Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YfeK-vJPgPQ0MDc3n13iojvvJFs.roa
File: YfeK-vJPgPQ0MDc3n13iojvvJFs.roa (raw, json)
Hash identifier: 0YpvZ9YslaacVyDT1qMTSvKXwxh1g5yJgjT34CzIVX4=
Subject key identifier: 61:F7:8A:FA:F2:4F:80:F4:34:30:37:37:9F:5D:E2:A2:3B:EF:24:5B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198C2830A5F0DA58E4F95CD03DA4E6DCADC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YfeK-vJPgPQ0MDc3n13iojvvJFs.roa
Signing time: Tue 19 Aug 2025 13:27:04 +0000
ROA not before: Tue 19 Aug 2025 13:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 206.245.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:83:0a:5f:0d:a5:8e:4f:95:cd:03:da:4e:6d:ca:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 19 13:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61f78afaf24f80f4343037379f5de2a23bef245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:0e:34:33:98:50:18:4a:51:98:4a:88:24:
1f:25:98:a8:8c:2d:c9:b3:37:0d:da:ef:2c:96:6d:
15:55:a2:0d:2f:f7:6b:47:6d:c3:4d:bf:fd:08:d6:
0d:c2:fc:a3:24:33:78:27:91:ff:23:79:8f:c5:7b:
a5:51:18:0a:36:df:97:4e:4e:ec:6f:34:a8:2e:e5:
46:cc:d7:c8:7d:b8:96:7e:85:e4:76:71:a1:6e:8e:
b8:0d:41:a4:49:3c:b2:93:67:50:0e:47:ce:8a:8a:
95:1d:ee:68:ed:d0:f5:d8:6e:02:ca:6f:16:f8:ad:
a7:70:80:27:8d:db:d8:7e:33:f4:fe:c3:08:00:46:
13:19:e9:24:9e:e8:43:95:f1:de:ed:3e:80:4e:ff:
e9:7a:10:72:93:ac:68:2b:28:56:89:19:c5:19:29:
fc:4e:9b:a3:66:7a:7b:31:b7:b7:dc:2a:2a:d4:ae:
fb:3b:80:89:0d:4d:86:88:24:3c:cf:7a:e2:85:89:
db:4d:52:75:a9:36:d6:59:27:16:3c:cf:e0:e0:ec:
82:c0:74:16:a6:da:03:6a:14:f5:47:b4:d3:71:90:
14:c8:02:d5:3e:bc:ab:a1:fb:f2:4f:9d:45:8a:f4:
98:f9:4d:ed:94:cc:ab:72:59:a9:84:c2:7e:80:21:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:8A:FA:F2:4F:80:F4:34:30:37:37:9F:5D:E2:A2:3B:EF:24:5B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/YfeK-vJPgPQ0MDc3n13iojvvJFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.132.0/24
Signature Algorithm: sha256WithRSAEncryption
95:22:bb:c2:ea:2f:bf:3c:75:7c:f2:f2:08:ee:b1:68:b1:42:
15:ba:2d:bf:d5:86:98:f6:2b:90:3b:8b:d7:57:d5:ad:29:08:
cf:4d:97:9b:40:4f:15:bd:5c:cb:7d:68:5e:aa:cb:11:00:83:
3a:0f:62:e1:e2:2b:54:ed:97:44:56:c1:24:e1:67:3f:7e:22:
7d:a2:0e:03:d1:1e:70:38:31:9f:af:c6:ec:5f:14:82:5a:59:
ee:e7:04:09:7f:4a:42:e2:a4:d0:0a:70:46:f5:a0:3d:3b:81:
5a:d8:f8:26:5e:16:f5:69:99:9f:28:15:cd:7d:d1:4f:95:17:
15:d8:19:fc:1e:52:96:68:af:3b:11:6e:ff:76:1c:ea:55:9c:
9f:7f:8b:4a:3e:44:87:9d:ec:76:66:37:2b:26:18:62:6d:16:
3a:63:f6:12:ab:bf:20:7e:cb:9c:12:57:51:f0:8e:54:94:40:
9d:5a:8d:23:e4:67:f3:5e:7f:95:21:8a:11:ec:8a:69:d4:dc:
d4:05:54:a8:4b:36:0b:56:9d:87:6a:03:46:43:9a:0c:cf:5f:
e5:39:07:01:d9:cf:10:27:1e:93:52:8d:d3:30:07:d8:41:b8:
8d:4f:c5:75:03:1b:4e:2b:57:8b:87:13:b7:cc:3c:36:87:6d:
1a:e0:49:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjCgwpfDaWOT5XNA9pObcrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwODE5MTMyNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWY3OGFmYWYyNGY4MGY0MzQzMDM3Mzc5ZjVkZTJhMjNiZWYyNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2kONDOYUBhKUZhKiCQfJZiojC3J
szcN2u8slm0VVaINL/drR23DTb/9CNYNwvyjJDN4J5H/I3mPxXulURgKNt+XTk7s
bzSoLuVGzNfIfbiWfoXkdnGhbo64DUGkSTyyk2dQDkfOioqVHe5o7dD12G4Cym8W
+K2ncIAnjdvYfjP0/sMIAEYTGekknuhDlfHe7T6ATv/pehByk6xoKyhWiRnFGSn8
TpujZnp7Mbe33Coq1K77O4CJDU2GiCQ8z3rihYnbTVJ1qTbWWScWPM/g4OyCwHQW
ptoDahT1R7TTcZAUyALVPryrofvyT51FivSY+U3tlMyrclmphMJ+gCHzVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGH3ivryT4D0NDA3N59d4qI77yRbMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWWZlSy12SlBnUFEwTURjM24xM2lvanZ2SkZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWEMA0G
CSqGSIb3DQEBCwUAA4IBAQCVIrvC6i+/PHV88vII7rFosUIVui2/1YaY9iuQO4vX
V9WtKQjPTZebQE8VvVzLfWheqssRAIM6D2Lh4itU7ZdEVsEk4Wc/fiJ9og4D0R5w
ODGfr8bsXxSCWlnu5wQJf0pC4qTQCnBG9aA9O4Fa2PgmXhb1aZmfKBXNfdFPlRcV
2Bn8HlKWaK87EW7/dhzqVZyff4tKPkSHnex2ZjcrJhhibRY6Y/YSq78gfsucEldR
8I5UlECdWo0j5GfzXn+VIYoR7Ipp1NzUBVSoSzYLVp2HagNGQ5oMz1/lOQcB2c8Q
Jx6TUo3TMAfYQbiNT8V1AxtOK1eLhxO3zDw2h20a4EnK
-----END CERTIFICATE-----
Generated at Wed Aug 20 11:56:02 2025 by rpki-client