Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YuR-iarw-B34D_jP1h6haEh810I.roa
File: YuR-iarw-B34D_jP1h6haEh810I.roa (raw, json)
Hash identifier: j9H14fidXLE/10KZ0YgzFFEcNKJYvFmF1mnpZdylWoA=
Subject key identifier: 62:E4:7E:89:AA:F0:F8:1D:F8:0F:F8:CF:D6:1E:A1:68:48:7C:D7:42
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01992DCC42E8A31ECF44A5F011179A83A761
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YuR-iarw-B34D_jP1h6haEh810I.roa
Signing time: Tue 09 Sep 2025 09:26:25 +0000
ROA not before: Tue 09 Sep 2025 09:26:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213356
IP address blocks: 82.153.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:cc:42:e8:a3:1e:cf:44:a5:f0:11:17:9a:83:a7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 9 09:26:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62e47e89aaf0f81df80ff8cfd61ea168487cd742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:06:40:49:da:42:68:f7:84:77:ca:06:9b:
84:c6:1e:4b:da:44:52:69:44:08:e7:1a:98:0f:1c:
7e:b7:ed:18:7e:21:ef:a4:c1:95:28:7f:8f:35:94:
f1:17:a8:ad:d6:c6:ba:de:fd:41:91:bd:55:44:6f:
77:7f:32:c9:5f:1a:21:e4:e8:40:31:76:1c:94:cc:
26:e0:f1:ed:6a:a1:40:d9:ef:f5:42:cc:8f:8f:5b:
33:84:97:2a:fd:a5:11:b3:3d:e2:c5:19:d6:d4:f6:
08:6e:e8:29:11:b4:ce:da:cd:97:80:aa:b0:95:fa:
0a:0f:1b:c2:38:e0:e7:26:48:a7:3c:66:2b:02:52:
51:50:58:f6:47:fc:ed:87:d5:3e:1f:a6:d9:f6:c1:
05:b8:0f:3f:7c:15:c8:64:4e:9e:b0:f9:44:17:9e:
c0:34:0b:6f:6a:fd:0f:3e:02:30:26:8e:f2:d6:e8:
bf:2a:99:56:05:53:1b:23:bc:d3:3a:7c:08:45:8c:
85:44:de:16:ac:2b:48:2a:77:dd:65:24:1e:c9:2e:
36:94:a7:bc:a2:75:54:b5:26:67:5c:6e:72:b0:df:
12:b9:27:d3:73:72:be:01:f7:ba:53:5a:28:31:4e:
79:4e:24:d3:d1:57:35:c6:15:ca:af:20:84:ad:d5:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E4:7E:89:AA:F0:F8:1D:F8:0F:F8:CF:D6:1E:A1:68:48:7C:D7:42
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/YuR-iarw-B34D_jP1h6haEh810I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:aa:5c:74:16:60:d3:64:37:ce:e7:98:26:63:37:68:c6:de:
18:88:51:36:cc:61:10:9b:fc:f5:85:1a:09:31:2c:6b:a5:07:
f5:d2:01:a4:9a:f8:7c:78:25:5c:4a:c9:14:6d:8e:84:fa:f1:
83:af:1e:38:4e:28:09:76:65:b9:bb:0c:e5:20:9c:61:e5:9d:
25:bb:0d:9e:87:9e:31:b0:64:31:df:a8:9c:9c:e8:b2:f0:0f:
3f:ea:ad:a5:38:9f:84:73:17:5c:dc:80:ef:2f:7d:b0:1b:30:
44:b3:32:27:6e:f0:95:02:35:7a:4d:00:0a:5a:e3:5f:c4:1b:
01:09:f9:2d:2f:bc:30:ef:23:22:28:7f:3d:89:d8:44:6d:3e:
9f:13:1c:a5:f7:9f:0b:b3:13:19:06:ab:03:6b:d3:45:41:da:
ff:5f:96:e7:5d:4b:1d:bb:e0:f8:ca:25:d6:2c:a6:3c:a1:ec:
e4:b0:65:c9:fc:79:cc:61:f5:3b:9f:b5:77:5a:c8:5d:dc:93:
85:9f:25:3b:76:32:5c:f4:76:73:f8:2f:f9:ab:ad:91:97:59:
be:6c:e0:c7:52:a6:1f:36:76:96:31:0c:c7:1e:69:d4:cd:53:
27:a6:5f:df:1c:ff:73:9f:46:27:bc:ea:9d:c1:bf:f5:74:23:
42:9a:10:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZktzELoox7PRKXwEReag6dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTA5MDkyNjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmU0N2U4OWFhZjBmODFkZjgwZmY4Y2ZkNjFlYTE2ODQ4N2NkNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRkGQEnaQmj3hHfKBpuExh5L2kRS
aUQI5xqYDxx+t+0YfiHvpMGVKH+PNZTxF6it1sa63v1Bkb1VRG93fzLJXxoh5OhA
MXYclMwm4PHtaqFA2e/1QsyPj1szhJcq/aURsz3ixRnW1PYIbugpEbTO2s2XgKqw
lfoKDxvCOODnJkinPGYrAlJRUFj2R/zth9U+H6bZ9sEFuA8/fBXIZE6esPlEF57A
NAtvav0PPgIwJo7y1ui/KplWBVMbI7zTOnwIRYyFRN4WrCtIKnfdZSQeyS42lKe8
onVUtSZnXG5ysN8SuSfTc3K+Afe6U1ooMU55TiTT0Vc1xhXKryCErdXs9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLkfomq8Pgd+A/4z9YeoWhIfNdCMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvWXVSLWlhcnctQjM0RF9qUDFoNmhhRWg4MTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUplPMA0G
CSqGSIb3DQEBCwUAA4IBAQCkqlx0FmDTZDfO55gmYzdoxt4YiFE2zGEQm/z1hRoJ
MSxrpQf10gGkmvh8eCVcSskUbY6E+vGDrx44TigJdmW5uwzlIJxh5Z0luw2eh54x
sGQx36icnOiy8A8/6q2lOJ+Ecxdc3IDvL32wGzBEszInbvCVAjV6TQAKWuNfxBsB
CfktL7ww7yMiKH89idhEbT6fExyl958LsxMZBqsDa9NFQdr/X5bnXUsdu+D4yiXW
LKY8oezksGXJ/HnMYfU7n7V3Wshd3JOFnyU7djJc9HZz+C/5q62Rl1m+bODHUqYf
NnaWMQzHHmnUzVMnpl/fHP9zn0YnvOqdwb/1dCNCmhCf
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:02 2025 by rpki-client