Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yd50vm6Ef6nST4hrG2wtFbvYN9k.roa
File: yd50vm6Ef6nST4hrG2wtFbvYN9k.roa (raw, json)
Hash identifier: iCSzcPVpoYFD26uDT5g3uyu/aNHdtpi67sJEC2pIRM8=
Subject key identifier: C9:DE:74:BE:6E:84:7F:A9:D2:4F:88:6B:1B:6C:2D:15:BB:D8:37:D9
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0197F3C478DD3B8358F0C72FD4F3071F16C7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yd50vm6Ef6nST4hrG2wtFbvYN9k.roa
Signing time: Thu 10 Jul 2025 09:57:08 +0000
ROA not before: Thu 10 Jul 2025 09:57:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 213.24.0.0/16 maxlen: 16
213.24.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:c4:78:dd:3b:83:58:f0:c7:2f:d4:f3:07:1f:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 10 09:57:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9de74be6e847fa9d24f886b1b6c2d15bbd837d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:b0:bc:7a:e6:ff:3d:be:51:89:a6:14:5e:
7a:b1:71:93:08:01:c5:37:d9:1c:c4:39:ae:2b:a8:
f8:91:01:68:59:4f:57:e7:cf:c9:88:2a:80:6f:5e:
21:fe:c7:ec:fa:3a:8b:c3:50:c4:a6:de:e5:eb:be:
fd:fc:2a:0a:6c:32:21:51:54:ba:4c:d6:39:f8:46:
f0:c7:3f:e3:d6:30:4d:fa:10:cb:42:46:d5:4b:05:
dc:0b:13:0c:5f:93:fb:aa:bc:07:12:38:75:9c:b8:
4c:cd:e4:89:da:1f:9d:04:9d:85:7a:79:0f:59:d0:
3f:e6:5a:af:4c:df:5a:80:12:98:c5:4b:ab:60:2c:
60:51:e1:6c:d9:c5:c6:fc:5d:72:a3:11:63:98:bd:
dc:17:5f:19:33:6f:c7:39:31:ea:2d:f4:3e:ff:70:
30:dc:9d:4a:a7:36:60:6a:01:69:b9:da:3b:8b:d0:
15:44:49:28:cc:9e:de:bc:2d:a8:7a:19:dc:31:7a:
f7:60:4d:68:23:30:34:f0:f5:ed:50:bd:6d:b0:eb:
4a:15:d9:f5:60:72:6a:c5:33:f2:df:ca:55:3e:83:
bd:31:ae:01:d1:46:aa:12:1f:14:31:21:14:00:fc:
59:05:ab:7b:df:f1:49:39:e8:21:ed:99:af:68:c1:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:74:BE:6E:84:7F:A9:D2:4F:88:6B:1B:6C:2D:15:BB:D8:37:D9
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/yd50vm6Ef6nST4hrG2wtFbvYN9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:e5:76:12:1f:27:09:0f:e8:55:15:0c:3d:c5:e7:f8:c4:94:
91:80:cb:66:06:2c:95:b5:2a:9b:d9:32:4f:0f:bf:c8:71:9b:
91:1c:68:c9:57:07:e7:ff:34:68:51:4a:2a:78:80:b7:f1:37:
42:ac:00:3e:a5:37:fd:3c:25:d8:65:19:88:46:fa:f3:05:a2:
7f:a7:08:ef:c5:1d:ac:9f:31:98:97:a0:03:b8:1a:25:8f:49:
5f:c1:ab:0b:f5:3d:eb:5a:07:11:4b:19:b1:03:a7:65:8a:37:
f3:63:a2:82:10:f6:c3:07:2d:e4:bd:91:14:bc:29:94:ce:86:
75:cc:ea:dc:70:8a:db:49:b0:7f:cc:ef:62:c6:09:32:a7:06:
58:74:3c:52:d9:5a:7c:61:18:97:fa:77:e8:34:8e:0a:53:ac:
02:2d:4c:8e:4b:5c:ca:a4:a0:90:b7:7a:7c:63:92:c0:15:0f:
4e:02:02:6c:47:22:3c:9d:4e:b4:db:9c:b2:e2:64:c5:08:17:
d4:13:14:10:98:fd:61:db:e6:9c:61:7b:a8:62:62:11:7a:39:
54:94:b6:df:d4:ae:76:61:d0:d0:01:8d:06:22:b1:66:02:d1:
eb:69:e7:dd:0f:a3:9e:f0:ea:d7:03:30:27:82:0b:11:d7:d1:
4f:ce:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:01 2025 by rpki-client