Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa
File: Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa (raw, json)
Hash identifier: c4F3qlWubFRDD6IUHkMCGZaiuQoE5JPsyXqZuaXssXk=
Subject key identifier: 62:FD:CE:06:56:A6:DD:53:8E:CA:BA:87:9C:A4:6F:9E:66:D0:A9:31
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 0197214FDD4DA06A028FCB6D7D1E0A50F731
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa
Signing time: Fri 30 May 2025 13:09:31 +0000
ROA not before: Fri 30 May 2025 13:09:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.92.0/22 maxlen: 22
2a0b:93c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:4f:dd:4d:a0:6a:02:8f:cb:6d:7d:1e:0a:50:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: May 30 13:09:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62fdce0656a6dd538ecaba879ca46f9e66d0a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:b6:c7:11:98:7b:d8:eb:ca:72:49:0b:d5:
b4:89:bd:72:2d:ca:15:05:0e:bf:3d:f5:cb:b9:12:
71:af:6a:e2:72:18:fa:29:71:cc:68:c3:84:ff:cf:
2d:d8:1f:e6:e9:18:26:3c:5e:89:2b:c6:81:0a:ad:
29:89:25:0c:d5:a3:46:23:1b:6b:ad:d9:b6:4f:f6:
85:ac:87:ed:25:3c:7e:3e:c9:bc:f9:b6:9f:6b:b0:
20:bf:95:46:59:b4:08:93:aa:5f:1b:00:35:ca:60:
ab:d1:2a:34:1a:e2:37:b6:eb:4a:2a:65:0f:b6:70:
6f:79:ed:44:8a:24:73:eb:7a:3f:17:14:ac:83:9c:
82:2d:86:b8:b7:2c:f9:57:c3:60:b0:91:43:c4:36:
f5:eb:97:45:7f:30:f6:96:cb:f7:66:bd:e1:39:da:
0a:9d:ed:84:3f:a3:ec:ef:24:cf:44:33:1d:10:97:
ce:b1:cc:dc:c0:6f:91:4a:93:86:c7:25:18:f4:4d:
a1:a5:5b:f4:6a:2d:9f:12:ca:1a:b3:b3:9e:2a:36:
62:af:77:f7:4e:f9:f2:6a:d8:cd:99:e7:50:97:67:
bd:f9:d3:65:f8:b0:cd:6c:fe:d1:6d:76:39:57:7e:
8a:ea:d3:df:dd:87:71:bd:41:2c:7b:95:c0:a9:8f:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FD:CE:06:56:A6:DD:53:8E:CA:BA:87:9C:A4:6F:9E:66:D0:A9:31
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/Yv3OBlam3VOOyrqHnKRvnmbQqTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.92.0/22
IPv6:
2a0b:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:48:5f:c9:19:95:7f:0b:0e:46:9a:4c:f5:05:90:0d:27:b0:
43:60:49:ad:d9:58:29:39:0a:3f:43:1f:34:d6:df:bb:eb:5e:
02:41:26:0f:12:df:47:6d:6a:2f:10:14:a2:29:87:c7:37:b6:
85:db:e4:7b:90:43:6c:6c:bf:77:f7:d9:77:28:90:a2:df:df:
45:34:a1:3b:01:df:46:5b:50:db:1c:13:f2:c6:dd:2b:1d:45:
9b:67:9c:91:db:88:ce:9f:ae:95:24:e6:3d:f0:45:df:f7:89:
ac:0c:c2:b8:e5:08:ad:b0:d8:dd:fb:0e:d7:01:b6:b9:f7:93:
df:54:32:1e:68:98:79:ea:a0:18:b1:c6:2f:09:31:76:01:ba:
81:9e:6d:39:02:09:a7:43:80:28:82:b8:fc:f7:fe:57:4f:92:
e7:35:10:96:02:ed:a8:6a:5a:30:2f:31:2f:38:a3:aa:ae:78:
41:69:0c:9f:af:67:33:48:e3:0b:90:99:ba:72:f4:ff:9e:1f:
a5:6d:65:a5:88:40:4c:d5:82:97:7a:4f:27:c6:c8:a5:f1:07:
0e:4e:25:6f:96:80:09:f0:cc:b9:16:c1:aa:6e:ab:f5:aa:93:
2d:3c:97:2c:31:59:6a:5c:0f:7f:e1:7b:71:f2:94:0d:ee:fb:
dd:0d:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:49 2025 by rpki-client