Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YpfXG-2dHfNtTKNpMj-OsbemVtM.roa
File: YpfXG-2dHfNtTKNpMj-OsbemVtM.roa (raw, json)
Hash identifier: Py0HsQZRGP9PSROxzbKv3shADyqHYqmphNPdDvJa3kY=
Subject key identifier: 62:97:D7:1B:ED:9D:1D:F3:6D:4C:A3:69:32:3F:8E:B1:B7:A6:56:D3
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019739F3A4404130FBF1B3BC7DD866C9DA5E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YpfXG-2dHfNtTKNpMj-OsbemVtM.roa
Signing time: Wed 04 Jun 2025 07:59:17 +0000
ROA not before: Wed 04 Jun 2025 07:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.2.0/23 maxlen: 23
78.128.10.0/23 maxlen: 23
78.128.12.0/22 maxlen: 22
78.128.16.0/20 maxlen: 20
78.128.36.0/22 maxlen: 22
78.128.40.0/23 maxlen: 23
78.128.52.0/22 maxlen: 22
78.128.56.0/22 maxlen: 22
78.128.82.0/23 maxlen: 23
78.128.84.0/22 maxlen: 22
78.128.88.0/22 maxlen: 22
78.128.96.0/23 maxlen: 23
78.128.100.0/22 maxlen: 22
78.128.104.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.128.120.0/23 maxlen: 23
78.128.122.0/24 maxlen: 24
78.128.123.0/24 maxlen: 24
78.142.9.0/24 maxlen: 24
78.142.10.0/23 maxlen: 23
78.142.12.0/22 maxlen: 22
78.142.29.0/24 maxlen: 24
78.142.30.0/23 maxlen: 23
79.124.78.0/24 maxlen: 24
82.118.242.0/24 maxlen: 24
84.201.224.0/20 maxlen: 20
91.148.149.0/24 maxlen: 24
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.166.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
91.148.176.0/21 maxlen: 21
91.148.186.0/23 maxlen: 23
130.185.227.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f3:a4:40:41:30:fb:f1:b3:bc:7d:d8:66:c9:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jun 4 07:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6297d71bed9d1df36d4ca369323f8eb1b7a656d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:81:f2:7f:54:fa:c9:b7:0b:f0:9a:ac:1f:
dd:2a:98:1d:d7:fa:99:40:d7:b6:6f:23:74:15:dc:
e5:b3:9b:c9:97:ea:84:64:4b:5b:a2:7f:2d:35:00:
53:6b:92:2b:32:44:b0:a8:87:58:f7:69:66:b2:b1:
5a:15:8d:d6:77:97:ed:ec:c8:ae:bf:07:71:4a:ea:
0a:88:15:14:3a:44:9f:1f:0b:f7:62:f5:09:81:b9:
43:84:39:b4:f2:57:04:1c:43:ca:ff:1f:c3:b8:d9:
d6:1d:9e:52:b4:c0:15:88:5d:ab:4a:35:0a:77:28:
9c:c8:81:33:f4:11:4d:1e:4d:d5:48:13:df:c8:7e:
05:c6:d6:e3:5c:0e:3e:77:6f:8a:52:11:a2:45:5b:
d2:77:5e:97:26:f5:14:f1:7d:c5:de:97:0c:6a:d5:
51:a1:1e:0a:17:52:09:e6:b5:e4:83:f7:5a:d8:6c:
76:3c:12:21:9e:60:c8:1d:97:e2:9c:c4:9a:8c:0e:
84:ea:f4:f7:5b:70:48:65:77:91:ca:78:0d:97:7b:
18:57:fd:25:f7:23:e4:89:dd:d7:79:be:b5:9e:43:
2e:37:b6:7d:69:74:f4:6a:f8:b5:73:5a:60:17:8b:
ce:3a:2e:64:03:c4:8b:c6:7d:9d:52:37:9d:f7:9d:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:D7:1B:ED:9D:1D:F3:6D:4C:A3:69:32:3F:8E:B1:B7:A6:56:D3
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/YpfXG-2dHfNtTKNpMj-OsbemVtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.2.0/23
78.128.10.0-78.128.31.255
78.128.36.0-78.128.41.255
78.128.52.0-78.128.59.255
78.128.82.0-78.128.91.255
78.128.96.0/23
78.128.100.0-78.128.107.255
78.128.116.0/23
78.128.120.0/22
78.142.9.0-78.142.15.255
78.142.29.0-78.142.31.255
79.124.78.0/24
82.118.242.0/24
84.201.224.0/20
91.148.149.0/24
91.148.162.0-91.148.166.255
91.148.169.0-91.148.183.255
91.148.186.0/23
130.185.227.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:e7:6d:8a:f7:48:51:ee:87:0b:ca:98:cf:79:71:fc:31:4f:
e3:77:5b:3f:b4:1d:32:b2:0b:b9:48:a2:11:a9:57:2e:ac:4e:
28:32:82:f9:a3:52:a9:3a:6b:b1:f8:66:68:68:3c:d2:55:c4:
34:de:9f:93:83:4d:82:5c:70:6a:d0:61:7b:5c:69:65:21:06:
35:89:9c:5c:71:f3:2f:59:19:18:28:58:93:dc:52:16:1e:9c:
35:ff:42:42:1b:bc:3b:ea:81:7d:3b:67:74:9f:2a:2c:ce:bf:
31:e0:14:76:f3:5f:e5:bc:1f:23:d7:28:3e:cb:62:28:ff:34:
ce:7a:d9:4b:3b:7d:72:ad:9d:0a:91:99:27:a1:e1:46:0b:4e:
00:90:c6:9b:11:8a:78:6e:5c:2b:8d:df:5e:d1:e0:e3:61:b1:
e1:71:11:67:6e:71:30:31:2a:8b:26:99:41:7f:65:f2:5a:53:
28:db:92:c6:c8:04:a2:04:af:de:d1:7b:16:23:d0:14:d3:9e:
a2:c9:a7:d5:d8:d5:19:b4:86:43:9a:eb:7f:3f:d7:c3:d1:3b:
d0:8f:c8:bc:77:c6:a6:87:6f:a5:9c:db:39:b9:93:37:3d:64:
d5:12:92:4c:7e:0e:db:e3:f5:2c:f6:33:f5:a7:21:9f:bf:02:
6e:6e:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:50 2025 by rpki-client