Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ywp3ZEqSjLyUPVybVjrM9pe6Ow0.roa
File: ywp3ZEqSjLyUPVybVjrM9pe6Ow0.roa (raw, json)
Hash identifier: 79ZB1yTf8jvqa75wt5r141IhW7u6XFyaXr3DUkB3VVY=
Subject key identifier: CB:0A:77:64:4A:92:8C:BC:94:3D:5C:9B:56:3A:CC:F6:97:BA:3B:0D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196C2B1708E9E0F2647142D0E435C8E9D38
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ywp3ZEqSjLyUPVybVjrM9pe6Ow0.roa
Signing time: Mon 12 May 2025 04:12:10 +0000
ROA not before: Mon 12 May 2025 04:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197549
IP address blocks: 85.93.0.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
217.69.175.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:b1:70:8e:9e:0f:26:47:14:2d:0e:43:5c:8e:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 12 04:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb0a77644a928cbc943d5c9b563accf697ba3b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:cb:a8:ce:e5:6d:7a:d9:42:4a:98:80:08:
13:d3:f2:f4:04:d4:94:9e:a1:d4:cc:c0:76:4d:5d:
c9:8b:f1:9c:5e:43:c4:b8:c6:4d:46:41:41:de:e4:
0e:f2:91:f3:5b:c1:89:73:2f:90:91:1a:18:02:3d:
39:a6:10:53:90:1e:1b:fe:46:34:5f:d0:65:c3:8c:
a4:b9:b5:39:11:5c:10:0f:8c:8f:64:0b:15:ec:52:
ee:b3:81:8b:00:c9:22:86:1b:32:b4:e9:63:a7:bc:
51:94:e5:05:6d:6a:76:18:68:27:ad:c5:83:3d:dd:
6b:50:b9:de:81:56:69:51:32:f0:da:07:2c:55:17:
d7:28:27:74:93:cf:fa:94:61:ec:23:fe:0a:dc:88:
4e:e9:0f:d2:2e:7f:43:e1:b5:d1:dc:83:69:08:e2:
b8:d4:29:57:ef:88:05:cb:bb:e1:1b:03:3d:80:b6:
a4:6e:25:46:09:5a:f8:b5:5d:63:8c:9f:c0:9b:9f:
08:64:c9:42:24:5a:bd:bd:95:f6:54:b8:08:b4:9b:
f2:52:ce:f0:54:de:ad:a8:be:82:9e:90:bb:36:51:
b6:86:56:b6:bb:20:9b:a8:cc:e1:fb:8a:10:fd:fc:
29:91:ef:99:f3:61:96:ea:98:c4:c8:4e:3a:98:e4:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:77:64:4A:92:8C:BC:94:3D:5C:9B:56:3A:CC:F6:97:BA:3B:0D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ywp3ZEqSjLyUPVybVjrM9pe6Ow0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d3:0e:63:a4:6f:3e:32:0e:5f:68:2e:c3:7a:ec:e1:0d:e0:
5a:a4:b9:89:68:fa:b1:bf:9d:2b:4d:f0:48:dd:6d:c4:89:04:
c2:87:32:d7:67:0d:a8:1d:11:25:bb:1e:b4:cd:a5:87:88:44:
1d:84:9b:e6:92:d6:21:ae:28:17:b8:9b:43:87:30:40:bb:c6:
13:b0:6e:78:88:38:96:87:4d:e2:c4:15:d4:4d:d7:1e:52:2c:
31:34:11:22:54:41:05:6f:68:58:e7:91:a2:29:d8:04:6c:4f:
e9:39:d9:b9:3b:82:aa:cd:7d:bc:a0:f0:fa:15:43:d3:d2:51:
f1:ba:de:3b:c6:d7:68:04:c5:8e:85:a6:dc:bb:5d:ad:a5:27:
fb:96:8b:ad:57:47:86:ea:7f:b9:78:ad:97:7b:77:2e:11:56:
6d:24:c5:cb:dd:83:c1:01:e4:55:2f:01:ba:9e:6b:f2:85:18:
10:34:2f:89:6d:7f:e1:25:de:e5:da:1f:6c:da:fc:0b:bf:d6:
5c:fd:c8:c1:1f:a6:de:5c:93:4d:81:f9:bb:26:d0:c4:ee:41:
84:d2:6a:2e:9f:3d:8b:75:f7:2a:17:96:87:a6:d9:3d:ac:e1:
75:d9:2c:9b:a1:cd:1f:55:62:99:c6:e8:cf:40:78:cb:b5:51:
b2:6d:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:55 2025 by rpki-client