Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YDTnaHg6S6nMfHbrrVzFgMVllfo.roa
File: YDTnaHg6S6nMfHbrrVzFgMVllfo.roa (raw, json)
Hash identifier: VqSpRc1jyk79ORT2OohLUrLZcGzxrvUtdhK7Kd0nGbs=
Subject key identifier: 60:34:E7:68:78:3A:4B:A9:CC:7C:76:EB:AD:5C:C5:80:C5:65:95:FA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01978E19C8C14EEF9D250D8256380B79D7EA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YDTnaHg6S6nMfHbrrVzFgMVllfo.roa
Signing time: Fri 20 Jun 2025 16:09:03 +0000
ROA not before: Fri 20 Jun 2025 16:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 5.183.207.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:19:c8:c1:4e:ef:9d:25:0d:82:56:38:0b:79:d7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 20 16:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6034e768783a4ba9cc7c76ebad5cc580c56595fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:8f:f0:8b:af:fb:77:0f:58:61:6b:b7:ad:
3f:10:85:5e:c8:d7:7a:47:e6:17:68:b3:26:4d:4a:
58:71:92:bc:e2:9c:55:cf:d8:36:eb:96:10:70:8e:
5b:7e:04:0b:8d:e9:68:80:ba:b5:3f:c9:5d:55:cb:
cb:6e:93:43:b3:fb:0c:65:99:3c:03:bd:e1:67:a6:
fe:1a:a6:60:4a:74:22:ac:07:5f:69:20:c3:0f:72:
5d:d1:33:14:1f:90:44:52:fc:d9:8c:71:6c:85:d0:
4f:d1:3f:e3:04:b7:6f:ce:db:e6:84:7a:59:37:d0:
e3:b9:d6:29:db:6b:b0:12:bc:ff:06:8c:a7:28:f9:
68:c4:bb:34:a1:81:49:9b:d1:9b:2b:9e:0c:6c:62:
23:c0:28:d5:fd:6f:6a:ae:96:c1:d3:62:a5:87:10:
12:db:ef:e8:17:34:e2:ac:8f:62:d8:d2:36:b8:6b:
42:b5:de:c6:ab:59:b9:1e:62:e2:e3:29:f0:f6:04:
b7:13:b0:66:01:0c:38:d2:17:f6:33:9a:b3:df:fc:
c3:0b:ce:bb:4f:7e:1f:1e:12:1d:19:6e:c1:1f:a4:
2f:18:6a:6c:10:68:ad:02:0f:41:e9:67:5d:bf:74:
84:6a:2f:f8:02:3e:de:d7:51:86:cf:1e:a5:fe:b2:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:E7:68:78:3A:4B:A9:CC:7C:76:EB:AD:5C:C5:80:C5:65:95:FA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/YDTnaHg6S6nMfHbrrVzFgMVllfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7a:2a:bc:aa:29:d3:c0:f3:ce:ba:b4:76:04:92:42:fe:a2:
b6:16:77:65:c0:64:78:45:59:3d:40:da:50:d7:9a:e2:bc:27:
f6:3c:a5:c6:24:52:68:f3:05:7f:bc:e3:30:5d:ae:1c:af:2a:
ae:c7:65:52:8f:fc:6d:5a:aa:ba:c6:31:ee:37:63:19:b6:22:
a8:78:4b:5b:35:51:5a:e7:5a:55:b8:ae:00:82:2c:11:67:8b:
2f:b6:88:07:e1:ca:69:e9:4c:4f:40:89:87:b3:97:30:4e:44:
1b:1c:95:fd:2f:dc:1d:64:84:58:b9:af:de:ec:75:21:ce:5a:
0c:f5:f0:56:6e:3f:64:42:7a:97:93:bc:32:33:d7:7f:00:c3:
0b:0d:6b:85:44:35:1f:10:ef:4a:77:b4:8f:1d:49:c6:f3:bc:
28:30:b1:03:2d:bb:70:25:ef:d2:1b:ef:68:bd:57:d8:f8:87:
5e:2a:dc:18:50:fe:c7:ff:05:2d:c8:16:1e:c2:4a:d9:66:bf:
3f:c6:0c:b1:d8:2c:b3:e6:71:8e:6e:74:3f:8b:11:ee:ca:e9:
b9:ee:9e:da:98:30:e2:d8:52:30:61:6d:09:e5:d2:52:09:f8:
3d:01:40:a8:2f:d5:cb:83:1c:eb:cf:bb:37:35:6a:c7:20:35:
89:c0:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:30 2025 by rpki-client