Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0ksGWRGEXipviX17hEDtp7_p0I.roa
File: Y0ksGWRGEXipviX17hEDtp7_p0I.roa (raw, json)
Hash identifier: nqIl4sO5is1fo2Rj7WgLB4IK0xRbvfUhLUV2NLcrAag=
Subject key identifier: 63:49:2C:19:64:46:11:78:A9:BE:25:F5:EE:11:03:B6:9E:FF:A7:42
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E2000FB956BECC8D8F7EFE26C06F934E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0ksGWRGEXipviX17hEDtp7_p0I.roa
Signing time: Tue 14 Oct 2025 09:14:38 +0000
ROA not before: Tue 14 Oct 2025 09:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 151.242.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:00:0f:b9:56:be:cc:8d:8f:7e:fe:26:c0:6f:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 09:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63492c1964461178a9be25f5ee1103b69effa742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:40:e3:11:68:32:7e:1e:79:a2:2a:3d:98:
63:44:c7:c2:2b:a5:d9:8e:d6:05:09:e8:d8:cd:39:
7a:29:47:fd:20:89:35:35:d3:37:5e:70:fe:a6:67:
4b:03:e6:a0:35:fd:45:ab:a2:fb:ee:f8:3d:28:f7:
cf:ae:22:3e:e2:22:fe:3c:5f:ca:22:5d:dd:1f:05:
07:48:16:dd:d2:78:2f:f7:de:75:92:4d:82:43:24:
be:58:8c:71:ab:ba:51:cd:88:3a:8b:5f:f7:fa:85:
c8:7e:13:02:c3:9a:ca:13:a5:e1:75:c1:1e:a6:3f:
0c:94:45:e6:0a:29:b8:b3:2a:c3:cc:8f:2b:3e:15:
a6:63:6f:98:8c:70:a2:38:4b:a7:c2:c0:bd:da:68:
24:ae:d0:18:3c:b5:68:e4:65:2e:a0:92:a0:70:c0:
c8:68:73:e0:78:69:c1:37:f7:22:82:45:fd:58:e8:
27:2b:5d:40:fa:e5:66:71:de:0a:76:25:77:ac:37:
d0:ad:e5:ae:54:85:60:b6:82:f1:e3:ff:c5:91:b2:
65:d4:c3:d6:76:a2:08:ac:94:71:be:05:2a:44:9e:
6c:ce:9c:8c:0b:9b:ca:1e:95:1b:7a:08:69:f1:af:
f8:b5:d3:16:0c:bc:db:7d:61:f6:f1:ad:f1:1d:fa:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:2C:19:64:46:11:78:A9:BE:25:F5:EE:11:03:B6:9E:FF:A7:42
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y0ksGWRGEXipviX17hEDtp7_p0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:00:7a:9d:fb:d3:7c:a6:9f:3f:8b:37:20:ff:7f:61:cb:45:
69:5f:7b:af:07:27:81:83:cc:9c:df:df:84:6f:02:47:30:47:
a5:dd:74:16:ef:1d:b4:f5:05:39:ce:b7:7e:82:2a:5b:5d:63:
29:dc:2b:b2:74:c7:83:47:11:ea:63:f9:d2:1b:54:11:b1:70:
9d:3b:05:a7:45:78:64:d8:a4:7f:68:69:f5:05:92:9d:e4:73:
d1:6f:39:21:f6:13:c7:45:61:b4:bb:9f:e2:5c:59:44:b3:d5:
21:99:b0:d9:90:27:10:72:a2:bc:63:d7:dd:36:7b:8e:15:dc:
67:c1:f9:80:ac:db:62:a0:da:1c:b2:d0:fe:6c:09:bb:fe:ad:
33:9c:3f:45:55:10:06:b8:11:be:e8:e7:d5:0b:15:87:4f:1e:
93:bc:80:4b:61:31:30:8c:c9:40:d9:6d:5f:ba:7a:d1:01:c8:
ae:0a:74:f2:27:cc:01:a8:4a:5a:ba:f6:ed:02:11:b6:44:28:
5f:7d:2b:7f:b8:38:98:23:82:29:ba:be:ca:04:b1:56:70:fd:
d5:c9:97:98:85:1a:f2:08:e1:23:e9:ae:f4:7d:dd:6a:7d:ef:
a1:7b:d8:c7:1c:33:2b:30:38:a5:2e:25:09:1a:99:8d:03:9c:
bc:5c:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:36:57 2025 by rpki-client