Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/YsAD0xYI7fSatmxxWy_MtAq3uA0.roa
File: YsAD0xYI7fSatmxxWy_MtAq3uA0.roa (raw, json)
Hash identifier: +cmsgKhF+fbBw56PZtc3rlBguWm90CrfqJ6VEbk7b+k=
Subject key identifier: 62:C0:03:D3:16:08:ED:F4:9A:B6:6C:71:5B:2F:CC:B4:0A:B7:B8:0D
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 01993859D5EAFC838EE67B5D7CC9F736BF84
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/YsAD0xYI7fSatmxxWy_MtAq3uA0.roa
Signing time: Thu 11 Sep 2025 10:37:15 +0000
ROA not before: Thu 11 Sep 2025 10:37:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202838
IP address blocks: 195.95.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:59:d5:ea:fc:83:8e:e6:7b:5d:7c:c9:f7:36:bf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Sep 11 10:37:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c003d31608edf49ab66c715b2fccb40ab7b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:6e:bc:8a:55:32:b0:17:0a:d0:40:7a:67:
94:31:b6:64:e7:88:c0:24:2e:00:f9:47:11:dd:aa:
7e:e7:c5:2a:38:6a:8c:ec:f8:a0:55:8a:f6:8e:f4:
85:a0:5d:8f:59:16:dd:d1:46:97:df:5f:70:1d:ce:
9a:69:c7:f9:e4:6e:44:0f:83:2f:97:8e:68:51:a6:
a9:d1:ce:5f:d6:48:a9:58:2b:3d:20:d7:70:c9:74:
55:68:07:5e:c5:15:d7:22:5b:9d:3a:59:44:7c:55:
f6:4b:42:49:db:fc:d0:46:df:7f:f4:46:13:c9:97:
a6:04:84:7d:e4:5e:28:89:9f:dc:70:55:97:4e:6b:
a1:21:54:27:a4:24:e5:42:36:2b:35:3b:db:bc:5b:
73:95:dd:fe:35:3d:75:8e:2e:1c:66:65:fd:ea:a9:
15:51:bc:a7:bd:37:f8:54:65:d9:96:d3:fd:9e:63:
f0:ee:8f:15:0a:60:34:cd:7e:b3:a6:0c:11:6c:2f:
eb:28:e1:1e:2f:30:90:eb:6e:13:5f:04:f7:0f:53:
97:2e:02:68:c3:85:9a:29:f6:ab:55:bb:1a:52:45:
ee:81:9a:88:b3:ca:a3:2d:84:94:d1:86:34:28:6e:
6e:63:58:b1:67:34:c9:8e:6d:06:c2:c7:ad:b7:c5:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:03:D3:16:08:ED:F4:9A:B6:6C:71:5B:2F:CC:B4:0A:B7:B8:0D
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/YsAD0xYI7fSatmxxWy_MtAq3uA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:31:1c:79:54:af:92:82:e0:73:f2:64:9a:4a:5b:02:99:4f:
b9:ec:8f:6f:58:de:fb:d6:54:ef:b1:e7:43:d3:36:0a:33:78:
73:b1:a3:e6:b2:62:44:ab:d4:93:d5:6d:ef:3f:91:ca:e5:76:
c5:cc:2d:d7:a6:c8:bf:99:d1:5f:dc:32:96:1c:51:58:12:13:
89:4b:46:c5:7c:d5:1a:59:a7:1d:43:f3:0b:cd:05:c7:60:3f:
a3:8e:c5:0a:ee:a0:92:b3:b1:7f:07:97:5d:57:c0:eb:b6:c5:
62:aa:83:78:0b:90:05:b8:7b:03:d2:b9:73:58:22:7c:33:de:
1e:8e:af:c9:fa:84:d9:fb:dc:e7:94:fa:6c:31:a2:ff:8d:6c:
a0:fd:38:62:92:ab:bb:93:34:40:cf:8c:d7:cb:73:aa:7e:6c:
6e:bd:4e:34:ed:91:0c:4b:30:7b:74:9e:fd:b0:55:0b:0e:f4:
0f:4d:be:95:26:91:aa:05:99:57:d6:eb:2a:77:82:5d:e6:0b:
98:b8:f4:e3:5c:31:a2:92:9d:69:b6:4a:97:02:fe:45:4a:2e:
8e:8e:e0:fe:59:21:50:f6:b1:e7:dd:9d:3d:9f:b1:08:07:79:
58:58:86:61:d6:94:4c:c0:16:6e:d9:d6:84:26:bc:58:6f:56:
05:76:4d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 17:48:35 2025 by rpki-client