Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/yulwp-3vKKFAdXVOa4nXVzHSFWU.roa
File: yulwp-3vKKFAdXVOa4nXVzHSFWU.roa (raw, json)
Hash identifier: q4+Kq35pmEpGGWwSszRZa770efG6x8cdf3PGbgipeks=
Subject key identifier: CA:E9:70:A7:ED:EF:28:A1:40:75:75:4E:6B:89:D7:57:31:D2:15:65
Certificate issuer: /CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Certificate serial: 0198E6054F11B085D64F1EA05F9DCAC03562
Authority key identifier: 89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/yulwp-3vKKFAdXVOa4nXVzHSFWU.roa
Signing time: Tue 26 Aug 2025 10:56:04 +0000
ROA not before: Tue 26 Aug 2025 10:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210844
IP address blocks: 185.241.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:05:4f:11:b0:85:d6:4f:1e:a0:5f:9d:ca:c0:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Validity
Not Before: Aug 26 10:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae970a7edef28a14075754e6b89d75731d21565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:58:49:13:a2:96:41:a0:f0:57:e7:fb:82:
6e:f6:e2:fd:db:ae:b0:9d:8d:73:27:a0:46:a4:e0:
df:0b:2f:a1:d3:cc:fa:41:50:31:4f:a9:22:4b:b5:
18:3b:53:a9:17:52:d7:9a:6e:4d:d9:58:75:f5:00:
84:0f:71:ce:33:ae:10:6c:61:50:4b:6c:58:21:ba:
73:90:bd:33:c4:90:69:28:13:53:8e:59:14:fa:c3:
e1:36:f0:9b:99:66:1d:f8:1e:e1:fc:53:da:62:a6:
28:52:f8:20:22:66:48:71:4f:a5:58:97:74:46:82:
27:91:5e:cf:77:c9:c6:6e:61:33:6c:99:0e:df:f5:
f9:bb:a4:d2:e2:40:3d:03:1b:27:81:34:69:80:d1:
e5:ac:dc:2b:b5:e7:d3:2f:58:77:63:cf:b0:6d:5e:
cb:ab:dc:41:fc:74:0a:7a:2f:a0:4e:9a:7d:bd:5a:
f3:6e:91:9b:3d:34:c4:db:98:15:e1:6b:f8:c1:58:
4d:cd:88:fd:f8:93:75:c1:91:70:aa:10:c5:0a:9d:
b2:1e:95:7a:da:af:90:af:fd:32:0b:0a:12:6f:9d:
af:43:9e:b7:f6:a8:fc:31:24:e8:aa:ef:f4:25:28:
77:47:00:a8:c5:9e:26:92:ac:3a:4a:e1:94:d9:81:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:70:A7:ED:EF:28:A1:40:75:75:4E:6B:89:D7:57:31:D2:15:65
X509v3 Authority Key Identifier:
keyid:89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/yulwp-3vKKFAdXVOa4nXVzHSFWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ff:af:b0:cb:f8:4b:90:2a:04:bb:7b:b7:11:b8:a8:99:00:
43:8d:9b:d1:e3:60:ad:d5:ed:4d:67:60:14:f7:ba:01:2b:53:
60:a9:51:89:5e:8c:59:06:8d:0b:8e:3b:1f:12:bd:00:a2:d2:
1a:62:b3:46:9e:53:d7:59:6e:bf:2f:19:98:5d:35:17:12:fa:
b8:a3:60:9d:a0:ec:04:74:7b:1e:16:bc:40:b4:51:ff:5e:7a:
05:b2:ee:c6:18:82:d7:36:9c:38:b5:fe:cf:04:99:6a:3a:9d:
02:8d:e6:b2:bb:08:c9:85:d2:ef:93:6a:d5:b9:1e:21:26:2d:
94:a0:6a:75:3a:f8:f7:e2:ad:6f:27:a0:4a:66:73:99:dd:56:
9e:1e:55:ed:15:82:84:26:16:ee:9a:92:90:1e:11:11:a9:97:
61:93:9a:20:ed:8a:bc:97:69:71:7f:18:ea:ae:7e:24:83:99:
95:fd:b0:57:a4:2e:62:64:08:c0:e0:99:a4:79:21:77:a0:17:
31:69:1a:b3:19:95:dc:2b:df:4e:af:a4:59:89:aa:aa:84:70:
20:cb:98:52:06:83:af:18:20:3d:b2:9e:b7:ed:8d:8b:04:cd:
85:f4:c9:0f:96:4e:19:62:1d:9d:b1:01:81:5e:c5:cc:18:4d:
01:a8:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:18:09 2025 by rpki-client