Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycORncNA45mJd3RcVB4kkVyYyek.roa
File: ycORncNA45mJd3RcVB4kkVyYyek.roa (raw, json)
Hash identifier: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=
Subject key identifier: C9:C3:91:9D:C3:40:E3:99:89:77:74:5C:54:1E:24:91:5C:98:C9:E9
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0199CAD544028FBA4B3A44B4E2F0C8DDF23E
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycORncNA45mJd3RcVB4kkVyYyek.roa
Signing time: Thu 09 Oct 2025 21:16:38 +0000
ROA not before: Thu 09 Oct 2025 21:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401443
IP address blocks: 45.149.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:d5:44:02:8f:ba:4b:3a:44:b4:e2:f0:c8:dd:f2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 9 21:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c3919dc340e3998977745c541e24915c98c9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:d8:84:0d:14:98:2b:34:6b:1a:d3:0b:9d:
c6:7a:37:54:e6:a7:ae:99:93:7c:3f:25:81:0a:15:
71:dd:9e:66:db:02:e7:7a:1d:ae:11:ee:9f:ed:66:
3c:78:e9:67:4b:31:77:27:15:18:b3:31:ff:79:d8:
b9:99:db:65:15:f2:88:6c:ef:39:70:b0:ee:e5:83:
15:cb:49:51:c2:27:71:90:80:de:04:f8:21:a8:1b:
61:c6:2c:4b:4e:20:32:0d:ab:92:65:11:b5:c0:62:
c1:f8:03:f4:90:b4:f5:21:72:2a:1f:b9:61:49:35:
75:26:22:08:0b:79:54:43:6f:0f:34:fe:9b:e4:ad:
b8:f0:8f:50:0c:5d:4f:c3:65:66:ff:1d:1a:db:1a:
16:ab:52:e3:b3:a0:90:0e:bf:0a:dd:33:c2:f2:89:
4d:5d:a7:e6:7e:5f:0a:58:09:06:53:67:4b:2e:63:
66:0b:b3:06:74:3c:9d:f2:13:3b:9a:d4:03:a6:10:
82:d6:69:59:0e:3d:ed:c3:fd:dd:ca:ad:56:d9:f3:
e4:5f:f7:34:76:10:bb:3c:a9:f8:9f:3c:61:b6:40:
64:5c:1e:22:d9:9d:8b:e7:20:90:5e:43:16:53:7c:
3f:cb:4e:d2:69:f5:c4:55:1f:1d:f5:d0:63:7c:52:
c0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:91:9D:C3:40:E3:99:89:77:74:5C:54:1E:24:91:5C:98:C9:E9
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ycORncNA45mJd3RcVB4kkVyYyek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1d:b8:e4:07:9c:36:65:a5:ca:3f:3f:df:ff:7d:27:e7:1a:
ee:3e:c4:36:cb:dd:d1:1e:88:36:31:98:b6:1b:ec:7f:1b:c9:
29:9b:a3:a8:05:47:fc:73:4c:4f:17:d0:6e:12:99:46:5c:64:
e8:e2:ff:97:f9:0a:55:51:76:d9:b5:96:c8:9d:66:8e:71:20:
f0:a0:9d:ca:b1:50:95:26:35:d2:53:9e:f1:c1:e5:cf:c9:63:
fe:37:cc:3b:f0:9e:2a:d7:81:3f:de:93:a6:69:d0:1d:ac:b4:
61:54:36:52:4a:d6:39:9c:04:3e:3c:36:a6:74:1b:bc:32:9f:
8c:a4:cf:81:32:4d:23:07:92:85:c7:a5:e2:6f:06:b3:cf:d5:
50:b1:2f:36:78:1c:04:b5:18:3f:3a:54:54:65:d6:f5:6c:4d:
8c:4d:2b:9e:d6:24:90:34:f7:7d:e9:fc:ef:5b:f9:bf:28:82:
6b:2e:c6:28:ad:ae:b1:69:80:27:36:e0:49:7a:be:7d:ba:2f:
4c:1b:34:50:14:be:43:bf:d1:73:de:a3:93:2b:77:e3:4d:da:
d6:db:6a:22:92:9f:25:b9:47:98:27:58:5e:fb:7a:67:0a:66:
b5:47:b7:d5:42:b7:0b:22:47:b9:ff:0e:cb:a2:fc:ae:eb:49:
8a:0c:35:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnK1UQCj7pLOkS04vDI3fI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUxMDA5MjExNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWMzOTE5ZGMzNDBlMzk5ODk3Nzc0NWM1NDFlMjQ5MTVjOThjOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWHYhA0UmCs0axrTC53GejdU5qeu
mZN8PyWBChVx3Z5m2wLneh2uEe6f7WY8eOlnSzF3JxUYszH/edi5mdtlFfKIbO85
cLDu5YMVy0lRwidxkIDeBPghqBthxixLTiAyDauSZRG1wGLB+AP0kLT1IXIqH7lh
STV1JiIIC3lUQ28PNP6b5K248I9QDF1Pw2Vm/x0a2xoWq1Ljs6CQDr8K3TPC8olN
Xafmfl8KWAkGU2dLLmNmC7MGdDyd8hM7mtQDphCC1mlZDj3tw/3dyq1W2fPkX/c0
dhC7PKn4nzxhtkBkXB4i2Z2L5yCQXkMWU3w/y07SafXEVR8d9dBjfFLA6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnDkZ3DQOOZiXd0XFQeJJFcmMnpMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEveWNPUm5jTkE0NW1KZDNSY1ZCNGtrVnlZeWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVcMA0G
CSqGSIb3DQEBCwUAA4IBAQBNHbjkB5w2ZaXKPz/f/30n5xruPsQ2y93RHog2MZi2
G+x/G8kpm6OoBUf8c0xPF9BuEplGXGTo4v+X+QpVUXbZtZbInWaOcSDwoJ3KsVCV
JjXSU57xweXPyWP+N8w78J4q14E/3pOmadAdrLRhVDZSStY5nAQ+PDamdBu8Mp+M
pM+BMk0jB5KFx6Xibwazz9VQsS82eBwEtRg/OlRUZdb1bE2MTSue1iSQNPd96fzv
W/m/KIJrLsYora6xaYAnNuBJer59ui9MGzRQFL5Dv9Fz3qOTK3fjTdrW22oikp8l
uUeYJ1he+3pnCma1R7fVQrcLIke5/w7Lovyu60mKDDWD
-----END CERTIFICATE-----
Generated at Thu Oct 16 01:54:20 2025 by rpki-client