Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa
File: y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa (raw, json)
Hash identifier: kA5Ei/WRVk5KhopTqBlcPpplFexyb5cDOtoJ1Rgm79k=
Subject key identifier: CB:D6:F3:E3:23:FF:10:4A:92:24:52:69:F8:F7:A4:F0:96:EF:64:E7
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019A34AAD90271E3C502DADA33924F81B7A1
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa
Signing time: Thu 30 Oct 2025 10:30:03 +0000
ROA not before: Thu 30 Oct 2025 10:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211908
IP address blocks: 176.241.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:aa:d9:02:71:e3:c5:02:da:da:33:92:4f:81:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Oct 30 10:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd6f3e323ff104a92245269f8f7a4f096ef64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:65:c9:a8:c9:ce:0d:9f:00:68:c1:22:31:
78:99:5f:86:e8:38:1b:b8:d6:0a:cf:cf:f2:5a:7d:
cd:cc:eb:ed:40:07:5f:7d:5c:0a:77:65:7e:07:8d:
2a:c7:20:a6:48:e0:df:34:03:d9:60:b2:2d:0a:c9:
7b:d8:5e:56:72:3b:39:2a:f9:20:ec:02:2a:27:7e:
66:1a:3c:20:0e:4a:59:7a:ef:dd:72:2c:52:3e:b3:
49:87:2b:39:a9:32:1b:53:2d:4b:d9:1a:fe:df:f7:
46:8e:3e:cb:f4:aa:f4:57:5f:21:c4:20:c1:2e:11:
db:bf:25:52:3c:e2:0a:28:61:17:b3:2d:92:9f:56:
e2:f2:e5:b9:30:62:2f:71:b7:71:7f:de:cd:19:23:
1c:4a:71:13:be:34:c8:64:0a:cf:0e:76:a5:46:9f:
87:8d:97:ac:40:38:51:25:de:0c:f2:0c:6b:80:ea:
a0:d5:8b:51:38:5f:23:9e:f7:c0:60:44:88:a0:d9:
db:d6:ab:4e:22:1b:d3:8e:68:6f:14:7b:46:67:65:
e4:e3:d5:0e:23:10:cd:a0:c6:69:38:1a:eb:0b:88:
7b:81:96:1c:05:7c:34:97:39:3d:8d:81:70:cd:78:
31:cc:fc:0e:75:d0:c4:7f:98:77:88:1d:14:d9:19:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:F3:E3:23:FF:10:4A:92:24:52:69:F8:F7:A4:F0:96:EF:64:E7
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/y9bz4yP_EEqSJFJp-Pek8JbvZOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1e:6b:ab:33:3e:fb:e3:69:75:fb:7d:7d:9d:ea:6d:c1:af:
0e:db:4e:6b:91:ed:4a:1c:9f:0e:e4:bf:ce:bc:3d:1f:74:cb:
a7:bd:bd:68:66:10:eb:b0:89:26:0d:25:ea:96:c8:c0:7d:66:
31:60:cb:38:71:b6:25:1a:0a:1a:58:4f:33:94:be:80:55:8c:
05:e4:0d:38:e6:11:6e:03:3b:13:ba:d6:ae:f9:5f:42:af:96:
42:1e:7c:20:3a:92:f6:2f:79:8c:1d:ac:f4:f7:e0:e7:12:13:
5a:8f:16:d4:6a:ab:59:c2:1d:41:ee:c0:70:06:b8:a0:8d:22:
c0:63:6c:c6:4e:6c:b1:50:70:7d:42:10:55:8e:d9:1e:43:75:
9d:5d:3d:f0:a3:fe:cb:d0:fe:54:e2:00:e7:b5:18:90:7f:55:
bd:6e:fe:ea:a3:78:1a:b3:63:32:4f:a8:cf:35:24:0d:7c:6e:
97:8e:8e:3a:a9:6e:06:c1:ac:a8:c8:58:08:5b:db:b3:54:0d:
92:81:4a:a9:c5:09:7f:cd:80:e3:2b:4b:07:d4:7d:9f:0f:13:
21:27:bf:ae:30:83:6a:a2:86:55:10:9a:be:1d:dd:77:98:6a:
d6:36:c9:0a:25:d8:11:ee:8d:16:9c:26:d7:f6:60:f0:60:38:
6f:51:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:05:28 2025 by rpki-client