Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa
File: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (raw, json)
Hash identifier: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=
Subject key identifier: 21:81:97:F8:A3:FB:4C:DA:18:C9:79:CD:3F:70:86:28:8D:01:50:15
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01997159A1EA66D441C5D3C0C5CCA6BFE962
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa
Signing time: Mon 22 Sep 2025 12:15:23 +0000
ROA not before: Mon 22 Sep 2025 12:15:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 209.131.64.0/24 maxlen: 24
209.131.65.0/24 maxlen: 24
209.131.66.0/24 maxlen: 24
209.131.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:59:a1:ea:66:d4:41:c5:d3:c0:c5:cc:a6:bf:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Sep 22 12:15:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218197f8a3fb4cda18c979cd3f7086288d015015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:15:e2:5e:65:10:20:e5:0a:1e:78:84:3c:
31:c3:81:d7:1d:30:b2:6f:9c:51:75:6a:be:df:ee:
0d:20:37:5d:bc:7d:75:1e:66:bf:16:cb:62:27:06:
56:52:ea:79:81:18:e6:73:45:cd:50:1d:12:00:b1:
87:14:37:17:4a:33:0a:e0:32:f6:4e:9e:d8:f0:47:
bf:2e:17:ca:0c:9c:b2:58:77:a0:fc:75:6c:79:7b:
a3:b9:6d:c2:79:a4:3d:95:b6:98:9d:0a:b2:f3:b5:
da:af:a1:30:f5:d8:69:b0:f0:00:fb:6b:c3:c4:5a:
6a:f6:da:0f:0e:10:d5:f0:74:53:f0:8b:fc:2c:01:
f1:21:ba:9a:af:a6:d8:10:41:02:a1:d4:b8:9b:8d:
51:4c:e0:c6:62:98:81:f0:81:03:c6:5d:94:86:6e:
db:15:f9:ca:f5:16:65:72:20:01:f0:cd:bc:4e:2f:
70:f7:50:99:d2:d8:89:38:1c:75:3e:6a:19:25:79:
b6:90:7e:e0:fa:9e:8b:3f:80:fa:57:d4:57:de:0b:
3d:8e:83:08:ec:32:0a:2c:d8:cd:00:85:55:2e:6a:
a5:e3:b2:34:39:8c:d4:b1:3a:9c:10:93:c6:60:1f:
48:61:5b:d3:2f:65:54:17:46:ca:f5:5e:a9:76:83:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:97:F8:A3:FB:4C:DA:18:C9:79:CD:3F:70:86:28:8D:01:50:15
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.131.64.0-209.131.66.255
209.131.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4b:6b:74:5e:1c:ca:5a:88:39:01:13:c9:4f:96:de:ab:49:
26:e7:5f:6e:ef:52:40:f9:cf:61:c4:97:56:1c:99:e1:78:5b:
05:e9:79:f4:5c:2e:d0:28:46:89:bd:89:ef:43:18:e3:e4:f3:
29:dd:44:9d:12:e5:b9:1f:11:5f:fb:61:67:39:b1:09:60:7c:
b2:bd:55:76:7d:65:86:2e:aa:77:1e:6a:37:a9:87:fe:5c:2d:
fe:5d:f5:96:d0:4f:c4:3c:f5:48:17:16:8d:fc:56:32:0e:43:
2d:10:9d:e4:13:c8:0d:e8:a8:67:fc:b1:e3:0a:c7:7f:4e:48:
16:00:e2:f1:12:d2:f9:62:8c:c9:8f:ff:d2:1e:49:c6:92:78:
4c:c5:d5:72:82:c5:b1:79:06:c9:55:53:4c:8a:5d:0d:1d:e9:
95:94:3d:52:f3:72:df:e2:1b:ec:93:77:be:b3:a6:66:47:83:
2d:da:82:02:8c:a7:7e:b0:ea:2e:0b:a1:2e:8b:f1:e0:2b:52:
86:6d:b9:fc:ca:ed:91:30:d8:4d:77:e0:dc:ca:00:9e:70:bb:
12:7c:47:9b:00:d1:98:6b:2c:48:9f:e8:4d:2a:36:3b:4a:b9:
1a:21:af:f2:4e:48:2b:4c:c3:4b:ec:ff:ac:95:7a:2a:db:a0:
f6:06:08:b7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZlxWaHqZtRBxdPAxcymv+liMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjUwOTIyMTIxNTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTgxOTdmOGEzZmI0Y2RhMThjOTc5Y2QzZjcwODYyODhkMDE1MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03EV4l5lECDlCh54hDwxw4HXHTCy
b5xRdWq+3+4NIDddvH11Hma/FstiJwZWUup5gRjmc0XNUB0SALGHFDcXSjMK4DL2
Tp7Y8Ee/LhfKDJyyWHeg/HVseXujuW3CeaQ9lbaYnQqy87Xar6Ew9dhpsPAA+2vD
xFpq9toPDhDV8HRT8Iv8LAHxIbqar6bYEEECodS4m41RTODGYpiB8IEDxl2Uhm7b
FfnK9RZlciAB8M28Ti9w91CZ0tiJOBx1PmoZJXm2kH7g+p6LP4D6V9RX3gs9joMI
7DIKLNjNAIVVLmql47I0OYzUsTqcEJPGYB9IYVvTL2VUF0bK9V6pdoNb1QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCGBl/ij+0zaGMl5zT9whiiNAVAVMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvSVlHWC1LUDdUTm9ZeVhuTlAzQ0dLSTBCVUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAbRg0AD
BADRg0IDBADRg0QwDQYJKoZIhvcNAQELBQADggEBADdLa3ReHMpaiDkBE8lPlt6r
SSbnX27vUkD5z2HEl1YcmeF4WwXpefRcLtAoRom9ie9DGOPk8yndRJ0S5bkfEV/7
YWc5sQlgfLK9VXZ9ZYYuqnceajeph/5cLf5d9ZbQT8Q89UgXFo38VjIOQy0QneQT
yA3oqGf8seMKx39OSBYA4vES0vlijMmP/9IeScaSeEzF1XKCxbF5BslVU0yKXQ0d
6ZWUPVLzct/iG+yTd76zpmZHgy3aggKMp36w6i4LoS6L8eArUoZtufzK7ZEw2E13
4NzKAJ5wuxJ8R5sA0ZhrLEif6E0qNjtKuRohr/JOSCtMw0vs/6yVeirboPYGCLc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:29 2025 by rpki-client