Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa
File: Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa (raw, json)
Hash identifier: g3Z/I7jSdU5A7yhO2T69Xb/0yTPIA/OmlqPS3Q3yctw=
Subject key identifier: 62:FE:0D:BB:E1:0D:E7:38:4B:E8:A1:B1:C6:CF:F1:CD:D2:C0:CC:F1
Certificate issuer: /CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Certificate serial: 01973B001F8AFD4BD0A26CE812999D9142DF
Authority key identifier: E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa
Signing time: Wed 04 Jun 2025 12:52:33 +0000
ROA not before: Wed 04 Jun 2025 12:52:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203263
IP address blocks: 185.165.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:00:1f:8a:fd:4b:d0:a2:6c:e8:12:99:9d:91:42:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfe5b33ee443fde92bd42118881ca6e8263a49
Validity
Not Before: Jun 4 12:52:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62fe0dbbe10de7384be8a1b1c6cff1cdd2c0ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:23:1b:f0:5c:11:76:ab:92:b5:86:b8:f0:
29:fe:2c:89:7d:3a:3a:76:1a:8b:ac:3f:47:f3:9d:
fa:85:80:fa:cf:f5:65:00:a6:c6:a5:ae:05:f8:14:
40:ba:61:2c:b9:6c:70:ff:a1:d4:76:62:af:9e:54:
fb:0d:ca:7f:f3:f6:32:d0:9c:0a:f5:03:6f:dc:84:
19:61:1a:3b:f9:8d:45:be:0c:52:c4:69:fa:73:1f:
63:97:36:23:32:fb:2f:64:90:22:1c:b5:46:28:fc:
20:1a:a4:40:fe:11:71:94:f4:d4:e1:ac:55:ea:31:
c8:d2:e4:75:9b:07:a0:73:3a:98:c2:5c:0b:23:0d:
c5:0c:5a:e2:ee:40:07:22:cc:11:f5:6e:b6:2d:20:
a4:06:5c:48:b4:48:5e:45:93:5f:f4:f5:71:e3:1d:
21:38:4b:2e:6a:41:c0:15:d6:5b:4a:d7:c0:1b:45:
23:b0:da:4a:8f:d4:67:1e:1a:68:c6:9a:f8:07:2d:
78:e8:a3:15:db:9b:f0:a3:8c:aa:d7:4b:e8:cf:7d:
7c:36:76:71:f6:3e:0a:38:f6:b7:72:f0:8f:47:91:
6a:2f:39:f2:87:57:12:aa:43:85:ea:06:f0:5d:dc:
4a:46:c3:98:7e:69:17:b6:3c:78:e2:dd:2c:48:3f:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FE:0D:BB:E1:0D:E7:38:4B:E8:A1:B1:C6:CF:F1:CD:D2:C0:CC:F1
X509v3 Authority Key Identifier:
keyid:E8:CF:E5:B3:3E:E4:43:FD:E9:2B:D4:21:18:88:1C:A6:E8:26:3A:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M_lsz7kQ_3pK9QhGIgcpugmOkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/Yv4Nu-EN5zhL6KGxxs_xzdLAzPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a4356c-8d14-4b1c-a55b-70c2e7686e6b/1/6M_lsz7kQ_3pK9QhGIgcpugmOkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.95.0/24
Signature Algorithm: sha256WithRSAEncryption
78:de:70:49:3c:ef:7a:98:58:d0:c6:da:2a:0d:e1:3c:f8:48:
a5:78:f2:10:50:62:a4:21:3e:b3:8f:29:15:1f:5d:03:d8:b1:
8b:01:9d:d5:c0:6b:4a:6a:5a:6c:a8:20:43:7e:bb:cc:ac:db:
8e:97:c7:55:50:d1:a8:51:17:42:e0:d3:f4:c5:5c:b7:54:e1:
b9:18:ca:6b:10:88:32:45:a7:00:14:df:ff:84:6c:66:cb:cf:
0f:da:23:e5:b3:9a:f0:96:58:75:c7:76:43:17:93:ae:1c:9c:
41:07:65:9e:10:86:44:d4:f0:14:7e:0b:d1:08:0f:4c:aa:16:
6a:87:ed:08:2e:79:3c:50:49:28:a2:f0:eb:53:2e:6d:01:4a:
6b:e3:47:3b:e4:35:cc:1d:e3:43:8d:4e:0a:b4:b7:b0:d5:54:
26:4b:ee:df:9a:ae:a4:79:df:5d:20:8d:83:f7:8c:3d:dc:bc:
41:e5:ad:67:dc:b3:e7:64:2c:15:b2:3f:43:c5:0e:02:59:8b:
b1:fa:23:7d:a9:de:d4:5f:a8:49:de:e9:62:8f:1f:dc:c5:5e:
b6:36:bd:c8:0a:3b:47:d3:b3:c5:9d:d2:00:e5:af:2e:f2:1a:
4b:5b:84:7d:40:7a:5f:29:ec:9c:1d:9e:e0:b1:d2:fd:e7:34:
c0:73:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:17 2025 by rpki-client