Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yTW90bASwHZeI4yV_g0HwxDDXW4.roa
File: yTW90bASwHZeI4yV_g0HwxDDXW4.roa (raw, json)
Hash identifier: Umd/138F1q1aSdfkPlZxFfW+dIm+U+edvDhCvzupFUM=
Subject key identifier: C9:35:BD:D1:B0:12:C0:76:5E:23:8C:95:FE:0D:07:C3:10:C3:5D:6E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198E2355B8EC6B2A8B17D13A53E7ABF8F7A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yTW90bASwHZeI4yV_g0HwxDDXW4.roa
Signing time: Mon 25 Aug 2025 17:10:04 +0000
ROA not before: Mon 25 Aug 2025 17:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141892
IP address blocks: 212.69.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:35:5b:8e:c6:b2:a8:b1:7d:13:a5:3e:7a:bf:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 25 17:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c935bdd1b012c0765e238c95fe0d07c310c35d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c3:b5:d1:9e:0a:09:69:1e:01:0f:47:31:77:
ac:b4:b7:36:b7:75:f6:d5:cc:9f:da:01:2e:0d:5d:
f4:d7:e7:9c:a8:3a:e9:57:7d:a8:c0:5e:1c:89:5b:
cf:60:77:6d:5b:47:8a:47:85:e5:42:81:41:2a:56:
8d:af:fa:02:aa:92:40:93:13:f4:9a:08:2f:dc:25:
af:df:92:dc:3b:3d:58:ba:1c:b0:c3:f9:a2:e8:b7:
91:fa:32:3f:1d:d9:3b:d9:66:97:76:69:58:b8:80:
e6:c4:40:bb:92:a7:e5:4a:a2:da:4d:58:f8:cf:09:
f7:23:53:1a:e9:ee:f5:db:5e:27:9a:01:88:9d:65:
97:06:f1:b5:61:6e:39:67:78:fe:f3:07:03:aa:7a:
7f:a9:fe:9d:4b:cc:96:45:91:eb:65:8f:0a:33:0b:
0c:79:95:ba:58:df:28:9e:48:82:31:a8:b0:75:74:
20:17:3f:80:25:3c:0b:34:d3:0a:4f:f6:68:74:89:
9c:e0:72:29:07:bb:7c:3e:5a:cc:8b:b7:c9:45:8c:
50:fa:55:19:e0:0d:41:51:6b:a3:20:f9:c6:84:89:
e5:f4:16:93:f9:ff:a3:5e:7c:8d:71:fd:fc:4b:54:
60:cf:61:2a:35:b5:f3:42:f9:f3:69:b2:be:49:23:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:BD:D1:B0:12:C0:76:5E:23:8C:95:FE:0D:07:C3:10:C3:5D:6E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/yTW90bASwHZeI4yV_g0HwxDDXW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1d:fe:81:86:5a:0c:20:08:67:be:d0:60:d9:aa:b8:9e:50:
1b:5d:95:25:ba:df:d4:d0:d1:47:e8:80:09:1b:75:b2:66:3a:
42:92:58:c2:0c:68:e1:85:88:f4:9a:7f:90:75:89:d7:10:dc:
1f:1f:82:46:56:48:cf:c2:6f:a2:c3:20:45:ba:07:f6:6d:25:
fe:8d:52:46:04:29:75:47:89:38:10:26:73:b1:b2:0d:8a:48:
94:1c:6b:b9:da:1d:97:1e:9e:c6:21:a5:bb:d5:60:d7:29:57:
07:90:5b:23:0e:c2:10:1c:81:8c:49:1c:78:b2:61:ad:d0:04:
ee:e4:fe:d1:d5:0a:f0:5c:16:5b:ec:b1:ac:11:71:04:4b:a4:
ce:91:c2:68:26:d2:34:db:3c:28:bc:39:fd:56:b0:66:9f:43:
f9:99:8f:61:fc:17:4a:f2:c3:ef:83:28:cb:3f:a1:d5:3c:d0:
46:c3:33:bb:5d:fd:e5:25:21:4a:35:a4:f9:42:b0:66:d3:7b:
20:b4:ff:05:95:59:29:91:d8:82:57:18:b5:8f:43:fb:09:d7:
a2:7c:56:b5:1e:61:c1:c9:15:7e:70:fd:3f:e0:a6:f4:ad:34:
30:f9:4d:85:64:c4:f3:6a:ec:cb:05:98:ba:ca:ea:f0:bd:d6:
47:d7:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:40:43 2025 by rpki-client