Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/yDG1vLQ-KGVU7rKzL_YKjYA7asI.roa
File: yDG1vLQ-KGVU7rKzL_YKjYA7asI.roa (raw, json)
Hash identifier: nobKKBS8kgxDPf0JFjAg1XT1LQOMq5xVuTfEuqxhhFw=
Subject key identifier: C8:31:B5:BC:B4:3E:28:65:54:EE:B2:B3:2F:F6:0A:8D:80:3B:6A:C2
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 019A6E221086E853C09BFBB88B384903F41A
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/yDG1vLQ-KGVU7rKzL_YKjYA7asI.roa
Signing time: Mon 10 Nov 2025 14:18:37 +0000
ROA not before: Mon 10 Nov 2025 14:18:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198352
IP address blocks: 185.184.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:22:10:86:e8:53:c0:9b:fb:b8:8b:38:49:03:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Nov 10 14:18:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c831b5bcb43e286554eeb2b32ff60a8d803b6ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:43:10:2c:73:69:0b:bc:a5:db:f4:e5:30:
a5:a5:70:0a:09:e2:35:ee:97:6e:fc:5f:8d:39:d8:
38:33:20:7f:56:cd:c5:44:9a:5a:eb:9a:3d:95:19:
aa:ec:fe:22:3a:56:79:59:59:d5:88:a2:28:bf:32:
1d:37:bf:53:c7:0b:29:88:f9:76:ba:df:d9:40:0b:
28:03:1b:53:f4:c8:ae:6d:b9:9c:a7:fb:41:dd:d8:
03:78:b3:9c:d8:af:0b:6c:27:b2:e9:d5:cc:29:94:
b9:ab:a1:26:f7:65:3d:bf:f2:b3:c0:60:56:d0:ae:
5a:9a:07:ac:21:fa:52:f6:c5:c4:b5:3e:69:86:ae:
3e:53:2d:fc:8c:85:81:73:4f:3b:b4:00:be:6f:26:
32:72:d3:b4:df:02:bc:87:b4:b4:63:a6:61:f8:4a:
bc:4b:b5:ad:97:02:54:f3:1c:0a:23:e9:db:7f:9c:
27:f1:7d:78:bf:0d:cd:c0:5b:90:44:e8:ae:af:94:
79:dd:2c:8b:84:c7:59:c9:e6:bf:14:45:43:6a:13:
c9:34:3b:13:9b:89:2e:2e:c1:55:62:1b:72:09:f6:
5b:59:b6:21:82:95:12:f2:06:97:45:e9:10:23:56:
15:57:59:a4:02:2b:71:e6:2d:82:dd:82:f0:fa:18:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:B5:BC:B4:3E:28:65:54:EE:B2:B3:2F:F6:0A:8D:80:3B:6A:C2
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/yDG1vLQ-KGVU7rKzL_YKjYA7asI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.108.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e7:97:1a:70:dd:e0:53:67:65:1a:91:a3:ea:82:37:d8:0e:
00:a3:bd:70:da:ef:8e:9e:41:cb:d3:c9:a2:65:ca:60:04:a0:
73:50:f4:56:fc:79:79:ee:04:24:ff:ae:a3:81:3c:97:e1:a1:
1b:92:bc:7d:c9:5c:e0:d6:b1:23:1d:bf:5f:f2:84:7e:12:99:
72:62:e8:8e:35:b4:a6:7b:0e:8f:5a:ca:37:3f:0f:4d:2f:64:
49:03:c6:98:8a:9c:ba:90:da:64:2a:7c:95:9f:1a:44:8c:f8:
34:36:2e:d2:8f:f3:d9:c5:9a:66:52:64:88:cb:bd:e4:30:c7:
a6:a2:29:f9:cf:aa:10:99:eb:1b:ae:a0:05:45:63:b4:02:12:
75:a8:26:ef:23:fb:3b:35:2e:4e:1c:de:9b:16:64:4a:a3:a9:
2e:d7:64:ea:a1:14:4a:37:a5:26:72:61:70:29:4e:10:36:e6:
7f:3a:ce:12:a3:b5:8f:f9:7a:5d:cc:16:de:a5:d3:f7:2a:e5:
4c:f6:5e:0f:0f:8e:1c:84:51:c8:12:39:37:16:a9:9a:37:c5:
11:39:86:28:ea:bb:cb:49:c4:f6:ce:d0:80:eb:ee:f2:91:03:
cf:29:80:98:40:5e:36:5c:e3:cc:54:55:da:22:f2:2f:38:4c:
29:b2:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:53:18 2025 by rpki-client