Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/y0l08LmHC8QSfP0tR34hSAaY9y8.roa
File: y0l08LmHC8QSfP0tR34hSAaY9y8.roa (raw, json)
Hash identifier: di/b00/E3HvqNjQok6vnEiSRxkUs3SsPM1HST0/CUYg=
Subject key identifier: CB:49:74:F0:B9:87:0B:C4:12:7C:FD:2D:47:7E:21:48:06:98:F7:2F
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 019918E5E6F56C5088D5BE14FCED43558982
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/y0l08LmHC8QSfP0tR34hSAaY9y8.roa
Signing time: Fri 05 Sep 2025 08:02:24 +0000
ROA not before: Fri 05 Sep 2025 08:02:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31305
IP address blocks: 193.151.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e5:e6:f5:6c:50:88:d5:be:14:fc:ed:43:55:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Sep 5 08:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb4974f0b9870bc4127cfd2d477e21480698f72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:9e:1c:c7:6f:99:68:e6:13:e2:07:05:a0:
48:63:26:7d:b7:70:9d:af:e5:2a:a8:46:c3:e8:af:
4f:7a:b7:68:f6:bb:01:c0:39:54:2d:fa:06:2a:f2:
fc:8e:cf:21:ec:aa:62:72:df:0f:fd:54:6d:e4:f7:
fa:7e:78:16:e4:15:f7:9b:58:51:de:58:eb:7b:aa:
97:8b:67:40:f7:81:40:40:3a:ba:bf:f9:85:d1:47:
57:f4:88:84:22:83:d4:03:bb:9d:fa:7b:1c:69:6d:
b2:95:41:34:29:6a:d3:94:7c:a4:4c:cf:79:81:84:
a9:12:7a:45:cb:44:2e:2e:4d:13:12:e7:ee:44:c8:
60:e6:5b:56:21:c1:7f:0a:f6:a0:4e:6e:9f:05:65:
e3:33:d2:2b:1a:7b:0f:d7:83:f8:93:93:15:70:ed:
7b:95:72:d2:00:0b:86:2d:39:24:5b:9e:b0:d2:97:
a2:59:b0:fb:39:18:34:7d:c1:eb:47:66:9b:0c:25:
78:ac:bb:88:d9:a5:d1:ce:d8:73:ea:7c:17:83:61:
a8:5f:d2:9f:f0:73:c6:f5:2a:8c:d6:92:e1:34:ea:
51:7c:ca:2d:c7:48:9e:11:ea:fa:88:30:71:79:d1:
0b:2e:84:f4:85:32:2d:41:b7:0b:f5:2d:37:a4:6e:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:74:F0:B9:87:0B:C4:12:7C:FD:2D:47:7E:21:48:06:98:F7:2F
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/y0l08LmHC8QSfP0tR34hSAaY9y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.12.0/22
Signature Algorithm: sha256WithRSAEncryption
27:06:1c:64:31:d5:51:21:67:f7:55:18:e1:7e:b2:81:35:6f:
db:dc:e2:4e:ce:3f:7d:96:23:cc:32:b5:50:0a:e1:41:14:73:
a1:a4:62:18:52:33:6e:81:bd:ba:c6:84:10:81:39:16:e9:8a:
4d:f5:f4:f5:d7:d7:99:5b:d9:be:78:29:21:1d:56:c3:fe:3e:
8e:02:d3:cd:f2:f2:5e:d6:65:4c:7f:f0:74:9f:dd:a4:b3:e3:
a7:22:57:48:1e:a8:26:d7:78:1a:1e:fb:37:28:f0:be:1e:9e:
5e:ad:d5:47:06:65:fe:24:43:fd:be:36:c1:0d:d7:47:b0:bd:
bf:a7:04:f7:4e:f5:f7:4c:f4:52:f3:20:e8:bf:13:a8:1b:84:
ba:e2:ea:86:c3:64:a5:12:42:11:70:87:b0:1b:ee:5d:ee:51:
c3:0d:61:f2:20:fb:0f:16:60:a6:d5:48:5f:04:49:6b:7c:62:
e9:2f:cc:77:10:49:ce:90:da:b5:eb:01:b6:c9:ce:e0:65:57:
1b:86:a3:09:52:9f:3d:7e:d8:84:0f:e5:c4:7f:9c:de:ae:7d:
dd:f4:31:a1:31:51:69:28:d4:44:af:2d:e6:e0:58:05:8a:a8:
40:69:0c:2a:ee:74:8f:e0:eb:35:8a:da:e5:d9:e4:03:21:08:
b2:10:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:21:49 2025 by rpki-client