Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2YlX2RWuCslsWxDu-0r1t0GNg2A.roa
File: 2YlX2RWuCslsWxDu-0r1t0GNg2A.roa (raw, json)
Hash identifier: N4Yt32DdlDdZlB3+ZxY8PaXDNIcss+wgvtUI8Su/sY8=
Subject key identifier: D9:89:57:D9:15:AE:0A:C9:6C:5B:10:EE:FB:4A:F5:B7:41:8D:83:60
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01993D82F152A99887C7FDE0958EF2EE05F9
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2YlX2RWuCslsWxDu-0r1t0GNg2A.roa
Signing time: Fri 12 Sep 2025 10:40:15 +0000
ROA not before: Fri 12 Sep 2025 10:40:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 194.231.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:82:f1:52:a9:98:87:c7:fd:e0:95:8e:f2:ee:05:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 12 10:40:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d98957d915ae0ac96c5b10eefb4af5b7418d8360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:e1:37:86:b5:26:54:ba:a4:8b:a6:cd:9b:
e4:57:63:39:b6:1d:bf:2d:8e:12:63:fb:69:a7:bd:
4f:31:2a:64:48:cb:bc:2d:1a:d6:dc:47:57:5b:b9:
ad:89:da:11:33:ad:3b:ad:02:90:78:ad:79:81:a1:
b5:88:56:27:53:da:12:1f:0e:03:ea:1a:e0:bb:a8:
d2:93:df:35:1f:a1:b0:df:83:e8:ef:42:8d:2f:f8:
a2:81:3e:f2:52:49:4e:07:e1:eb:38:3f:10:ec:19:
08:fa:04:ae:b5:5d:89:ab:93:87:c1:69:f8:9c:39:
4e:7c:80:96:a8:70:84:f0:83:1b:26:ff:8f:65:f1:
a6:2e:84:bf:48:f5:37:71:f6:77:93:93:32:90:3f:
69:04:ea:aa:12:92:88:80:1c:59:2a:1d:67:77:48:
ee:f8:6a:09:b8:ec:3c:fc:b1:3b:7e:e1:dd:81:9b:
53:f2:c3:4d:c7:0c:45:28:47:c8:95:e3:73:50:a5:
81:00:d9:e9:f0:f6:84:4f:53:37:3f:ee:a0:5f:48:
69:ac:d9:6c:d6:fb:2b:59:05:b6:63:02:a5:aa:a4:
1e:d1:4d:03:8a:a6:d7:c7:be:2b:b3:32:64:84:2e:
35:cd:2d:b9:8e:c1:9f:f6:24:1b:97:3b:fb:56:29:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:57:D9:15:AE:0A:C9:6C:5B:10:EE:FB:4A:F5:B7:41:8D:83:60
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/2YlX2RWuCslsWxDu-0r1t0GNg2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.142.0/24
Signature Algorithm: sha256WithRSAEncryption
93:22:bf:3f:b9:a5:20:a0:0a:02:a9:a8:de:a2:12:20:5b:f3:
d6:f5:7f:12:16:83:97:e6:c4:d5:5d:99:56:08:f4:c1:44:4b:
c5:37:ea:52:49:63:67:49:9e:a1:52:09:a4:eb:a2:d9:8e:51:
83:db:26:db:de:28:96:86:d1:01:2e:3f:3a:23:3b:b8:5b:1f:
a3:77:c1:b2:b9:7c:6a:61:0b:c8:81:68:7d:83:01:b5:7a:fa:
0a:41:66:36:3c:a1:2f:63:6e:17:86:5b:2f:69:90:04:8d:7f:
d7:56:cb:94:94:28:e0:67:a7:b4:4d:7b:09:66:48:42:3a:ee:
7e:48:4f:5e:75:5b:2f:de:1a:6e:a2:b3:71:b8:c8:83:6d:f0:
3a:98:68:38:41:e8:b2:b5:a3:c7:2e:35:80:ab:cc:74:27:1a:
33:be:06:96:28:12:2a:67:79:85:df:3b:a4:4a:ab:73:f1:75:
cf:a1:7a:bc:7f:cb:ad:d1:4d:51:55:27:a9:e6:fd:57:af:aa:
59:18:09:c7:8e:f0:bf:4d:80:03:6e:b9:85:1b:5b:39:26:e2:
52:e4:8a:e2:5c:29:51:b4:88:b9:1f:51:7b:f1:1e:66:3f:c8:
4c:3a:86:5f:88:63:0e:99:d7:a9:35:7d:29:55:8d:6b:20:91:
29:f4:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 22:58:41 2025 by rpki-client