Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IAyyLdxHz3YdBANtovmGzANDrrc.roa
File: IAyyLdxHz3YdBANtovmGzANDrrc.roa (raw, json)
Hash identifier: MRoaFLH5PnLEX9HYFh9u7zd0IcustHRrURqhCqrd+kw=
Subject key identifier: 20:0C:B2:2D:DC:47:CF:76:1D:04:03:6D:A2:F9:86:CC:03:43:AE:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0197BF8C7599709F0898DF17EEB279E42377
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IAyyLdxHz3YdBANtovmGzANDrrc.roa
Signing time: Mon 30 Jun 2025 06:35:42 +0000
ROA not before: Mon 30 Jun 2025 06:35:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.231.156.0/22 maxlen: 24
194.231.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:8c:75:99:70:9f:08:98:df:17:ee:b2:79:e4:23:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 30 06:35:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=200cb22ddc47cf761d04036da2f986cc0343aeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:aa:90:c1:4b:9f:a5:4e:c9:53:08:21:5c:
92:95:ac:e0:34:d6:f3:28:12:30:50:d9:ba:db:c3:
82:2c:0e:c9:34:57:df:35:3a:7b:26:ed:b8:e7:4e:
94:8a:78:7d:33:0a:fa:f4:b6:83:e7:76:ab:e7:41:
e7:b7:de:2f:29:4a:4d:03:1c:f6:76:c6:60:24:3c:
84:a1:c9:6f:66:a9:ea:43:96:65:22:06:62:26:57:
1d:8c:90:47:92:2c:24:ae:6e:88:73:40:d2:14:8a:
d9:25:7c:1d:8e:24:37:be:1c:04:fa:01:9c:c5:df:
64:e5:33:81:dc:bc:24:52:03:20:fc:0a:e5:ab:7c:
c6:88:e8:13:e7:82:8b:57:c6:25:72:c5:67:87:9d:
f1:4c:5d:26:75:ec:09:9b:9a:60:06:bd:26:b4:24:
2d:b0:28:84:45:ca:b5:d1:e4:bb:0f:92:7f:61:8a:
54:9e:f2:9f:40:f6:f5:7a:ec:20:d5:d2:10:c7:89:
e0:20:57:92:12:dc:6c:ee:28:63:ea:4b:1c:be:72:
27:0b:e7:ba:4c:5d:c8:e7:fe:f8:ee:c1:51:82:3b:
7e:ee:66:4e:44:c6:2b:93:a8:bb:dc:d8:b2:ae:3a:
9a:24:51:76:91:03:d1:76:2b:b5:ab:8c:9a:72:5d:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:B2:2D:DC:47:CF:76:1D:04:03:6D:A2:F9:86:CC:03:43:AE:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/IAyyLdxHz3YdBANtovmGzANDrrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.156.0/22
194.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:ed:da:38:2b:9c:d0:b7:df:3d:81:ce:86:ca:59:a0:f8:d6:
a9:0b:c0:b2:a7:3d:c5:52:46:42:e2:fd:fe:47:4d:9c:56:15:
8e:20:30:c4:df:07:a9:54:34:11:80:2e:40:b9:53:be:c7:3c:
eb:3d:a4:50:c7:96:19:ab:d9:ac:a4:69:12:0d:36:d8:fc:14:
a7:9f:c0:f2:a8:b7:ac:26:29:29:7e:36:61:3f:7c:41:bc:4c:
b6:35:79:5b:0c:98:ba:aa:1c:cf:ee:dc:46:c4:15:de:3d:4f:
d5:5d:a9:77:2b:e3:1c:a1:27:b3:57:39:3e:b9:ee:18:85:52:
24:20:d8:1d:35:d8:7a:9b:02:db:c1:d2:e8:a5:10:c0:81:11:
48:c8:18:5e:a9:7b:5d:5f:eb:fc:73:1e:2a:e6:93:80:2f:cd:
36:16:25:80:d8:d5:7d:88:9c:04:c4:2d:e6:09:23:28:89:69:
8f:e0:b7:30:87:ce:9b:ea:fb:92:49:8b:f1:b0:aa:26:cd:37:
a0:72:59:9a:99:2c:71:e9:ae:a8:39:a5:59:6e:33:bb:fd:c7:
66:90:f4:57:bc:51:d0:fe:29:a9:09:42:bc:af:4c:bd:1a:52:
9f:fa:91:0b:61:58:39:b7:06:a4:ce:37:f8:ad:29:b7:1c:87:
fb:59:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 22:07:26 2025 by rpki-client