Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa
File: Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa (raw, json)
Hash identifier: o0itDHyiOKdFZunGmNw6h8Z1wOF08DEK5D3hH/0u17w=
Subject key identifier: 63:09:FC:BA:5D:AB:EF:5A:13:FB:18:CF:6E:42:88:27:91:35:64:FE
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0198EB0C89E5FD7F9AF584E49AEDCD7C2F69
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa
Signing time: Wed 27 Aug 2025 10:22:04 +0000
ROA not before: Wed 27 Aug 2025 10:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49157
IP address blocks: 83.136.237.0/24 maxlen: 24
103.95.119.0/24 maxlen: 24
185.131.176.0/24 maxlen: 24
185.131.177.0/24 maxlen: 24
185.131.178.0/24 maxlen: 24
185.131.179.0/24 maxlen: 24
185.151.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:0c:89:e5:fd:7f:9a:f5:84:e4:9a:ed:cd:7c:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Aug 27 10:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6309fcba5dabef5a13fb18cf6e428827913564fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:1a:a6:d2:59:f5:e0:4f:ec:c8:21:ca:45:
6a:ed:74:c8:cc:4c:51:7a:1f:22:c3:0c:32:55:58:
5f:92:b2:4a:bf:c8:fa:9b:18:f8:92:67:a7:39:32:
63:02:59:cd:05:84:1e:bd:85:1b:d4:13:8c:7b:8d:
58:60:6f:00:a4:d6:e0:a8:56:87:f1:dd:bb:05:fa:
7f:1b:8c:b3:7d:0b:c6:54:bb:a1:84:81:88:76:e1:
b0:9b:de:10:d5:09:46:2e:3c:ff:6f:4d:c6:0f:cb:
5e:8e:6e:fb:9d:cf:30:0e:a4:a2:9d:91:cd:79:34:
00:60:37:30:06:2b:d9:40:77:3b:33:e1:66:bd:f1:
5e:43:72:df:e1:57:ad:79:46:df:00:21:da:a4:a6:
08:64:b3:74:64:10:a2:30:53:4a:94:11:14:de:1a:
69:b4:2c:ae:3f:a1:28:d0:3d:f5:2e:61:6f:07:85:
dc:e2:c0:6e:96:d1:1f:cd:ad:38:f4:b7:a9:0e:d4:
39:8c:2e:3e:f9:8b:a5:4a:13:71:10:da:74:44:84:
7c:f2:65:5d:fa:2c:36:80:48:c4:ee:5d:35:f8:18:
e6:58:27:8e:d2:b8:43:77:c5:55:61:5e:e5:ed:19:
c1:2e:b0:1c:0f:2b:4d:3b:81:ec:aa:57:b3:49:c4:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:FC:BA:5D:AB:EF:5A:13:FB:18:CF:6E:42:88:27:91:35:64:FE
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.237.0/24
103.95.119.0/24
185.131.176.0/22
185.151.199.0/24
Signature Algorithm: sha256WithRSAEncryption
99:24:28:b6:49:08:da:ba:a5:ab:67:a3:79:a1:aa:7c:3b:ad:
fd:04:98:59:19:31:35:93:a6:f6:62:9d:eb:f0:d3:c1:18:4b:
dc:7e:a3:00:ee:ca:e5:87:47:4f:38:53:85:fe:15:01:08:77:
a4:2f:af:2a:2b:c2:b1:d7:02:fe:9d:0a:ab:7c:83:10:88:2d:
e1:0c:df:fc:6a:ba:73:d1:c8:41:70:08:3d:d3:cb:6e:00:93:
39:88:03:58:f4:5e:cc:68:35:2d:6d:3e:91:be:51:1d:29:9b:
a6:c1:5d:f4:fd:a3:d4:fc:3c:ff:11:43:27:1c:fd:35:3c:0b:
c8:a1:ab:9f:a0:91:16:c5:c0:fe:43:d6:02:29:37:39:c0:4d:
a2:c6:92:3f:82:6d:d0:8a:3d:1d:a9:81:bb:26:c1:5a:8f:b1:
f4:82:88:48:2f:ac:9d:89:cd:1d:d7:2c:02:fb:e7:17:d2:e5:
de:68:2b:84:a5:8c:4f:da:29:e5:23:9c:9f:aa:3d:60:60:1c:
ae:6e:a4:60:8b:53:a1:34:2b:a7:94:ee:16:c1:c9:00:59:f3:
78:1c:6c:4d:c3:8e:29:7c:cf:db:64:4a:34:f3:28:f0:f0:52:
d2:ec:30:e0:cf:8a:8f:1e:e7:63:0a:b8:89:ea:a5:eb:33:c3:
e7:57:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:38:46 2025 by rpki-client