Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pYGm2tpxlA1Inc5RwZwzaK7MhCA.roa
File: pYGm2tpxlA1Inc5RwZwzaK7MhCA.roa (raw, json)
Hash identifier: YDCLQTVYvrYaA4ZxH3ZF6ZPovSyXw6Dxgz5SE1LgEAw=
Subject key identifier: A5:81:A6:DA:DA:71:94:0D:48:9D:CE:51:C1:9C:33:68:AE:CC:84:20
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A2D9705EECB57A0644AE3841F65AA51DD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pYGm2tpxlA1Inc5RwZwzaK7MhCA.roa
Signing time: Wed 29 Oct 2025 01:31:03 +0000
ROA not before: Wed 29 Oct 2025 01:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 94.249.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:97:05:ee:cb:57:a0:64:4a:e3:84:1f:65:aa:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 29 01:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a581a6dada71940d489dce51c19c3368aecc8420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:2e:af:21:68:15:b0:b0:01:ba:ed:aa:0c:
ea:06:c6:84:94:e6:79:69:f4:d4:db:c3:8d:11:1e:
30:22:46:96:53:fa:4e:59:05:f6:e5:60:51:f9:1d:
98:90:d2:0c:9d:c8:03:e5:2c:60:68:30:7d:37:1f:
be:c0:96:50:b9:f9:1f:08:e2:e4:47:ae:34:df:88:
37:57:50:0e:7b:61:5d:0e:ee:57:e7:27:8d:24:78:
96:4e:a4:9d:85:bc:48:30:7c:f2:54:98:09:ae:8f:
32:89:28:8f:fc:c7:59:c7:d8:25:47:8e:70:a5:31:
6b:23:ab:87:fe:4e:7e:04:83:b7:e6:a9:10:dc:ae:
28:fa:ca:90:5f:ef:da:54:05:96:ed:e0:29:06:bd:
4b:9c:ba:bd:c8:16:10:21:65:84:20:80:49:b0:2c:
5f:84:92:d2:69:9d:9e:30:16:14:d6:3f:29:79:da:
18:e1:77:9d:ad:15:18:a1:6f:8f:de:ef:69:06:60:
3f:ac:95:62:11:08:f6:f5:83:93:50:12:2f:ef:95:
30:15:65:77:5b:1c:fc:19:78:7c:5e:bf:23:2a:05:
eb:69:05:9c:0a:52:63:98:c4:b3:47:4a:23:ba:16:
d6:cd:6d:94:6c:13:9c:ff:10:73:f2:cf:b8:18:22:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:A6:DA:DA:71:94:0D:48:9D:CE:51:C1:9C:33:68:AE:CC:84:20
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pYGm2tpxlA1Inc5RwZwzaK7MhCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.232.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8a:cb:17:f1:d0:4e:e4:2f:45:be:e3:89:64:a8:f9:8f:33:
89:ac:8b:5c:7f:4b:d7:0e:a7:18:f2:8e:35:dc:c8:85:a8:f5:
46:46:cf:8a:99:92:e0:29:33:0d:a7:a4:d9:4b:73:d7:62:5d:
be:a5:b7:e7:87:af:fa:f3:e9:b5:72:06:62:9f:a6:e5:ae:2b:
a4:f7:ef:57:b2:a5:8f:75:73:1a:81:49:27:47:13:b7:93:aa:
c4:f9:f1:9f:51:66:6e:81:1a:2d:af:44:ad:da:c9:6b:d1:af:
e5:35:5f:65:6a:45:3e:30:9a:b9:5a:14:90:d7:6b:da:ae:43:
f0:bf:15:cd:73:e0:58:bd:9b:74:47:74:31:21:53:e1:02:5e:
90:76:66:2b:67:f7:a8:0f:ea:ce:f3:56:ea:d5:b5:0b:3d:f9:
c7:10:e4:1a:50:33:09:f8:0f:92:41:14:ab:19:1e:db:16:e2:
68:55:be:d2:50:8a:b3:88:2b:b3:a1:f4:88:37:72:d4:bc:27:
17:7a:e5:e9:d3:64:6b:ac:49:6e:50:ea:4e:1d:24:9d:61:6b:
94:69:fd:46:77:d5:1d:da:a7:71:9b:6b:df:19:3d:8b:03:13:
89:f0:60:a1:22:72:42:4e:b8:09:a7:34:d3:1f:32:fc:3f:0c:
36:9d:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:28:12 2025 by rpki-client