Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa
File: yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa (raw, json)
Hash identifier: Cx12upzLFR9R49twlwP6YThfGCdOHNc6BXhnNgg550Q=
Subject key identifier: CA:1C:30:A7:12:77:4D:0B:FB:9F:84:CC:BC:87:9A:15:5F:99:0C:C5
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 01990B7A1EF5CC253D3033B30AAADC64B443
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa
Signing time: Tue 02 Sep 2025 17:29:36 +0000
ROA not before: Tue 02 Sep 2025 17:29:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209183
IP address blocks: 185.69.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:7a:1e:f5:cc:25:3d:30:33:b3:0a:aa:dc:64:b4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Sep 2 17:29:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca1c30a712774d0bfb9f84ccbc879a155f990cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:ae:f8:cd:0a:22:4b:86:de:63:8c:9e:04:
89:ae:44:4c:3f:b8:b0:c0:30:35:80:df:34:2a:d2:
ea:ed:d6:a6:4f:9f:36:6a:d0:61:78:2c:e1:72:76:
d1:a7:25:f6:62:96:59:89:7d:a5:9c:a9:d0:81:3d:
fe:49:0e:ed:3f:e4:89:8f:63:1f:a2:6a:2c:10:fa:
9d:22:fe:6a:c6:98:5b:e6:4f:10:18:ab:54:cb:06:
81:17:15:75:7b:83:df:e2:b3:44:98:a4:8e:87:68:
0e:25:68:55:f2:d7:2e:a4:0b:1c:11:96:12:28:ee:
bb:17:8d:ef:ab:1e:6e:9d:88:c2:c9:65:cf:9c:51:
d1:b7:a3:90:63:fa:d3:83:98:23:fd:84:6b:bb:fb:
f3:5f:4a:40:51:72:ec:93:bd:38:86:f1:82:0f:8f:
ff:2a:8f:fc:a7:ae:18:84:b9:77:4e:05:12:1f:3d:
44:e8:69:40:31:a5:26:bc:b7:19:80:d7:45:38:19:
95:8c:10:ff:a6:7f:30:5e:1d:62:14:9d:6a:d9:00:
77:26:61:b7:f8:f1:f3:d3:10:d8:09:9e:93:9c:07:
8a:ca:7e:97:6f:1c:06:9b:09:0e:8b:d4:71:d3:7f:
10:50:6f:1b:0c:d1:da:e8:c6:a1:a4:54:f7:9a:ea:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:30:A7:12:77:4D:0B:FB:9F:84:CC:BC:87:9A:15:5F:99:0C:C5
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/yhwwpxJ3TQv7n4TMvIeaFV-ZDMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.223.0/24
Signature Algorithm: sha256WithRSAEncryption
17:4c:e2:dc:ff:38:d9:40:aa:79:a2:e5:a6:22:61:dd:1a:b9:
1f:58:57:e0:a7:60:a2:a6:fb:9f:6d:f4:91:0a:d1:37:1d:78:
a3:62:61:4a:eb:6c:92:c3:88:57:9a:32:ba:b2:2c:63:73:61:
86:a1:67:fd:05:54:ac:e6:0a:7b:a5:71:7b:46:dd:ab:8d:1c:
cc:27:80:1c:e9:3b:f4:9e:98:6b:c2:87:2d:71:10:fb:1e:f3:
0f:be:26:38:1f:08:a3:7f:35:ad:a6:c8:1f:f3:b8:7e:15:c5:
2f:f4:41:44:32:1f:89:f1:92:20:99:e1:cd:ae:90:2a:3a:fd:
2b:52:4a:6d:b5:05:81:51:31:84:79:45:7f:5f:bb:56:a8:10:
cf:44:f7:8b:96:78:52:93:65:44:3b:fc:90:95:47:e6:2f:57:
51:15:8c:e8:90:c9:46:95:90:05:36:03:78:f9:8f:97:d4:e7:
d3:ec:b4:ba:3a:9b:72:42:4f:4d:33:de:e6:31:08:93:37:21:
6a:56:d3:82:be:e3:d3:25:31:ec:13:73:01:c4:ff:b7:1e:6f:
bd:78:8a:f5:8e:3a:dd:ce:1f:53:b7:8c:e0:b5:9d:1c:fd:6d:
eb:8b:8f:cf:0a:0a:ef:85:9a:d9:95:81:0c:ba:9a:9e:f4:8d:
11:7c:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:07:40 2025 by rpki-client