Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/y-irRafrFET7ueEFRfDBe0Y0btc.roa
File: y-irRafrFET7ueEFRfDBe0Y0btc.roa (raw, json)
Hash identifier: vwA7uPcYphRiy+M8uy7NrhUZ1Q14uz25pMwIRfApgPI=
Subject key identifier: CB:E8:AB:45:A7:EB:14:44:FB:B9:E1:05:45:F0:C1:7B:46:34:6E:D7
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019A25C4C294EE13B1FCC6F209AC726BBC89
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/y-irRafrFET7ueEFRfDBe0Y0btc.roa
Signing time: Mon 27 Oct 2025 13:04:03 +0000
ROA not before: Mon 27 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207023
IP address blocks: 185.60.202.0/23 maxlen: 23
185.115.64.0/22 maxlen: 22
185.120.8.0/23 maxlen: 23
185.120.10.0/23 maxlen: 23
185.126.72.0/22 maxlen: 24
185.126.76.0/22 maxlen: 24
185.174.90.0/23 maxlen: 23
185.242.92.0/23 maxlen: 23
185.242.94.0/23 maxlen: 23
2a0a:d01::/32 maxlen: 32
2a0a:d02::/32 maxlen: 32
2a0a:d03::/32 maxlen: 32
2a0a:d04::/32 maxlen: 32
2a0a:d05::/32 maxlen: 32
2a0a:d06::/32 maxlen: 32
2a0a:d07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c4:c2:94:ee:13:b1:fc:c6:f2:09:ac:72:6b:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Oct 27 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe8ab45a7eb1444fbb9e10545f0c17b46346ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:7a:2e:ac:42:ac:37:b6:0d:33:22:0b:0c:
1f:69:09:20:f2:c0:bf:6b:f7:c6:7e:da:13:30:13:
06:d9:39:43:76:d4:f9:fe:ae:00:bd:db:9e:5c:5e:
86:c8:b4:4c:9a:5c:e9:5c:61:cb:d6:85:32:dc:eb:
b2:18:1c:b5:1a:4f:3b:fd:89:05:bc:fc:dd:c0:6c:
23:c1:fe:15:4c:77:72:a7:a7:b5:ec:29:60:2f:94:
e4:1a:f8:ed:4f:e9:1e:6f:2a:b8:64:32:70:21:d9:
00:23:bb:08:73:f1:52:57:7f:47:7b:8b:11:43:05:
cc:99:9c:a3:3c:3f:57:ac:5a:75:70:23:6c:15:57:
84:0b:0e:a1:af:ae:48:5c:69:a1:d3:c4:37:b7:3d:
09:0b:d1:16:44:4a:64:20:d0:b2:a5:13:67:14:cb:
92:a0:be:44:07:08:0f:fd:54:b8:4a:51:ae:ec:cb:
8d:19:be:46:82:f3:4d:c2:96:58:5e:d7:ce:2f:55:
ea:c9:70:bf:50:78:53:97:0c:c4:05:59:a5:38:0a:
61:1a:67:3a:d8:bb:3f:35:87:3e:42:cb:56:90:26:
bc:15:81:fc:f0:e7:30:3e:96:8f:c4:4a:1f:7c:c7:
6d:11:d1:0a:c1:13:3e:75:e1:1d:9a:65:32:ea:3a:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:AB:45:A7:EB:14:44:FB:B9:E1:05:45:F0:C1:7B:46:34:6E:D7
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/y-irRafrFET7ueEFRfDBe0Y0btc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.202.0/23
185.115.64.0/22
185.120.8.0/22
185.126.72.0/21
185.174.90.0/23
185.242.92.0/22
IPv6:
2a0a:d01::-2a0a:d07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:62:2b:3b:02:7b:83:c8:ae:4b:f9:ac:26:d6:21:c9:91:c5:
fb:91:c2:b2:74:ac:d7:85:a8:ab:0e:3e:2c:01:ed:bd:0c:fc:
bf:dc:ea:f5:d0:01:c0:e5:fe:4f:76:b4:9b:2e:fd:74:09:58:
94:09:fc:a9:7f:09:e1:f0:08:55:5c:ed:05:8c:8a:78:ea:3e:
64:fb:f5:bb:7d:44:bd:bc:b3:3e:04:c5:ba:92:dd:96:e3:26:
08:86:a9:0f:4b:1f:0d:13:6e:2c:22:38:d1:ec:b7:4a:24:4b:
55:e0:14:ed:9a:3c:6a:4d:bc:ef:97:93:60:c3:8b:4e:b5:f9:
d8:34:69:2c:56:b9:74:d3:18:83:4d:85:7f:de:73:9d:ff:5a:
4f:74:94:27:a3:b2:c3:95:c7:94:e1:bb:0f:08:c0:12:a7:44:
7d:c2:4f:4c:bb:bc:cd:ce:3d:a7:08:06:67:02:1a:00:2a:25:
aa:50:04:e6:7a:66:4f:ef:da:e6:1c:85:0c:88:0d:63:7a:a0:
99:5d:c1:ad:e7:76:50:7f:d8:c3:3d:5b:d7:e5:03:fd:9d:83:
cb:ae:04:f1:c6:be:8e:d6:61:4f:c3:63:f4:75:aa:75:13:77:
59:88:b1:ef:b1:e7:1f:8b:34:08:b7:b8:57:08:fa:4d:34:11:
65:3f:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:36:03 2025 by rpki-client