Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-CY-zTM_2KPuC3-RO6wkoP9HT8U.roa
File: 1-CY-zTM_2KPuC3-RO6wkoP9HT8U.roa (raw, json)
Hash identifier: FIvCOFqLbPOvnjAU2AFTZ3hzCypaV9qrjdkcUj0IuFo=
Subject key identifier: F8:26:3E:CD:33:3F:D8:A3:EE:0B:7F:91:3B:AC:24:A0:FF:47:4F:C5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0197633C7D93122E0089A04CDCD7288D50C0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-CY-zTM_2KPuC3-RO6wkoP9HT8U.roa
Signing time: Thu 12 Jun 2025 08:23:18 +0000
ROA not before: Thu 12 Jun 2025 08:23:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216462
IP address blocks: 80.97.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:3c:7d:93:12:2e:00:89:a0:4c:dc:d7:28:8d:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 12 08:23:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8263ecd333fd8a3ee0b7f913bac24a0ff474fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:01:44:1f:c3:b9:2d:a6:72:41:e3:d4:05:
c1:04:b4:55:a1:2c:5c:80:16:ca:34:cf:0d:6d:d8:
71:ac:13:41:57:18:d3:00:ab:05:c9:72:2a:d9:99:
71:6c:91:be:32:53:e2:1b:54:99:a1:75:b4:22:ae:
da:65:35:77:50:b3:eb:32:5d:93:6d:3d:a8:95:02:
d1:84:27:fa:58:80:e1:d8:41:ac:b0:72:f4:1f:aa:
f6:d2:54:81:3a:bc:f1:7f:1f:16:32:af:f5:d4:d2:
84:70:3d:28:4b:f1:da:54:db:64:8a:a1:c5:0f:a7:
94:c3:cd:e3:ad:f8:12:ba:32:9c:06:47:a9:2a:29:
9c:cd:36:61:6f:fc:ad:25:47:46:da:94:e0:ad:39:
26:cb:c7:5d:10:58:7e:fa:c7:e3:f5:e0:6e:2e:5a:
89:56:0e:8f:98:de:e0:ba:2a:5b:77:26:cd:7c:d3:
cf:b1:b5:ec:e0:12:1a:ab:90:0d:b0:c6:43:e7:e0:
8e:25:aa:d7:8e:de:12:36:0c:5e:09:93:75:bc:ad:
6a:da:04:53:8f:d1:d5:dd:c6:cb:97:d4:36:ff:3a:
05:ab:51:18:85:f6:2a:9a:f9:0c:26:fb:13:0d:3e:
4e:9d:4c:d8:5f:12:b8:e6:1e:07:f6:ac:e3:c5:6e:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:26:3E:CD:33:3F:D8:A3:EE:0B:7F:91:3B:AC:24:A0:FF:47:4F:C5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-CY-zTM_2KPuC3-RO6wkoP9HT8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.146.0/24
Signature Algorithm: sha256WithRSAEncryption
78:10:06:fc:c4:84:82:71:a7:df:22:f4:83:32:5c:89:01:58:
07:fb:d6:c2:d2:42:5f:84:6f:00:cf:61:63:0e:ca:6c:ee:5a:
63:73:00:e6:c0:63:bf:f1:76:da:b3:d4:bd:3a:9d:63:1a:27:
2a:08:45:8e:46:8c:f8:90:8c:9c:a1:b8:8c:f3:00:42:2b:38:
7e:86:04:2d:1d:1c:31:3e:38:21:6f:c7:68:3e:11:48:e1:05:
9a:32:5e:82:62:bf:8b:1c:07:cd:74:e5:34:4a:f8:c5:2e:a3:
f9:6d:24:ac:22:5a:9a:b6:e1:48:52:ba:ed:90:72:a1:9d:e5:
b0:3b:4d:d6:ae:eb:b7:d9:22:9e:1d:38:10:b7:97:b6:fa:a5:
e1:fc:c1:cc:61:ba:08:8b:6a:51:92:64:90:ea:83:d5:f9:95:
04:22:e3:1b:5d:b6:7a:43:b9:e7:ba:db:ed:7b:2d:39:7a:3e:
d1:e3:c7:d5:c5:41:e7:4f:06:5f:f9:cf:6f:01:7e:2c:be:12:
b3:42:7b:56:ed:cf:fe:7e:5c:26:ed:57:1d:e3:ca:d5:29:88:
69:47:67:98:82:60:fb:3b:89:b5:39:7e:79:18:ba:e9:d2:62:
99:a4:cd:53:5f:54:8c:12:18:aa:9b:5e:70:1e:12:dc:81:c0:
a9:d0:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:45 2025 by rpki-client