Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/yFZR2dMAN5V-U5yvB8zako3sBAI.roa
File: yFZR2dMAN5V-U5yvB8zako3sBAI.roa (raw, json)
Hash identifier: Su1HZF/T/54lCtr91bZGjGbSwHR7/PFdtQAeMPFLxmk=
Subject key identifier: C8:56:51:D9:D3:00:37:95:7E:53:9C:AF:07:CC:DA:92:8D:EC:04:02
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019A0ADB6BCA8D755E445152546044CC7710
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/yFZR2dMAN5V-U5yvB8zako3sBAI.roa
Signing time: Wed 22 Oct 2025 07:39:03 +0000
ROA not before: Wed 22 Oct 2025 07:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211144
IP address blocks: 193.18.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:db:6b:ca:8d:75:5e:44:51:52:54:60:44:cc:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Oct 22 07:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c85651d9d30037957e539caf07ccda928dec0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:df:00:de:37:02:f6:c6:58:1d:76:4d:6f:
88:af:53:69:36:8b:af:b3:40:12:8f:c9:d7:6b:6b:
e2:4d:91:f1:39:bd:12:b4:f8:e3:22:ab:b7:28:8c:
af:5a:fe:d4:b8:0f:5e:86:e9:e3:2e:ab:ac:03:8b:
d6:4f:8d:fa:d5:fd:87:5d:7e:27:90:33:f0:f8:87:
23:5f:8b:69:86:49:6d:f7:58:38:6b:ae:ed:32:2d:
44:1f:7b:27:32:8f:7c:bc:a4:6d:5e:9e:91:3f:5d:
f9:49:27:c6:a8:50:bc:10:85:4e:a6:94:7d:3b:9a:
c4:a2:37:79:60:ae:b8:0a:ea:5c:1d:8d:13:cb:4e:
9f:2a:76:df:57:c6:60:5c:57:b3:3f:d7:1d:7b:ee:
c1:29:f5:2f:c3:85:23:4d:cb:d4:3c:e6:8d:8d:6e:
ce:ab:e0:51:a9:12:bb:35:d6:99:ff:0e:0a:1a:af:
c6:9b:f2:86:dc:b7:03:e7:ff:9f:d0:09:82:ed:b4:
f6:85:04:64:71:ff:9e:4e:de:d4:cc:91:29:aa:d6:
67:fa:f7:8c:a2:33:a7:2f:6e:dd:ed:cc:dc:68:c0:
98:47:bc:97:0d:90:30:92:65:57:97:17:2d:0d:6f:
ea:e7:96:31:9f:80:c5:ac:85:fa:18:d1:14:96:61:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:51:D9:D3:00:37:95:7E:53:9C:AF:07:CC:DA:92:8D:EC:04:02
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/yFZR2dMAN5V-U5yvB8zako3sBAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.18.239.0/24
Signature Algorithm: sha256WithRSAEncryption
93:24:b8:dd:17:de:ef:39:00:cf:a4:99:fb:f2:8b:72:ce:b2:
d0:01:70:c0:f1:3d:6d:5b:0c:73:d5:9d:49:7f:e3:e3:6b:0a:
da:f5:4a:5a:f2:b1:08:4b:e9:dc:f3:04:f4:c7:24:9e:95:a4:
87:b3:dc:eb:5f:0e:7b:85:bb:08:d7:76:72:f6:97:27:f9:bc:
2c:92:f8:87:3f:19:07:3a:23:fd:7a:53:52:08:68:1d:c2:fe:
b7:28:fb:11:6f:48:fd:96:d5:58:8a:d2:7b:d3:df:78:84:6b:
14:c0:2b:ce:ab:ed:0b:d6:5e:58:ea:61:26:53:6e:ee:fc:e6:
54:83:60:37:c9:42:b3:ba:e9:77:cc:79:f6:20:7c:df:50:35:
64:aa:8d:43:a4:12:07:f6:81:cb:9c:e8:62:87:13:02:5c:fa:
9f:79:3f:ea:cf:e2:20:14:ab:36:83:28:7f:3a:78:26:0b:df:
70:24:25:dc:ec:24:92:69:5c:7a:ee:ad:cf:58:a0:da:f8:78:
1a:06:48:50:b9:b0:52:63:e2:a7:83:fb:48:80:0b:6f:dc:11:
27:38:74:de:4f:20:e6:a5:7e:e1:da:02:3d:03:82:14:ca:59:
5f:3a:8e:08:e8:9d:29:f1:f3:3c:44:e5:2a:9c:97:cd:64:ab:
b4:b1:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:58:09 2025 by rpki-client