFhYzA1MzMxYTlhMjEyZWRjYWY3M2YyODFlNjc5MjUyMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSHYLrW/K78D1Nw/OhEXZ/8wNjM
e2+q/ZcigM5anqV78gFujaRYCkaxvVcCAtHNmHzX5v8+zokhJUg9T/aU7V3j+VeR
jtI1Ftom0YnfdVM9gIK8E7zafEAHf0837wNiYgxj226zWkqPfAC/EZPdrKnh0d++
vH8rYRdYylHlr/3z/YO9EeeA2RyvDKo7isAR4JYTAjHK67lLSkR9bf6eLki8qgh/
PAt7mwL0SUqYOpnlkiAevcm4ahaeIhxsT9wusbOYuAH6jyUIwFt5Y7BLHOT36NGd
aucAalpHwomBHoMrf+GgjQxmEY41/yH6bN34Nhhm2SKFG0N9A9JmHu1QlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGBc+qwFMxqaIS7cr3PygeZ5JSD5MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvWUZ6NnJBVXpHcG9oTHR5dmNfS0I1bmtsSVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwChFMA8E
AgACMAkDBwAqFGeAAAQwDQYJKoZIhvcNAQELBQADggEBACsvbV9wafDrGZ2+vmJb
W4D2QIORT6+wTSl72f9rgMEbe10vg8LNToWfe4zBSyP3Wq0TzMErBc+nw+37qU4Z
/3BMt9j5uuHTK5cx6a+N2jNc7lEJkNCJOyIM8Y33Sc9TrCPwUE2WeEGXdeQQpfTR
8ijW/lcktOhe5OtIAkDi60K/L2a3EAej38Jt/Xz76L9o6tWC3qbrmXyLgBhjYyd7
hoZKWJhSBmqtIhkczad8EvR/z8oRRw/SkOJp4fon5HqJ6d3zs7Hm8xjf2otMjdVk
IAy3KEW8OF9I260qaY1XFgc9nfgzHz/pU/dSmhdvwy79CGmwNuX0Kz9KrnmS1VCL
CYY=
-----END CERTIFICATE-----
Generated at Thu Oct 9 00:59:16 2025 by rpki-client