Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/yd2Ai214QL8GroiQskFrUfMO6Kc.roa
File: yd2Ai214QL8GroiQskFrUfMO6Kc.roa (raw, json)
Hash identifier: +L6jAlDJgy+4YPDRYuSYnnpI4dCj403915WXULQVYBw=
Subject key identifier: C9:DD:80:8B:6D:78:40:BF:06:AE:88:90:B2:41:6B:51:F3:0E:E8:A7
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01970B7E981107B861767D157EC2D1D78D18
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/yd2Ai214QL8GroiQskFrUfMO6Kc.roa
Signing time: Mon 26 May 2025 07:28:55 +0000
ROA not before: Mon 26 May 2025 07:28:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.155.99.0/24 maxlen: 24
2a10:ba00:1::/48 maxlen: 48
2a10:ba00:2::/48 maxlen: 48
2a10:ba00:3::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:7e:98:11:07:b8:61:76:7d:15:7e:c2:d1:d7:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: May 26 07:28:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9dd808b6d7840bf06ae8890b2416b51f30ee8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:63:96:dd:3e:aa:8e:86:a6:c3:39:26:8a:
b8:ae:1d:c0:e3:44:fc:e8:88:2b:fa:6e:39:95:c8:
c2:67:97:b2:c4:57:af:24:7c:70:b7:8e:e7:40:1c:
4a:df:d2:54:5c:5b:d3:5e:4b:55:76:b6:4c:b4:64:
3c:0a:45:08:a1:6a:5d:ae:04:66:f8:50:64:db:f6:
ee:99:ec:ca:b9:97:4d:54:0f:a2:18:d2:3d:5f:c8:
ad:29:1f:b2:0d:e3:ab:e8:ec:14:a4:e6:ce:de:2d:
6c:4a:ca:3f:64:67:1d:f9:11:28:26:d5:f4:89:cc:
50:24:44:00:a9:f6:6f:a6:af:10:f5:9d:d4:d0:cb:
b9:20:c7:d0:50:7c:fa:15:af:e3:38:13:8c:3c:47:
58:9a:46:fc:fe:a3:03:d9:6c:e5:d6:3e:b2:f1:8e:
10:82:02:29:ae:81:72:c2:ca:dd:93:a9:7b:e2:a8:
ed:55:19:da:2d:e0:1f:15:92:5b:1a:45:4a:01:58:
23:c9:cc:17:e3:11:65:fc:8c:97:b6:1a:fc:86:23:
42:9a:10:c6:9f:8f:0e:e3:87:0f:cc:90:da:b2:c0:
69:91:9d:b5:ac:78:9b:7b:a3:83:6e:37:e1:0f:2c:
ca:1b:11:45:30:4a:d0:df:cc:96:d0:0b:b8:88:b5:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:80:8B:6D:78:40:BF:06:AE:88:90:B2:41:6B:51:F3:0E:E8:A7
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/yd2Ai214QL8GroiQskFrUfMO6Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.99.0/24
IPv6:
2a10:ba00:1::-2a10:ba00:3:ffff:ffff:ffff:ffff:ffff
2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:5a:32:5a:fa:70:38:b2:3d:a1:1f:1c:06:e2:84:0d:4a:d6:
08:78:65:a0:ff:2e:ea:7b:55:f9:1e:2c:65:36:4a:c3:e5:4d:
d1:58:3b:a7:0e:ac:a2:a4:51:d3:80:40:74:79:b2:c5:2d:88:
3d:c1:9d:2f:43:be:27:b1:da:8b:a4:1b:6d:c6:7c:89:07:57:
6f:9a:7f:a2:3e:24:f3:9c:68:59:ce:84:f8:d7:c3:9d:48:39:
6c:2f:68:48:e0:ea:29:7d:38:d4:70:ad:29:0f:12:21:79:bc:
d6:39:22:e2:e9:2b:ab:be:e8:14:df:29:a0:95:46:c3:e4:1b:
98:d1:59:37:4c:69:3a:6d:ba:55:ff:bb:ef:aa:24:86:46:05:
85:56:d7:1a:f7:12:20:a7:80:ee:c5:a6:29:06:80:7f:b6:3c:
62:cd:7a:cc:74:75:77:2b:fa:5c:9b:94:49:20:c0:1d:bb:8a:
23:e9:3d:53:40:85:61:bb:89:fb:6a:37:17:f0:9b:a4:90:d4:
27:34:22:ba:88:6f:93:1d:78:f4:48:72:84:a1:ad:76:f8:4d:
45:67:8a:5f:a9:0d:83:78:2f:91:0e:f6:70:ad:a5:48:db:21:
03:d2:6f:93:d2:f6:69:8f:ed:f4:59:26:b2:1c:8c:ef:be:ed:
b4:9e:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:24 2025 by rpki-client