Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yan0qAvm9qpaecRrD9w3szqLXh0.roa
File: yan0qAvm9qpaecRrD9w3szqLXh0.roa (raw, json)
Hash identifier: rVQUUVkc6b6fL2pSHSU/Dz68bILCPH0/nBhPBA58jeg=
Subject key identifier: C9:A9:F4:A8:0B:E6:F6:AA:5A:79:C4:6B:0F:DC:37:B3:3A:8B:5E:1D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0197EDC2627B256390338F54B5F69CACB190
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yan0qAvm9qpaecRrD9w3szqLXh0.roa
Signing time: Wed 09 Jul 2025 05:57:08 +0000
ROA not before: Wed 09 Jul 2025 05:57:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 185.92.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:c2:62:7b:25:63:90:33:8f:54:b5:f6:9c:ac:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 9 05:57:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a9f4a80be6f6aa5a79c46b0fdc37b33a8b5e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:f6:74:ca:80:cb:07:e9:31:b5:7d:45:fc:
e0:3d:f1:e0:df:09:3c:49:2a:43:0d:6c:1c:53:89:
4e:b1:9a:c2:92:84:45:55:2f:f4:35:09:7e:08:dc:
06:51:a4:1c:ac:06:78:16:6e:c6:55:0d:1f:67:13:
40:d4:6f:82:95:81:92:94:96:4f:26:88:14:7b:8a:
9b:04:ce:fb:70:5f:dc:2c:c3:45:f1:72:55:a5:17:
cc:16:66:eb:b5:07:3f:40:00:5f:89:5c:e6:3e:eb:
72:b8:af:bd:df:e4:e8:2b:e0:7c:f0:52:96:c3:c3:
13:87:39:b1:8d:26:f4:52:83:c2:36:e0:d8:dd:e4:
30:9b:30:2c:84:32:9b:16:e3:23:5e:7b:57:40:b5:
86:04:99:89:89:12:2d:9d:4f:7c:34:71:a4:7c:b5:
27:f8:80:cd:f5:e8:64:a8:30:66:1c:69:bc:d4:98:
1e:9a:76:e5:5c:fe:9a:d3:b0:6c:02:66:22:a2:de:
34:8f:14:df:24:e4:52:16:32:46:93:cc:45:9d:1a:
af:a3:6c:6d:a3:60:ea:d8:66:87:96:03:d5:58:ec:
a4:4c:ce:fb:a7:1a:a2:a3:41:02:45:c7:20:89:05:
e1:d3:44:d9:67:8d:af:1d:86:c3:d9:98:4f:38:82:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:F4:A8:0B:E6:F6:AA:5A:79:C4:6B:0F:DC:37:B3:3A:8B:5E:1D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yan0qAvm9qpaecRrD9w3szqLXh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
24:37:b1:ec:ac:8b:13:19:e7:cc:c2:1d:90:56:00:26:39:31:
71:16:6b:18:44:6e:38:67:c6:c2:35:70:17:69:33:d5:a3:6e:
35:a5:b7:b7:b1:71:15:70:08:06:14:5a:72:dc:1b:cc:48:d2:
3d:c2:e6:51:8d:1f:0a:80:f9:07:c7:1a:73:ff:20:a2:41:1f:
f4:a6:a9:bc:22:dd:fc:e0:53:c9:2c:42:a4:c6:c1:42:4f:3d:
0f:56:4a:f3:cb:c3:77:31:89:b1:3b:46:a0:14:a5:33:a8:b1:
a6:ac:d0:64:eb:4e:f9:61:60:bd:e6:10:e5:01:88:d7:e7:b9:
56:4b:fc:a6:02:91:bd:03:4e:27:fa:45:93:ff:55:7d:10:69:
db:c2:b8:31:14:be:d0:83:13:00:ac:ea:6f:b1:77:82:9b:ed:
8e:37:e3:ea:e0:89:4c:e7:fa:fe:c0:4d:21:15:29:77:64:7e:
8d:79:25:f8:a7:0d:e2:ed:c2:79:63:c4:28:3b:41:b9:cf:bd:
1b:0f:f4:45:d2:38:a6:e1:70:0a:66:9f:56:bf:30:2c:4b:f2:
24:4c:cd:14:52:60:b2:d9:ae:39:54:b3:18:d2:6b:25:88:20:
1e:43:a4:1d:b3:47:36:4f:ab:f4:6e:82:62:08:45:51:80:c7:
15:30:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:31:03 2025 by rpki-client