Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ywHGgOkBuIFuQ-37IUa_7YfSrIQ.roa
File: ywHGgOkBuIFuQ-37IUa_7YfSrIQ.roa (raw, json)
Hash identifier: 85YMqA7kEUYc+L9EjtFiT9Np9E2n/omhe60VgHOcdbM=
Subject key identifier: CB:01:C6:80:E9:01:B8:81:6E:43:ED:FB:21:46:BF:ED:87:D2:AC:84
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01989E98B539E996F1091A90D056FBE058EF
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ywHGgOkBuIFuQ-37IUa_7YfSrIQ.roa
Signing time: Tue 12 Aug 2025 14:04:24 +0000
ROA not before: Tue 12 Aug 2025 14:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:98:b5:39:e9:96:f1:09:1a:90:d0:56:fb:e0:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 12 14:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb01c680e901b8816e43edfb2146bfed87d2ac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:0a:1a:56:c6:a9:7f:c2:ed:38:d1:59:87:
f8:5a:ed:96:46:71:ba:8f:4a:c6:67:21:06:8d:50:
e9:56:99:de:35:8a:42:94:13:7d:03:c7:06:a9:f0:
39:9e:e6:9e:18:24:92:76:17:1c:c9:f9:b6:7c:95:
7b:28:1b:6f:b4:f3:11:ce:90:b2:e9:77:d1:02:04:
9b:7b:37:9a:32:88:fd:f0:e1:52:5b:9b:3d:ee:47:
37:3d:b3:9a:20:d9:ba:24:8b:d0:07:ea:5d:ba:b6:
05:3d:14:df:86:5b:29:06:29:57:5e:88:c7:82:0b:
22:f9:22:6e:a8:fd:e1:55:a0:7b:17:a3:1b:92:bd:
ea:61:35:83:55:6b:ce:f2:b5:b2:0d:45:96:04:03:
c6:24:f8:33:57:2d:bf:b6:92:c1:3e:cb:72:cc:b9:
22:99:4a:5d:c8:fd:f9:96:49:15:31:fe:e2:d7:ce:
37:ed:2b:72:fc:0b:9f:1d:2f:a2:67:67:ca:c8:79:
85:57:24:dc:60:40:dd:61:5b:17:d5:b6:ad:de:7f:
28:68:35:a0:dc:d4:62:e1:fe:44:c7:03:da:e9:20:
67:5c:c9:54:d8:15:ce:20:a1:a5:e4:02:16:9a:7c:
23:54:10:10:b5:a4:fb:55:92:ae:d5:2f:2e:b7:34:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:C6:80:E9:01:B8:81:6E:43:ED:FB:21:46:BF:ED:87:D2:AC:84
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ywHGgOkBuIFuQ-37IUa_7YfSrIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.29.0/24
Signature Algorithm: sha256WithRSAEncryption
17:20:04:fb:bc:69:a5:7f:d7:1a:57:96:db:71:7a:72:00:ed:
5e:cb:b0:6c:a0:d4:54:d3:5b:4b:cc:cb:96:90:4a:91:11:6c:
81:db:74:90:52:e4:bc:5d:1b:4e:81:1d:bd:ed:4d:4f:2c:8b:
41:e8:f8:ab:89:bb:e1:4a:15:93:93:fa:52:89:01:f4:df:00:
75:2e:7b:73:34:a6:1e:28:fc:82:7d:10:88:87:36:b5:ca:da:
68:3d:0a:d5:41:5d:27:5d:68:37:b0:bd:aa:e8:69:33:0a:03:
39:53:e4:df:c0:15:46:19:c3:17:a5:61:27:dc:7d:bd:a2:03:
9f:e4:1a:65:5d:ff:64:ae:a5:35:e4:ed:82:5e:4a:47:63:fa:
72:5c:7c:aa:07:33:f9:6e:60:7a:5b:9f:0d:c7:ab:a6:a9:02:
63:a8:e7:df:bf:c1:73:e9:1f:31:b4:aa:74:33:87:91:c8:7a:
9c:26:d8:0c:58:4d:50:30:6e:32:da:40:db:7a:c1:a7:1a:c3:
e1:a8:c7:58:7a:81:39:22:ec:f4:58:50:64:13:15:97:ef:a6:
1e:b0:ab:0c:07:2a:14:be:b3:62:a8:34:87:a8:b6:6b:27:3e:
6d:29:4e:39:ac:3e:d3:35:69:28:8f:ce:4f:da:db:aa:c6:f4:
eb:c5:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 14:49:13 2025 by rpki-client