Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/yzdtp6LKGBe0KvJQJ6kYxmDwpUQ.roa
File: yzdtp6LKGBe0KvJQJ6kYxmDwpUQ.roa (raw, json)
Hash identifier: +XrpUmfZnUV94z+NHh7IG6JMcMbhThVB2jjfz81ihvE=
Subject key identifier: CB:37:6D:A7:A2:CA:18:17:B4:2A:F2:50:27:A9:18:C6:60:F0:A5:44
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 0199284503CB6CEF7E80DA38CB23C22F7B12
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/yzdtp6LKGBe0KvJQJ6kYxmDwpUQ.roa
Signing time: Mon 08 Sep 2025 07:40:35 +0000
ROA not before: Mon 08 Sep 2025 07:40:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212734
IP address blocks: 80.92.200.0/24 maxlen: 24
80.92.201.0/24 maxlen: 24
80.92.202.0/24 maxlen: 24
80.92.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:45:03:cb:6c:ef:7e:80:da:38:cb:23:c2:2f:7b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Sep 8 07:40:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb376da7a2ca1817b42af25027a918c660f0a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:ed:cd:6e:02:57:2d:16:bb:35:e9:9e:87:
36:e1:69:1a:7b:da:e3:51:c5:f3:c8:3d:49:b8:fc:
61:a7:c7:15:8d:eb:e2:b9:c9:87:8d:fd:0a:87:47:
55:b1:6d:49:ea:6d:2b:a4:88:05:06:58:83:c5:d4:
c1:d7:07:4e:7e:9c:34:f8:fb:b8:a3:bf:d0:1d:45:
cb:3e:df:e3:dc:63:62:a8:60:1e:45:cd:17:b6:99:
37:8d:42:91:3e:86:23:d5:41:36:2c:b1:bc:dc:13:
36:7f:37:34:4c:02:f7:82:a7:db:75:9d:4e:f8:68:
2b:fe:ee:b8:0e:ab:1a:2b:3e:9a:f4:3d:fb:33:7c:
2d:00:7b:02:c3:f5:11:49:b4:ac:d2:4a:e5:ac:31:
2c:46:d1:7a:d3:3a:7f:ef:ff:98:44:55:5c:be:5d:
ec:36:6f:8e:8c:f7:37:8f:b1:e2:52:b6:95:40:1d:
2e:11:18:6e:55:24:23:fa:5d:25:5f:b3:ad:09:e8:
e1:59:4e:74:05:4f:2b:c8:a8:94:f1:11:bf:40:84:
b5:80:a4:4d:2a:f1:70:98:bb:4d:27:95:2a:b4:07:
12:96:5f:3b:f8:08:5e:d1:73:01:2b:48:a3:41:80:
95:d5:17:e4:5c:6f:b8:44:32:b9:dd:a0:2a:d3:3f:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:6D:A7:A2:CA:18:17:B4:2A:F2:50:27:A9:18:C6:60:F0:A5:44
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/yzdtp6LKGBe0KvJQJ6kYxmDwpUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:df:c2:6c:76:9f:a4:db:70:a3:d5:e1:5f:3c:67:72:bc:b6:
57:fe:06:3c:96:00:fc:9b:00:4b:b2:b2:09:10:62:a2:ea:24:
09:10:93:d8:e9:43:ae:11:b4:73:01:45:ce:6c:4d:7e:51:64:
39:22:e3:f1:8a:cc:c8:16:a9:6a:32:cc:85:ea:36:25:e9:14:
62:94:b1:e2:ba:d6:c1:68:dc:91:b6:bb:80:a6:0a:42:77:79:
d9:61:c2:38:cf:21:66:a2:07:a2:43:b1:d7:69:ed:e8:d9:17:
55:d5:15:66:20:ad:5d:ea:0f:02:0e:61:a6:44:6c:fe:77:23:
97:fa:84:e5:74:70:0f:d0:f8:73:0d:9d:c7:03:11:42:2a:2c:
4c:5a:5c:f1:f4:22:40:8f:1a:e4:6f:e0:4d:bd:6c:42:ef:d8:
b1:94:6a:d5:d7:e2:10:73:45:a6:73:7b:14:a3:44:b2:ff:90:
0b:ea:1a:b2:3c:bd:5b:fb:1f:3a:82:33:19:b8:8c:97:e1:6a:
81:00:c3:e0:f9:d9:aa:f6:c5:0d:58:bf:09:d2:d7:2a:81:ab:
04:e9:a2:e6:0c:20:91:9a:bb:72:99:09:ca:86:93:2e:b1:2a:
c4:d2:fe:8b:20:22:1e:4a:cf:d2:ee:6b:c3:fb:be:17:87:3f:
51:54:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:13:23 2025 by rpki-client