Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YqEqosQV1Q9mvvAzIWPXpn1Mvxs.roa
File: YqEqosQV1Q9mvvAzIWPXpn1Mvxs.roa (raw, json)
Hash identifier: 94ChLReSuN7lN9ikivW+iWUPdGeoWArNMC61/Qypsyo=
Subject key identifier: 62:A1:2A:A2:C4:15:D5:0F:66:BE:F0:33:21:63:D7:A6:7D:4C:BF:1B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019A26CA99D08FAE9B9F441A095CC2678CAE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YqEqosQV1Q9mvvAzIWPXpn1Mvxs.roa
Signing time: Mon 27 Oct 2025 17:50:03 +0000
ROA not before: Mon 27 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 931
IP address blocks: 5.226.52.0/22 maxlen: 24
43.225.88.0/23 maxlen: 24
45.139.6.0/23 maxlen: 24
46.249.97.0/24 maxlen: 24
155.254.96.0/22 maxlen: 24
178.173.232.0/22 maxlen: 24
178.173.236.0/22 maxlen: 24
178.173.242.0/23 maxlen: 24
178.173.244.0/22 maxlen: 24
185.215.246.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.8.0/22 maxlen: 24
188.253.28.0/22 maxlen: 24
188.253.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:ca:99:d0:8f:ae:9b:9f:44:1a:09:5c:c2:67:8c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 27 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62a12aa2c415d50f66bef0332163d7a67d4cbf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:36:8b:c4:7f:e3:23:01:e7:d7:a3:5b:60:
e0:cf:e0:e0:ae:c5:7f:55:8c:51:bd:95:87:88:ce:
f8:31:72:45:97:b2:fc:a7:c1:17:61:65:59:6e:20:
1c:39:e3:6b:bc:8c:ae:b9:cc:6b:c2:0d:6d:49:4b:
03:76:93:34:5d:9d:f0:06:e0:21:df:bd:e0:71:12:
01:79:a8:e1:ca:50:24:61:b7:93:d9:f1:51:91:c5:
44:df:80:0f:60:0b:05:9e:b1:12:3f:88:16:d2:6f:
cd:1d:05:79:6d:a6:23:c9:18:e6:b2:8d:0e:04:b1:
4c:0b:50:72:29:ab:f2:5b:ef:d0:24:14:38:d0:4b:
e7:06:f2:ba:e5:ce:fe:00:2f:b4:8c:b2:29:1e:33:
25:c3:c0:b7:08:6a:c2:6c:04:37:ce:22:5b:41:83:
83:6d:28:3b:c7:0b:98:9e:c4:54:ed:1d:fa:8c:45:
20:ac:9b:82:ac:03:a4:c9:69:47:24:c1:a7:cd:ab:
f1:8b:26:ea:6d:5c:d1:58:99:39:a9:53:b7:d7:4f:
77:5a:42:14:c3:f8:75:82:70:5c:45:01:c5:d9:57:
1e:1a:6e:c8:fc:9b:5f:f4:07:e1:da:22:c6:83:c0:
36:c8:44:d5:58:38:24:00:e8:af:d7:b2:d9:eb:98:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A1:2A:A2:C4:15:D5:0F:66:BE:F0:33:21:63:D7:A6:7D:4C:BF:1B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YqEqosQV1Q9mvvAzIWPXpn1Mvxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.52.0/22
43.225.88.0/23
45.139.6.0/23
46.249.97.0/24
155.254.96.0/22
178.173.232.0/21
178.173.242.0-178.173.247.255
185.215.246.0/24
188.209.156.0/22
188.253.8.0/22
188.253.28.0/22
188.253.104.0/21
Signature Algorithm: sha256WithRSAEncryption
24:2d:bb:3d:94:10:21:bf:91:62:39:a0:12:eb:15:6e:e2:06:
fa:87:68:f4:91:52:d1:43:3e:c1:23:59:eb:7a:52:1a:c0:2f:
13:a1:c1:05:a4:30:6d:c0:24:67:38:93:87:22:77:db:c9:1c:
93:16:76:44:b9:9a:63:c1:2e:30:f6:fb:6c:77:cb:e7:c7:26:
3c:a8:15:27:45:e1:e5:9d:3d:50:d2:7e:39:dd:5e:e0:12:3f:
c0:ac:52:83:19:23:47:0b:a9:28:0a:c9:48:9e:81:9a:11:f7:
d8:32:16:5d:83:08:28:de:a8:20:b1:31:23:b6:ce:0d:3c:b1:
41:16:1b:36:eb:aa:94:94:4e:1d:8b:2d:e8:e7:76:50:11:37:
d6:74:72:71:6e:8e:12:9e:9a:09:93:9d:2f:e4:01:92:1d:2c:
9e:aa:72:68:f3:61:1e:06:b5:1a:ea:af:9e:ff:0b:33:5a:a3:
ab:94:e5:8a:60:2c:a1:f8:00:2d:8d:1f:54:85:82:65:b7:4a:
44:9c:d4:8f:08:67:59:8c:de:7d:a6:3c:92:33:00:29:a5:a7:
7b:52:6c:55:ba:11:ae:ef:af:24:ba:6b:68:f1:00:57:7e:36:
44:2a:bf:60:6b:69:25:41:a7:28:61:ed:81:11:31:b1:93:1c:
63:ee:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:47:41 2025 by rpki-client