Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKAYESuiA-i7yCgkPAh7Ox7Ux-Y.roa
File: yKAYESuiA-i7yCgkPAh7Ox7Ux-Y.roa (raw, json)
Hash identifier: mU8dsjLMyySV1dNms3MhcFHEyCZfQPjC5zxi4AREKtU=
Subject key identifier: C8:A0:18:11:2B:A2:03:E8:BB:C8:28:24:3C:08:7B:3B:1E:D4:C7:E6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A3455B4866BECBB1B22B7FC10E11E41D8
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKAYESuiA-i7yCgkPAh7Ox7Ux-Y.roa
Signing time: Thu 30 Oct 2025 08:57:03 +0000
ROA not before: Thu 30 Oct 2025 08:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 194.231.142.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/24 maxlen: 24
194.231.204.0/24 maxlen: 24
195.86.149.0/24 maxlen: 24
195.86.150.0/24 maxlen: 24
195.86.151.0/24 maxlen: 24
195.86.152.0/24 maxlen: 24
195.86.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:55:b4:86:6b:ec:bb:1b:22:b7:fc:10:e1:1e:41:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 30 08:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8a018112ba203e8bbc828243c087b3b1ed4c7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:71:27:65:39:4e:f3:63:59:20:3d:9a:b0:
9a:d8:53:e5:19:a9:3c:58:bd:81:9e:d2:b7:9d:05:
be:47:90:85:29:fa:b2:4d:c3:7e:0e:11:b5:ac:ca:
53:34:2b:18:fc:f6:50:5b:b2:d3:c4:34:d3:a8:eb:
0f:c4:37:60:90:09:e7:bc:a1:ea:37:51:0f:4c:4b:
9f:2a:0d:69:2a:ef:1d:4a:30:c6:5b:79:2f:56:77:
a7:9b:d6:9a:07:0a:1c:aa:27:48:67:60:95:3e:64:
b2:b8:28:df:5c:2b:47:42:42:1a:b2:78:b0:d6:d8:
37:03:be:ea:6a:4e:ee:3c:98:ee:c7:fe:9d:42:56:
57:b3:29:a5:e0:42:55:0e:d8:ab:2a:2b:50:19:04:
18:62:fe:b0:40:f9:26:88:9f:f4:6b:99:a1:80:ce:
83:8d:61:d3:50:8e:59:e9:c1:47:dd:82:ec:57:ad:
51:4f:48:6f:fd:c7:2c:86:78:ed:68:1d:62:00:44:
4a:c1:f9:3f:08:2b:64:25:67:6e:ff:58:78:09:19:
94:d4:4f:86:ab:d5:25:d8:39:cd:f8:f9:d9:59:77:
a5:14:ed:b0:0d:75:94:44:f4:11:c1:7d:b4:72:fa:
59:4c:19:2e:dc:cb:f1:93:fb:64:0f:87:13:62:40:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:18:11:2B:A2:03:E8:BB:C8:28:24:3C:08:7B:3B:1E:D4:C7:E6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yKAYESuiA-i7yCgkPAh7Ox7Ux-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.142.0/24
194.231.195.0-194.231.196.255
194.231.204.0/24
195.86.149.0-195.86.153.255
Signature Algorithm: sha256WithRSAEncryption
66:72:28:79:f2:70:8b:c0:9e:7a:19:47:60:85:73:ac:28:9f:
b0:42:11:f8:a8:a5:44:eb:34:0e:fe:e5:d0:df:b5:45:14:c7:
ca:34:24:f8:8e:86:ee:c1:af:a7:a0:28:04:86:01:34:6a:a7:
a3:d5:f1:a7:9f:4b:75:7a:96:9e:2e:90:c2:f6:b7:f1:b4:be:
c9:72:3d:8e:2b:ea:99:a7:39:3e:2f:4f:f5:28:f9:0e:3b:74:
1d:de:c4:cc:ad:d1:73:86:65:28:18:08:f7:10:3f:d1:90:68:
0e:ed:22:95:24:8c:7f:be:d1:c4:34:79:51:d3:1d:ac:86:26:
22:15:29:c8:74:9f:3b:a7:ae:a9:8f:22:a6:97:bf:23:74:dd:
86:4f:9e:aa:0c:b5:74:98:24:38:52:0e:c1:26:ff:19:0d:cc:
d4:9d:48:3f:31:0b:3c:5a:32:04:a4:56:59:c4:6c:45:f7:36:
fc:3a:eb:18:81:87:e2:45:28:53:14:da:00:a2:fa:12:6e:4f:
e6:f3:d6:77:5f:3f:e6:c0:63:03:fe:4c:54:45:18:18:62:03:
9b:f1:37:f3:43:09:ca:60:e3:29:ac:5a:06:a9:21:68:a2:18:
91:df:08:f3:a5:95:38:d1:8e:6e:7b:d2:9b:72:5a:3d:83:46:
0e:f8:32:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:32:55 2025 by rpki-client