Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa
File: YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa (raw, json)
Hash identifier: n+69ldcsTqnSoYz82PvwpUY1wbaPkzBZbNKCKxXKKXk=
Subject key identifier: 62:BC:40:08:B6:6F:65:18:36:6D:65:7D:48:F2:20:7D:0E:DA:40:16
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019855E998BC609F078447455718E8A4B00E
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa
Signing time: Tue 29 Jul 2025 11:20:28 +0000
ROA not before: Tue 29 Jul 2025 11:20:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399073
IP address blocks: 31.42.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:e9:98:bc:60:9f:07:84:47:45:57:18:e8:a4:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 29 11:20:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62bc4008b66f6518366d657d48f2207d0eda4016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:86:8f:c8:99:0d:ce:76:b7:15:f3:17:0a:
6b:0e:9e:fe:15:c4:43:6b:f5:59:cf:6e:ed:24:9d:
96:4d:4e:bf:df:be:f6:e7:24:55:b8:ac:d4:75:fa:
bd:c0:a5:b2:11:4b:4d:d5:5b:47:75:4b:e8:b6:32:
c7:df:a2:84:f7:6a:9e:5c:5e:cc:16:c3:6b:03:9a:
91:b8:b7:06:44:2c:4b:cf:5d:9c:1e:08:0a:ce:55:
4c:c0:a6:0d:1c:ae:66:02:00:1c:59:ba:53:cf:36:
12:ba:27:54:9d:70:38:14:b6:e5:00:26:2e:1a:b3:
14:e5:1c:08:0f:71:15:8b:41:97:77:f0:1e:50:92:
4f:9a:d9:b2:1f:35:97:de:d2:a2:ca:4d:f8:be:fd:
fa:34:2f:0d:d1:e7:c2:86:e9:36:ee:d2:18:f6:34:
4a:1c:67:14:ca:d1:9e:a2:7b:3e:a9:27:0c:19:11:
cc:68:49:ba:e3:b2:7a:87:59:dc:74:60:e5:ac:d4:
42:cc:5a:29:6d:e2:ae:1e:66:ab:dd:aa:7e:0f:7b:
37:fc:d1:aa:d7:c0:7c:e9:1e:7e:17:d1:d3:3c:0d:
59:56:28:67:28:68:85:1a:bc:48:0a:47:71:56:1f:
f6:32:3e:75:9a:f5:cb:4b:83:ba:b3:40:13:f7:7f:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:40:08:B6:6F:65:18:36:6D:65:7D:48:F2:20:7D:0E:DA:40:16
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/YrxACLZvZRg2bWV9SPIgfQ7aQBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.124.0/24
Signature Algorithm: sha256WithRSAEncryption
03:30:52:77:4e:75:47:25:71:21:3d:aa:16:b3:ea:15:14:07:
85:58:10:4a:fc:66:45:e6:ed:26:95:eb:f6:af:11:f4:fe:9a:
83:0f:d3:bf:c9:d4:55:70:c2:5f:ee:91:c7:2e:10:94:aa:4b:
61:c2:8f:97:3d:50:11:97:f4:c2:fc:11:dd:21:a6:8e:e3:af:
2f:1b:df:3b:67:7b:7b:f5:2a:41:75:03:10:73:c1:41:25:44:
c4:2f:01:b7:1e:a0:a2:ff:b4:aa:f0:7a:c1:44:e0:7b:8e:fe:
46:b1:ef:0e:ab:02:5a:e3:14:3b:2a:f5:1d:40:c8:3b:06:2b:
73:55:c5:2f:aa:15:00:0d:e5:f7:93:38:90:c9:b3:1a:fd:31:
dd:f5:f9:6f:98:06:06:c3:b5:14:ac:3d:bc:a0:b4:61:66:bb:
de:c5:0b:5d:ea:c0:97:e9:60:c9:47:18:d1:94:88:ea:4f:4c:
2f:d9:e8:16:3b:41:14:60:04:f6:1b:3f:91:42:e3:7d:9c:12:
7b:26:71:89:51:11:55:14:41:12:33:3d:02:13:4f:cc:df:87:
6f:ee:10:72:81:3d:8b:e7:d5:73:e3:f6:bf:ea:3a:37:19:31:
e5:23:e3:fd:79:dd:e1:94:19:77:43:de:ee:0d:33:15:ea:22:
e7:99:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:07 2025 by rpki-client