Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/yPLP9ipRkmjewcTRpvAk38hrlXs.roa
File: yPLP9ipRkmjewcTRpvAk38hrlXs.roa (raw, json)
Hash identifier: ZpMeVKM02wLQrjHMyK/z7QCo6i1mZBRJQG+qvWJWmTk=
Subject key identifier: C8:F2:CF:F6:2A:51:92:68:DE:C1:C4:D1:A6:F0:24:DF:C8:6B:95:7B
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0199703EBC887BC1CA7B883CEAB6D1D7B5CF
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/yPLP9ipRkmjewcTRpvAk38hrlXs.roa
Signing time: Mon 22 Sep 2025 07:06:23 +0000
ROA not before: Mon 22 Sep 2025 07:06:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 217.179.49.0/24 maxlen: 24
217.179.56.0/24 maxlen: 24
217.179.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:3e:bc:88:7b:c1:ca:7b:88:3c:ea:b6:d1:d7:b5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Sep 22 07:06:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f2cff62a519268dec1c4d1a6f024dfc86b957b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:65:6f:5c:79:35:0d:19:ac:fe:36:4b:98:
34:0f:7c:0d:6b:75:f6:e3:5c:45:bd:d2:c0:64:f4:
26:59:b2:d2:2a:98:12:7c:99:7c:a6:79:36:2e:17:
40:3b:d9:08:6d:db:a0:fb:62:0a:d3:4c:76:a9:93:
37:2e:06:2c:42:43:8b:8c:d6:51:70:28:61:f9:e9:
5e:92:07:bf:c2:c0:d1:ab:1f:4a:66:13:7f:33:b8:
fe:cb:58:00:98:c1:5b:b5:50:b6:67:60:57:db:a4:
2d:57:ae:83:e5:68:e3:99:af:cb:81:c9:59:bb:73:
6a:c3:f7:75:f9:34:52:b8:03:42:b4:ed:d0:79:a5:
e6:5c:de:10:e6:06:ac:88:2a:77:68:e5:5a:d7:33:
a7:a8:13:4f:c7:ea:c2:29:df:e6:38:ee:11:6c:fd:
72:5c:f4:dd:d2:f0:f1:e3:b6:96:2e:6d:f9:ab:f0:
42:f2:69:a7:be:ce:42:0f:3a:4d:93:5e:b6:08:2e:
02:eb:59:4c:c4:75:16:fc:1c:aa:08:94:e1:7d:4d:
bf:3e:a2:d3:b2:22:12:b3:cc:30:a1:2a:60:e0:86:
61:43:f4:83:56:41:1b:72:96:c6:5f:55:6a:64:b6:
66:59:ed:93:18:d8:7f:04:94:ef:e1:53:14:fe:3b:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:CF:F6:2A:51:92:68:DE:C1:C4:D1:A6:F0:24:DF:C8:6B:95:7B
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/yPLP9ipRkmjewcTRpvAk38hrlXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.49.0/24
217.179.56.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:10:64:2e:88:c3:93:1e:2c:4b:c9:6a:45:5e:8b:50:c0:20:
98:cc:52:e0:f4:f1:94:99:c3:48:00:27:19:ed:62:a4:b4:9c:
23:2b:ef:b4:0f:81:63:fd:f0:80:06:c2:e6:21:21:87:ce:99:
01:28:34:ba:06:98:bb:be:dd:eb:cb:c8:0e:13:ec:50:eb:7e:
3e:63:2a:ea:4b:55:3b:f4:ca:ab:89:f6:aa:f9:e2:49:9e:bc:
36:59:69:55:c1:d6:fd:bc:09:1e:eb:ab:4b:e9:4b:aa:9e:29:
58:fc:84:0a:f5:18:10:42:b1:e8:93:54:d7:b2:58:69:82:c8:
68:b2:d7:74:50:92:97:33:e5:04:4c:ef:4e:6f:8c:62:44:63:
c3:a3:89:65:67:f0:94:21:4a:cd:e6:22:de:07:dd:fa:f5:e8:
c2:b0:0f:36:c9:3a:d4:58:66:49:80:c2:33:e8:ce:c2:0c:5a:
cf:57:10:c0:79:4a:15:1a:cc:dc:98:a6:13:85:6d:8f:33:6e:
db:1a:47:dd:62:93:88:21:e3:f6:8b:31:f6:b1:af:6b:48:1a:
63:6e:19:67:68:12:0f:99:ad:6d:26:1d:bf:53:f0:b8:4b:99:
1b:47:e5:be:ae:02:1e:91:1a:1b:af:c9:1a:c8:2e:8d:3f:5d:
2d:14:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:30 2025 by rpki-client