Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/yM3VxLDm43j2WFFtLdyhV36CKLo.roa
File: yM3VxLDm43j2WFFtLdyhV36CKLo.roa (raw, json)
Hash identifier: 9bUJueK4QyJ0cAFSTSBWIDQYHaEcmwDUAkzfIlOERVw=
Subject key identifier: C8:CD:D5:C4:B0:E6:E3:78:F6:58:51:6D:2D:DC:A1:57:7E:82:28:BA
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 019A256DC8E43F350DF821BA1F7B3A5A7D0A
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/yM3VxLDm43j2WFFtLdyhV36CKLo.roa
Signing time: Mon 27 Oct 2025 11:29:03 +0000
ROA not before: Mon 27 Oct 2025 11:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202053
IP address blocks: 194.107.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:6d:c8:e4:3f:35:0d:f8:21:ba:1f:7b:3a:5a:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Oct 27 11:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8cdd5c4b0e6e378f658516d2ddca1577e8228ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:3d:dd:72:66:72:e5:ad:54:5e:7f:b8:49:
52:08:f7:03:ce:b2:1b:b2:f6:9b:5b:c7:52:00:ca:
b9:96:f7:0a:bd:49:4e:54:91:4f:22:33:dd:77:d9:
62:5f:e9:eb:94:92:8c:01:58:e3:8b:fe:bb:b3:91:
e8:38:24:fd:48:8e:5d:56:7c:8d:0a:bb:1b:74:ad:
ea:70:78:77:26:c2:64:8c:4a:ca:02:61:27:e6:d7:
f8:fb:e4:2f:32:27:00:be:01:a1:3f:f6:4a:7c:cf:
f5:71:99:a4:1a:02:2c:2a:48:bb:36:01:22:04:24:
3c:c1:a6:28:3f:17:cd:1f:de:af:a4:18:34:ca:8e:
01:fe:97:9a:83:58:68:5b:38:9b:4d:4b:04:15:22:
ea:22:f2:f7:a8:fc:34:d2:58:f2:ee:ac:b1:86:0f:
a2:41:44:28:65:a7:06:1f:54:e7:61:e6:d9:29:c8:
ef:b8:c7:f1:36:c3:23:e4:c9:a9:93:97:4e:17:78:
45:4e:7a:42:8b:c6:6f:f6:0c:6e:47:f3:b9:d7:02:
47:5f:1c:1d:17:bd:29:7f:1d:cb:e5:5a:82:f4:b4:
2e:5e:9a:a5:db:20:ed:23:ff:17:3b:d8:0e:55:4d:
72:92:45:bb:a0:4a:70:3f:f2:2d:a0:9f:62:2f:a3:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:D5:C4:B0:E6:E3:78:F6:58:51:6D:2D:DC:A1:57:7E:82:28:BA
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/yM3VxLDm43j2WFFtLdyhV36CKLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:a7:b3:24:25:6a:fe:7c:62:03:7e:2f:2a:f3:9a:b1:e2:
59:9e:58:c4:31:ef:01:93:9b:54:7f:8d:b6:2f:da:7b:4c:2a:
06:32:ea:74:51:a7:c6:06:cc:9d:08:62:20:07:35:22:7b:27:
7e:c0:a7:0d:52:99:de:db:e9:34:98:e5:ff:25:47:c5:9b:3d:
30:ba:69:ee:8f:0c:d0:be:ed:40:98:f9:a4:4e:df:85:70:3d:
50:9d:e7:ec:98:bf:34:a8:0f:29:84:fa:66:69:9d:e3:13:e8:
3b:a9:79:4b:d6:28:a8:cf:4d:1b:51:f4:61:dc:4b:3e:a2:e5:
c4:fa:f1:bf:87:42:68:f2:1f:0d:19:39:e1:ad:57:6f:e1:9b:
c4:24:06:41:26:95:b3:a8:6a:2a:3f:5f:1c:0a:d0:06:42:71:
a9:7c:9d:bc:d0:25:72:08:d6:d8:fa:d9:05:ba:e2:25:1f:4e:
9b:f0:7d:b2:0c:8e:61:d2:53:3e:4c:9b:89:33:36:f0:fe:8a:
d5:dc:13:08:78:9f:c1:60:70:7c:a2:41:66:2d:6f:69:50:e7:
4f:f2:92:71:80:e2:7b:9e:a4:41:bc:fd:67:90:f1:3c:2c:ab:
ae:23:f0:f8:09:de:ab:a6:4c:49:6a:96:9a:10:94:3f:51:2a:
1c:c6:24:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZolbcjkPzUN+CG6H3s6Wn0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh
YWE0NjUwHhcNMjUxMDI3MTEyOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGNkZDVjNGIwZTZlMzc4ZjY1ODUxNmQyZGRjYTE1NzdlODIyOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAM93XJmcuWtVF5/uElSCPcDzrIb
svabW8dSAMq5lvcKvUlOVJFPIjPdd9liX+nrlJKMAVjji/67s5HoOCT9SI5dVnyN
CrsbdK3qcHh3JsJkjErKAmEn5tf4++QvMicAvgGhP/ZKfM/1cZmkGgIsKki7NgEi
BCQ8waYoPxfNH96vpBg0yo4B/peag1hoWzibTUsEFSLqIvL3qPw00ljy7qyxhg+i
QUQoZacGH1TnYebZKcjvuMfxNsMj5Mmpk5dOF3hFTnpCi8Zv9gxuR/O51wJHXxwd
F70pfx3L5VqC9LQuXpql2yDtI/8XO9gOVU1ykkW7oEpwP/ItoJ9iL6PxJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjN1cSw5uN49lhRbS3coVd+gii6MB8GA1UdIwQY
MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt
NmFkMzI1MmExNDI3LzEveU0zVnhMRG00M2oyV0ZGdExkeWhWMzZDS0xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3
LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmu0MA0G
CSqGSIb3DQEBCwUAA4IBAQAqpqezJCVq/nxiA34vKvOaseJZnljEMe8Bk5tUf422
L9p7TCoGMup0UafGBsydCGIgBzUieyd+wKcNUpne2+k0mOX/JUfFmz0wumnujwzQ
vu1AmPmkTt+FcD1QnefsmL80qA8phPpmaZ3jE+g7qXlL1iioz00bUfRh3Es+ouXE
+vG/h0Jo8h8NGTnhrVdv4ZvEJAZBJpWzqGoqP18cCtAGQnGpfJ280CVyCNbY+tkF
uuIlH06b8H2yDI5h0lM+TJuJMzbw/orV3BMIeJ/BYHB8okFmLW9pUOdP8pJxgOJ7
nqRBvP1nkPE8LKuuI/D4Cd6rpkxJapaaEJQ/USocxiSv
-----END CERTIFICATE-----
Generated at Tue Nov 11 19:31:41 2025 by rpki-client