Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/y7MysYpZHJujGuZ6Fr78DOv06xw.roa
File: y7MysYpZHJujGuZ6Fr78DOv06xw.roa (raw, json)
Hash identifier: /KHykvcUefxMKJ6SkwL/ZC+1qKXU29QmDsBwHvPXBt8=
Subject key identifier: CB:B3:32:B1:8A:59:1C:9B:A3:1A:E6:7A:16:BE:FC:0C:EB:F4:EB:1C
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199AF8D0CB97C14D491B8068A07A40844BA
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/y7MysYpZHJujGuZ6Fr78DOv06xw.roa
Signing time: Sat 04 Oct 2025 14:08:00 +0000
ROA not before: Sat 04 Oct 2025 14:08:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47152
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb04::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:af:8d:0c:b9:7c:14:d4:91:b8:06:8a:07:a4:08:44:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 4 14:08:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb332b18a591c9ba31ae67a16befc0cebf4eb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:a1:a8:5f:7d:aa:e0:f1:ac:dc:f0:b2:0d:
d1:ee:92:85:bc:67:3d:a9:d0:43:fe:a3:de:e6:ad:
f2:18:8c:67:28:ea:79:4f:a9:46:35:be:44:7c:9d:
97:56:93:fa:97:d9:ba:f7:21:d4:3a:69:70:be:7e:
5b:7a:50:c6:8f:96:39:22:78:6d:ac:8e:94:32:e5:
fc:4b:36:83:3c:a0:fc:1a:79:7a:0e:a0:ad:01:3a:
f7:17:ab:47:d9:33:41:c5:b5:23:a4:93:ac:fa:96:
9d:7d:ee:83:8c:ac:c8:8c:bf:9d:46:53:1e:0b:3c:
9b:1f:86:e9:73:1e:c8:a0:a4:7a:7c:a3:4f:04:28:
ec:a7:ef:39:0a:5f:a7:d6:93:5b:4e:9b:f7:1b:ed:
d1:8f:1a:b9:17:ff:59:37:ff:b4:d4:f8:d4:b2:f3:
cd:15:6f:93:ea:41:91:8d:18:7e:4f:83:4f:49:57:
1e:76:6e:5e:9e:2a:f6:1f:5c:05:98:ae:d8:3e:a8:
3e:a5:3d:be:8b:4d:df:fa:dd:45:a0:3d:bf:96:c0:
13:e7:c0:c5:e7:25:d7:db:08:fc:6a:ef:1c:a2:98:
44:68:ca:1a:6e:ae:3f:33:62:85:fb:47:5c:29:b6:
fa:85:df:9f:93:7f:f8:95:91:c8:eb:3e:3d:1f:79:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:32:B1:8A:59:1C:9B:A3:1A:E6:7A:16:BE:FC:0C:EB:F4:EB:1C
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/y7MysYpZHJujGuZ6Fr78DOv06xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb04::/32
Signature Algorithm: sha256WithRSAEncryption
0d:69:ec:7f:43:46:03:fb:6c:d2:b7:a3:11:25:04:7d:74:c5:
95:66:9e:36:55:f8:a4:2a:cd:f1:a5:ba:82:bb:d9:4b:e2:2d:
80:97:73:85:a2:cc:e4:80:48:d4:60:8c:f0:70:94:da:78:41:
bc:67:6a:16:9e:7e:ab:d9:0c:05:22:00:67:1d:d5:dc:72:73:
d9:22:25:ea:57:a9:55:40:8d:b8:04:94:0b:e0:64:05:c7:02:
6e:4a:75:d1:3c:0c:fb:ce:77:1b:86:7a:f3:d7:80:a7:2b:e4:
a0:a9:24:4b:93:99:96:67:a4:df:7d:a9:28:2d:56:59:64:09:
46:9a:d4:4b:da:98:a3:24:cc:e0:df:8d:80:9c:ab:05:ec:cc:
a8:e5:18:a5:96:2d:76:d5:ab:de:fb:a8:2f:98:c0:81:7b:78:
15:12:7d:cd:73:88:ae:a2:48:18:ca:88:fe:01:74:bc:6c:a3:
df:07:b6:be:03:2d:63:7c:73:df:be:f7:6a:09:7e:a9:7f:de:
4d:87:92:d0:af:71:37:15:01:1f:75:69:b9:55:9b:bd:bf:e9:
00:76:fb:c8:30:16:72:05:c4:61:e9:23:46:9d:27:d3:11:bc:
c0:6a:65:27:1d:a3:0e:e0:19:cd:f1:f2:65:54:0d:39:7e:95:
8b:71:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:34 2025 by rpki-client