Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa
File: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (raw, json)
Hash identifier: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=
Subject key identifier: 61:D5:19:E7:0E:88:01:D1:8F:8A:E9:79:AB:97:CE:1E:13:F3:7A:80
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019A48BBA2D651F4AEF8F84A9DF5E2DD63D5
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa
Signing time: Mon 03 Nov 2025 08:00:47 +0000
ROA not before: Mon 03 Nov 2025 08:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 185.199.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:bb:a2:d6:51:f4:ae:f8:f8:4a:9d:f5:e2:dd:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 3 08:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d519e70e8801d18f8ae979ab97ce1e13f37a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:ff:bf:18:23:a9:3c:35:e6:35:ca:6d:8e:
cb:ea:02:80:f5:71:3b:fc:e4:b2:de:dc:fd:24:f1:
ab:f2:b4:d9:86:21:d4:d8:0e:f5:19:7a:94:8d:aa:
56:13:a3:64:06:3c:3b:39:7a:6d:3f:ed:41:e4:14:
b1:dc:26:d5:8e:ec:04:f2:23:71:06:1a:a7:e0:08:
ae:51:c8:29:ce:6a:15:05:5c:a5:69:1e:14:e2:66:
e9:59:53:2d:ab:4d:7d:38:43:7a:be:88:5f:ab:3f:
8e:b3:79:dd:d6:3b:1d:7b:74:f6:0d:db:e4:62:bb:
37:cb:92:02:8d:be:ca:24:ef:41:93:6d:17:fe:c6:
68:7f:fe:61:f5:13:8d:2f:50:54:c0:5a:58:49:06:
fa:2a:dd:48:9d:18:f9:ba:f1:13:8c:49:58:08:21:
f5:6b:21:dc:65:d0:26:88:08:37:80:a6:4b:49:3a:
b5:49:c8:5d:d5:ef:d3:7e:49:a4:6a:3a:69:5a:e8:
03:5c:64:cb:04:5d:8a:91:32:ab:24:ba:57:e8:8b:
c1:dc:4f:ba:ce:61:ee:1c:bc:b6:b2:ab:cf:38:38:
b7:36:38:2f:b6:4c:04:58:c8:72:df:f8:04:7e:e0:
e5:ba:29:22:87:4f:c9:b6:8e:86:b8:a1:e2:89:6a:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D5:19:E7:0E:88:01:D1:8F:8A:E9:79:AB:97:CE:1E:13:F3:7A:80
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.148.0/23
Signature Algorithm: sha256WithRSAEncryption
83:9e:dd:85:72:b7:6f:0d:39:c8:18:d4:58:22:8f:49:b3:31:
4c:e6:e7:60:a6:cf:ec:ed:de:7b:b9:2b:d3:33:ed:42:25:be:
60:1a:66:fa:60:f3:f5:ac:e0:fa:10:ad:4c:2b:89:12:c2:76:
1b:7c:68:25:62:9f:ab:60:20:ce:78:9f:2f:a6:8a:5e:b6:14:
d9:3f:d5:1d:fc:dd:40:a0:0a:b2:8c:02:ad:fe:86:fc:da:c3:
db:b5:54:9f:b8:e2:6c:2e:e9:21:b0:5f:60:d5:b4:d9:f8:ad:
f8:45:00:99:d6:05:a6:e0:88:9e:67:77:ae:54:d4:33:4d:44:
b4:26:75:cc:16:96:51:4f:5d:d4:5b:df:e9:f9:a0:35:9c:59:
46:e4:b2:e7:a5:0f:6f:80:d9:de:b6:f9:65:56:8e:cb:80:7c:
06:aa:e8:bf:b8:df:5a:12:5a:07:b6:e8:c5:c6:a2:0a:22:09:
ac:26:de:4a:4a:17:dd:4a:b0:32:59:2e:14:63:60:14:fc:24:
c4:83:1b:47:39:26:c5:36:0c:f4:08:23:6f:35:05:3c:d4:8e:
9e:28:cc:8e:c5:18:fd:0c:85:97:52:a0:71:6f:26:c5:c5:fb:
7d:11:3d:5e:10:1a:4c:75:58:33:15:a9:74:27:60:5f:60:c3:
a7:6d:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:50 2025 by rpki-client