Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yKzxI9NKxV5XuGWUDTz6x8xcChQ.roa
File: yKzxI9NKxV5XuGWUDTz6x8xcChQ.roa (raw, json)
Hash identifier: VjkD6Ylxb+ItU8yw65X3uY4TWiDk5GOCp5kHXRytv48=
Subject key identifier: C8:AC:F1:23:D3:4A:C5:5E:57:B8:65:94:0D:3C:FA:C7:CC:5C:0A:14
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01991A2BD61A7436BF604C3B58189BD4E4BA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yKzxI9NKxV5XuGWUDTz6x8xcChQ.roa
Signing time: Fri 05 Sep 2025 13:58:24 +0000
ROA not before: Fri 05 Sep 2025 13:58:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57208
IP address blocks: 194.132.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:2b:d6:1a:74:36:bf:60:4c:3b:58:18:9b:d4:e4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 5 13:58:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8acf123d34ac55e57b865940d3cfac7cc5c0a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:03:06:21:7f:2d:70:12:88:f1:c4:b3:e0:
dd:e7:b4:0e:65:53:fd:cb:dc:e8:3c:ec:09:04:a6:
cb:43:14:51:9d:78:52:09:92:70:f2:e2:35:f0:5d:
eb:ff:c0:ea:0d:9a:75:50:ab:15:2b:3c:7a:0b:47:
09:db:ea:83:dc:df:cc:46:d4:9b:8b:44:50:8c:ea:
15:42:a8:8c:c3:33:df:6d:a6:18:8f:2a:c8:91:52:
72:ae:f2:e6:1c:b5:10:56:41:41:f1:a5:a5:f3:41:
50:70:aa:75:50:bc:08:2c:8f:de:df:a4:90:92:30:
95:b3:af:ba:cf:6b:6b:b5:f7:af:ea:2c:0a:b9:59:
0e:eb:c3:98:87:c1:90:43:b9:0a:a9:9c:1a:3d:ed:
d6:01:7a:86:9a:0e:6b:db:90:0f:91:6f:da:64:89:
e7:14:4f:98:a9:ef:5d:2c:b6:79:8e:84:ad:0c:47:
a9:f3:bf:fc:87:14:48:04:ca:10:b2:4b:8d:26:65:
05:e5:76:a0:9c:64:d2:1d:9e:e9:dd:75:02:2e:f0:
f6:24:de:79:ba:ff:a4:12:a6:90:a1:10:14:66:fc:
13:92:f9:6e:5a:bd:c3:bb:9b:7c:40:5b:7d:20:31:
46:53:40:69:07:31:69:ad:7e:53:47:19:50:85:d7:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:F1:23:D3:4A:C5:5E:57:B8:65:94:0D:3C:FA:C7:CC:5C:0A:14
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yKzxI9NKxV5XuGWUDTz6x8xcChQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e0:e3:bb:e7:9e:d2:e1:19:9c:d1:fd:c0:16:91:61:a4:20:
f0:87:25:96:cd:72:10:e8:87:38:f6:c1:4f:4e:f6:27:1d:6f:
08:4a:51:98:64:7c:02:59:8f:76:4b:8c:d0:34:ab:70:ea:92:
d4:be:b6:d2:86:e7:37:dd:55:87:1e:33:7f:dc:bf:02:7f:79:
97:ac:2e:51:23:67:de:36:c7:f2:16:57:d1:a7:28:cd:fc:ff:
86:d5:eb:21:81:d0:ba:08:cf:09:68:88:bd:25:67:8e:2d:82:
0a:5c:96:9c:b9:81:e8:ae:d4:60:23:df:d8:5c:b2:62:ad:0b:
59:6a:d1:b5:f2:52:47:15:3d:6a:92:84:74:63:0b:38:d9:8c:
cb:cd:a4:72:e8:85:12:5f:30:ac:e0:6b:4a:e0:58:ad:4b:53:
29:cb:bd:d5:a0:9b:b2:f6:ce:59:93:90:d8:5b:c2:14:75:3a:
c0:51:98:5e:d2:84:6d:1b:6e:12:c1:0f:c3:a5:40:b7:47:87:
d4:19:32:2f:47:4c:79:bd:cb:22:66:44:27:69:4c:be:33:93:
70:59:8d:a3:56:99:81:af:86:7a:b2:a3:f9:73:9e:87:03:c2:
93:c9:2d:4f:da:a5:31:5d:5f:62:39:32:87:ff:56:53:6e:44:
9e:5d:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:15:14 2025 by rpki-client