Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YobomN8gG6cCeEILhJFM6j7LQv4.roa
File: YobomN8gG6cCeEILhJFM6j7LQv4.roa (raw, json)
Hash identifier: h/RlysHz2QWxd9hwJp7yBUbjSBYdo4e+wp8W5ydiN20=
Subject key identifier: 62:86:E8:98:DF:20:1B:A7:02:78:42:0B:84:91:4C:EA:3E:CB:42:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF07999D060C55D007F3721E8E41A36
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YobomN8gG6cCeEILhJFM6j7LQv4.roa
Signing time: Wed 01 Oct 2025 08:43:03 +0000
ROA not before: Wed 01 Oct 2025 08:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 82.152.6.0/24 maxlen: 24
213.210.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:79:99:d0:60:c5:5d:00:7f:37:21:e8:e4:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6286e898df201ba70278420b84914cea3ecb42fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:2b:b1:dd:85:76:b7:59:2f:9e:f0:46:0e:
bf:40:35:31:19:61:0e:7d:4d:b9:31:20:c1:b5:d6:
6f:a4:ae:51:60:a7:d1:2d:fa:2b:85:37:50:dc:7b:
7b:cb:5c:57:59:7e:de:a3:76:3f:78:9b:be:6f:11:
1d:f0:2b:52:09:a9:9f:f6:e4:de:e7:cf:db:db:4a:
8b:4d:da:84:4e:82:7f:ec:46:60:7b:3e:14:74:58:
80:f8:49:33:d2:6a:a9:91:2a:cc:7c:72:12:a1:31:
59:ad:0e:c8:51:2c:ba:02:58:f1:ff:16:94:23:52:
4a:4a:df:1b:52:9f:42:c5:08:84:0a:6f:dc:ab:5c:
e7:bf:ba:30:2c:4c:ef:47:a8:b0:59:23:f7:0f:fc:
6b:b2:f7:a4:98:b7:f4:d3:55:2d:c3:7c:43:fb:ba:
8e:e6:38:17:e3:f4:5d:46:b9:d3:c2:e2:8a:7b:36:
97:a6:be:df:e2:2b:ee:6e:2c:2c:33:4d:1d:71:68:
e0:fd:cc:0a:77:ff:f2:9e:61:56:61:24:f2:4e:3b:
a1:cd:01:16:18:77:5b:9e:63:de:b8:b8:bf:dc:70:
44:62:5e:00:c8:d2:7b:2b:cf:72:85:90:dc:97:52:
4f:3e:8a:91:3d:ad:c9:ea:ac:ef:d5:db:f0:4c:49:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:E8:98:DF:20:1B:A7:02:78:42:0B:84:91:4C:EA:3E:CB:42:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YobomN8gG6cCeEILhJFM6j7LQv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.6.0/24
213.210.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:40:9e:a0:d3:94:a9:48:92:8e:c2:01:6e:e9:18:c6:23:0a:
9a:3d:ff:16:8d:0e:52:69:0f:aa:da:b4:b5:af:18:c3:29:7d:
56:68:5a:37:34:f1:ed:10:cd:70:a8:14:00:0f:28:4e:a3:97:
ec:54:c1:27:6b:2d:f0:b8:e1:86:fb:3d:ea:90:44:3b:0b:38:
44:ee:7b:3a:c8:3b:da:a6:d2:6c:42:73:f8:6b:6e:a3:53:83:
a3:bb:12:2d:58:19:90:98:f8:55:d9:17:cf:8b:d8:8a:2a:87:
74:82:9d:43:fa:14:4f:fc:d0:82:6c:d1:f1:2e:18:5a:7e:bc:
96:5c:bd:b7:e8:91:d0:9c:ee:05:fe:44:5a:b3:c9:46:4e:f1:
37:cf:3c:02:37:8f:ff:8c:67:a5:80:41:e2:84:34:68:82:3a:
ce:97:7e:a3:b6:eb:d5:b7:0b:1b:47:2f:e3:74:d7:fc:68:d5:
1a:7e:ce:b7:83:e0:9b:1f:36:c1:44:ee:d8:5a:a2:e8:05:ab:
3f:6f:72:d2:49:d4:8f:88:56:92:54:d9:91:87:6d:f2:26:f4:
c9:bd:fb:b6:63:dc:a9:37:5c:3d:eb:08:dd:8b:51:bb:dc:b9:
f4:4e:71:1f:cb:ca:d2:28:51:7e:57:37:24:64:67:02:0d:81:
87:43:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client