Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/yyVSocue_VD1x2HepimmN6bExsc.roa
File: yyVSocue_VD1x2HepimmN6bExsc.roa (raw, json)
Hash identifier: 6+QKFhEGkikap65WiEFQ9q79rIkGnFuCa6iQx/4KnWI=
Subject key identifier: CB:25:52:A1:CB:9E:FD:50:F5:C7:61:DE:A6:29:A6:37:A6:C4:C6:C7
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 01985599B390882EC819625E3B918C40E856
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/yyVSocue_VD1x2HepimmN6bExsc.roa
Signing time: Tue 29 Jul 2025 09:53:13 +0000
ROA not before: Tue 29 Jul 2025 09:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199744
IP address blocks: 185.48.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:99:b3:90:88:2e:c8:19:62:5e:3b:91:8c:40:e8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jul 29 09:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2552a1cb9efd50f5c761dea629a637a6c4c6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:b1:5a:7b:42:c7:75:9a:e5:63:42:f9:71:
1e:77:bc:e6:16:5b:6b:f3:9d:67:67:2d:7d:5b:57:
cd:4f:e5:34:3a:c7:f2:0f:18:6f:46:3c:87:0e:6b:
a4:e1:91:01:89:fb:98:1b:49:05:47:ce:ff:ff:1f:
53:8b:75:f0:6b:51:10:04:d8:fa:4c:5a:75:62:14:
77:0d:c2:66:a3:d7:a5:05:74:34:6f:e5:0a:22:b9:
06:9a:b4:00:ca:b5:18:3f:bf:df:09:41:d1:b1:21:
46:2a:af:73:9e:37:19:0c:f4:9e:91:29:dd:71:a4:
73:6c:b3:58:50:61:af:24:31:4f:3b:ac:d0:52:5e:
86:c0:8a:bb:a5:ad:53:19:12:58:1a:07:ed:3c:00:
54:ea:92:1c:33:d1:24:ce:e3:4c:a6:36:9e:b5:00:
e2:87:3c:72:4d:67:40:fe:4a:64:d2:1d:7b:aa:ce:
ad:f8:e9:bf:df:b6:4e:63:ae:c2:d3:25:9e:83:05:
60:13:6d:5f:1c:26:16:06:8e:8d:49:87:4b:8b:93:
2c:2c:02:7b:b6:1a:92:57:b0:0d:ef:c5:85:71:21:
c8:15:9b:71:f6:53:fd:7b:3e:23:5f:67:f4:f3:35:
b7:24:e9:77:29:4d:3c:7f:2f:9a:91:d0:c8:a6:66:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:52:A1:CB:9E:FD:50:F5:C7:61:DE:A6:29:A6:37:A6:C4:C6:C7
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/yyVSocue_VD1x2HepimmN6bExsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.143.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:f0:af:5f:79:9b:9f:57:82:de:1d:16:9b:3a:63:eb:99:
8f:89:21:97:40:3b:f8:27:74:59:53:09:9c:bb:1c:9c:a6:45:
e1:5d:3b:ea:25:1a:53:d9:72:0b:59:52:a5:0d:d3:a9:dc:a0:
9c:28:db:16:b9:6a:c4:b2:62:da:1b:12:7f:18:86:7f:1a:c0:
8d:1b:41:5d:09:fe:74:eb:83:cd:16:21:8a:11:1a:37:e9:10:
2a:ca:5e:28:16:3b:5b:7f:3d:0f:0d:89:7f:8a:8b:35:17:ce:
0a:71:c3:ff:bf:06:61:07:c9:97:38:01:5e:f1:c2:37:94:cd:
28:c6:c5:ab:50:b4:f0:e0:b5:19:b5:28:01:b2:2e:35:57:25:
55:b4:21:8f:28:00:33:45:d1:db:26:d8:47:f5:61:9c:1e:9d:
8d:18:83:8f:70:53:d3:0f:14:20:67:cb:06:75:e9:d4:32:ae:
56:56:cd:e1:a8:ed:44:35:75:89:70:95:86:5c:6f:a5:06:22:
7b:9c:6d:5a:a0:35:01:e2:27:12:85:da:37:f7:24:96:c6:e2:
22:02:95:4f:2d:0e:57:f0:17:b8:97:74:fe:4e:0b:34:74:b5:
48:e1:65:7e:86:b0:12:f4:1a:09:98:c9:97:3d:a6:4d:63:b3:
b0:09:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 23:16:37 2025 by rpki-client