Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa
File: y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa (raw, json)
Hash identifier: Bk60cLKzbGKlYVw0cTFXtgYaf3rDfp8I2gvBkNj7UQ0=
Subject key identifier: CB:7C:E2:00:C0:06:F1:7C:60:91:62:1D:56:FD:16:7F:12:0C:AC:64
Certificate issuer: /CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Certificate serial: 019A068FDEC28749A641571C57809296B9AE
Authority key identifier: D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa
Signing time: Tue 21 Oct 2025 11:38:03 +0000
ROA not before: Tue 21 Oct 2025 11:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48812
IP address blocks: 95.129.24.0/24 maxlen: 24
95.129.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:8f:de:c2:87:49:a6:41:57:1c:57:80:92:96:b9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d748ada8a7474f5ad990c981ff6b27ce3de14713
Validity
Not Before: Oct 21 11:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7ce200c006f17c6091621d56fd167f120cac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:57:73:01:6b:f3:6e:fc:3f:a8:98:e0:a1:
b0:34:33:90:1e:e8:eb:e0:5c:4b:95:26:0b:0f:8e:
51:9f:e3:49:d6:92:e2:f5:18:d9:7f:61:87:b7:f3:
c9:c6:d4:7d:0e:ee:83:72:f3:2a:cc:55:89:9d:d1:
b8:5a:55:25:6f:e5:eb:82:e6:3b:3d:69:d4:54:3c:
eb:96:7d:0b:66:41:c4:6e:7b:e3:a3:58:2d:f0:10:
8c:4c:c6:e7:b6:3a:7f:ca:e4:f3:7d:d3:85:98:b7:
d2:46:97:a3:f1:87:c9:c9:75:96:f5:ae:c3:ad:fa:
72:73:86:a0:46:ee:e8:3a:d5:9a:62:7a:25:77:53:
40:9b:77:0f:1d:01:12:5f:68:7b:e6:9d:52:6d:05:
11:76:b2:35:0b:fc:0d:79:65:a5:11:68:76:84:e1:
28:fa:22:52:d5:64:21:cc:62:72:14:ca:e5:c6:48:
86:94:67:30:d7:c3:aa:ff:61:ee:a6:1f:04:48:a5:
cd:c1:34:4f:61:70:ff:f5:27:24:80:28:45:e2:40:
c5:86:02:61:54:76:49:ab:fd:ee:2b:64:1e:2d:fa:
1f:12:16:6b:b0:14:1a:d2:b9:b1:9b:43:ca:9d:25:
db:ee:4c:25:d2:5a:0a:48:07:a6:b2:9c:52:4b:b5:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:E2:00:C0:06:F1:7C:60:91:62:1D:56:FD:16:7F:12:0C:AC:64
X509v3 Authority Key Identifier:
keyid:D7:48:AD:A8:A7:47:4F:5A:D9:90:C9:81:FF:6B:27:CE:3D:E1:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10itqKdHT1rZkMmB_2snzj3hRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/y3ziAMAG8XxgkWIdVv0WfxIMrGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8fc261-bff8-4490-8b69-009739f7e55c/1/10itqKdHT1rZkMmB_2snzj3hRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:26:c2:2f:f7:e0:ad:bd:19:a5:61:79:ed:6c:fa:30:10:ef:
61:7d:ac:89:9d:dc:71:df:27:fb:cb:fe:8b:3c:70:5f:fd:07:
86:4e:77:7b:a3:eb:cb:ad:d3:56:6a:17:f9:f4:53:35:09:75:
c4:e1:9c:e9:3f:ea:ff:25:2b:af:b9:13:97:ab:f9:8a:2c:07:
eb:4c:7e:41:09:d4:de:29:8d:0b:30:a0:c4:85:b4:41:66:df:
48:5f:48:40:67:36:f8:53:1f:55:3e:16:ab:5e:fc:a4:dd:40:
da:54:63:4c:3b:5e:10:ea:46:a0:e9:00:c9:09:88:34:c3:5d:
da:93:f6:9a:c3:bb:25:12:23:e1:cc:8c:7e:73:0e:5b:05:44:
7a:8f:2f:e3:90:de:7d:79:2c:86:bb:29:fa:c7:b6:eb:b0:58:
48:5d:b8:ba:90:b0:fd:70:f9:25:7a:5a:c3:0d:1f:51:56:de:
12:7a:dc:08:39:3d:0a:8d:9f:5b:1c:1d:f2:15:89:e6:3b:e1:
0d:9a:bb:3e:68:59:87:82:19:8b:a6:2c:08:2c:a2:a1:8c:55:
fa:df:9e:1d:c5:ce:2a:98:aa:a7:7a:64:90:d5:c9:a9:28:f8:
49:72:47:c7:e7:d8:b2:aa:d2:5e:f5:00:7c:c7:5e:32:93:a3:
09:26:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:02:37 2025 by rpki-client