Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/yruWR1NCtKhTA1Y0jkDGSQ7Li1w.roa
File: yruWR1NCtKhTA1Y0jkDGSQ7Li1w.roa (raw, json)
Hash identifier: id+/G1qp2RHEXBm9HXMHJDFpt7N+2QjmJYRceQeYf7s=
Subject key identifier: CA:BB:96:47:53:42:B4:A8:53:03:56:34:8E:40:C6:49:0E:CB:8B:5C
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0198EADC04228525ADC1410819B6CE58771E
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/yruWR1NCtKhTA1Y0jkDGSQ7Li1w.roa
Signing time: Wed 27 Aug 2025 09:29:04 +0000
ROA not before: Wed 27 Aug 2025 09:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 94.16.30.0/23 maxlen: 23
94.16.30.128/25 maxlen: 25
94.16.104.0/22 maxlen: 24
94.16.108.0/22 maxlen: 24
94.16.112.0/21 maxlen: 24
94.16.120.0/22 maxlen: 24
185.216.176.0/22 maxlen: 22
185.232.68.0/22 maxlen: 22
188.172.228.0/23 maxlen: 24
193.26.156.0/22 maxlen: 22
194.36.144.0/22 maxlen: 22
2a00:11c0:47:1000::/52 maxlen: 52
2a00:11c0:47:2000::/56 maxlen: 56
2a00:11c0:47:3000::/52 maxlen: 52
2a00:11c0:5d::/48 maxlen: 48
2a00:11c0:5f::/48 maxlen: 48
2a00:11c0:5f:100::/56 maxlen: 56
2a00:11c0:5f:200::/56 maxlen: 56
2a00:11c0:5f:1000::/56 maxlen: 56
2a00:11c0:5f:2000::/52 maxlen: 52
2a00:11c0:5f:3000::/52 maxlen: 52
2a00:11c0:5f:4000::/52 maxlen: 52
2a00:11c0:60::/48 maxlen: 48
2a00:11c0:81::/56 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:dc:04:22:85:25:ad:c1:41:08:19:b6:ce:58:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Aug 27 09:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cabb96475342b4a8530356348e40c6490ecb8b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:a5:ed:4b:87:09:46:ae:90:68:a5:4d:e0:
ed:fc:68:b2:b6:5a:54:cc:cb:51:d8:00:ff:9b:bf:
6b:8d:cb:dc:bf:8e:e8:c9:04:09:10:0d:84:37:02:
64:0b:77:25:92:2b:22:a4:94:a9:7b:c2:44:7c:86:
01:09:b6:c3:e4:1a:31:ff:39:52:32:c7:db:bf:26:
1e:02:d9:b0:8e:22:f7:78:ce:b7:8d:18:73:d6:fa:
fe:db:42:6e:6b:e3:78:9d:55:a4:6b:7d:54:67:de:
d5:82:5b:5f:d1:31:69:54:e9:eb:c9:97:9c:6a:b7:
a8:ef:3a:59:a5:ed:2c:c2:57:b3:99:b9:17:4b:b4:
d4:b2:8e:6d:e3:7d:34:05:e7:53:cb:31:40:cb:5b:
8d:1c:4a:5a:44:de:c7:fe:b7:ae:bf:ab:be:25:4c:
64:14:0b:81:cd:96:1f:de:65:51:63:13:10:0f:73:
54:11:a0:3e:1d:2b:7c:eb:cd:7c:74:70:f7:0c:e7:
10:da:bd:9c:20:3f:c9:7a:2a:83:6b:1e:96:14:15:
98:db:26:6e:a4:1d:ec:14:fe:91:a5:ed:46:3e:81:
60:81:15:a4:f9:0a:b0:a8:85:bb:8d:11:1b:1f:0d:
54:f6:73:c9:49:76:a9:48:8a:a8:f7:64:b8:47:af:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:96:47:53:42:B4:A8:53:03:56:34:8E:40:C6:49:0E:CB:8B:5C
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/yruWR1NCtKhTA1Y0jkDGSQ7Li1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.30.0/23
94.16.104.0-94.16.123.255
185.216.176.0/22
185.232.68.0/22
188.172.228.0/23
193.26.156.0/22
194.36.144.0/22
IPv6:
2a00:11c0:47:1000::-2a00:11c0:47:20ff:ffff:ffff:ffff:ffff
2a00:11c0:47:3000::/52
2a00:11c0:5d::/48
2a00:11c0:5f::-2a00:11c0:60:ffff:ffff:ffff:ffff:ffff
2a00:11c0:81::/56
Signature Algorithm: sha256WithRSAEncryption
c7:fd:92:75:c0:f6:15:b9:15:e2:68:a9:16:0b:3e:70:aa:5c:
fd:f3:2a:3b:a8:80:c1:dc:a9:47:23:74:eb:4f:b5:01:a7:56:
4a:b6:45:df:18:0d:e0:f4:d4:f3:e9:e7:e6:c1:9e:2f:81:f3:
4a:3b:5d:46:33:1f:21:09:fd:5e:e0:8b:9b:6e:5f:e5:84:af:
d2:f1:35:d2:ce:3c:49:5a:02:7a:d7:b2:88:4d:53:83:0f:ca:
3d:a4:ce:41:a1:45:55:62:37:0e:77:f9:66:73:67:cd:7f:45:
c3:05:34:5c:85:9b:f6:51:a3:f8:45:45:0e:c4:ae:dc:2d:a3:
d4:78:b3:f6:91:67:4b:a8:84:2e:c3:54:bc:e7:be:85:1e:5d:
f8:b4:93:1c:69:cc:4c:e0:dc:6c:5e:59:01:a5:ba:9b:d6:02:
bf:fa:0c:e2:b5:91:7e:0f:ab:39:3b:78:c2:d6:cc:95:6c:be:
78:4d:4d:b0:e0:74:fb:37:d7:56:b6:53:24:4e:df:ff:65:83:
71:ec:97:08:d0:06:e1:95:63:a2:d0:fb:95:a1:cd:0b:55:ee:
37:d6:3f:50:63:8c:26:af:f1:2a:d7:c7:4b:5a:93:05:e5:3d:
aa:de:d1:6e:08:5c:a2:35:ac:7d:f6:e4:27:be:81:4d:f4:96:
d7:61:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:11:12 2025 by rpki-client