Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ymOsubW8FFYID65CyovGJyOmTdU.roa
File: ymOsubW8FFYID65CyovGJyOmTdU.roa (raw, json)
Hash identifier: qcmX31FhXzohNfXXRXUcobcVR4N+Nk3oDKd3trafmVc=
Subject key identifier: CA:63:AC:B9:B5:BC:14:56:08:0F:AE:42:CA:8B:C6:27:23:A6:4D:D5
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019A3935913A072FB24BE093982B935E7FE9
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ymOsubW8FFYID65CyovGJyOmTdU.roa
Signing time: Fri 31 Oct 2025 07:40:03 +0000
ROA not before: Fri 31 Oct 2025 07:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 80.71.233.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:35:91:3a:07:2f:b2:4b:e0:93:98:2b:93:5e:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 31 07:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca63acb9b5bc1456080fae42ca8bc62723a64dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:80:1b:68:9c:25:2a:e2:53:3f:80:87:a2:
27:02:e5:fa:e1:f8:7e:ee:a8:ec:f5:7d:2b:4b:af:
fd:f3:8e:30:37:cf:df:65:d4:9c:48:b2:db:26:93:
83:c6:e2:a9:4c:35:9f:2a:3a:34:c5:fe:33:a7:33:
fa:a3:47:e1:6b:f4:39:f7:27:24:43:9e:1c:09:ab:
7f:98:1b:56:eb:c0:79:c7:de:77:e9:68:9b:49:a2:
1a:31:3b:67:50:14:d2:e7:e3:9a:08:bc:a5:37:02:
b4:2e:a3:fd:f8:4d:ed:62:15:30:4a:52:1c:ce:f2:
f1:5a:0f:6c:3a:5d:dc:c6:68:af:f4:68:7b:47:6c:
5b:b9:0e:f6:e0:16:62:ae:64:98:52:c1:83:c7:a1:
56:68:70:da:a7:86:1f:cc:34:87:bb:e7:0d:52:8e:
2d:79:db:eb:f3:93:cd:ba:dd:3f:92:87:d6:12:54:
cf:13:7d:f8:f0:4e:f3:e1:f2:e5:fa:e9:2e:cf:4d:
69:a2:32:ac:45:a0:99:2b:43:11:68:19:56:0a:4e:
ef:6a:68:8d:cf:99:bb:6f:d7:6b:86:0e:57:64:6e:
f1:3e:43:5a:9f:5a:1c:31:a2:ad:1e:9f:23:3d:63:
8b:61:6d:07:f6:6b:dc:ba:d0:1e:b7:db:09:f0:0c:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:63:AC:B9:B5:BC:14:56:08:0F:AE:42:CA:8B:C6:27:23:A6:4D:D5
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ymOsubW8FFYID65CyovGJyOmTdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.233.0/24
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5e:3a:cf:8e:6d:ec:d5:2c:b3:f7:4c:a5:dd:a8:ca:6b:06:
10:dc:ae:61:47:b4:5e:25:fc:a9:9a:15:6f:e7:6c:9a:90:a3:
72:51:f8:4d:d4:5d:f3:92:5e:cd:51:1a:55:2d:06:be:1f:b2:
ce:9d:50:86:1c:c2:d9:ea:f3:3d:32:be:00:f8:98:cb:fa:6c:
5c:01:5b:61:d7:1c:8b:ff:84:a9:69:20:f8:5c:39:03:2d:3c:
34:b2:26:fa:3a:af:fe:45:a8:07:49:73:94:69:cf:a3:b4:26:
bc:63:3e:65:19:69:b8:b6:98:b5:0b:ae:10:74:52:f4:64:70:
a2:fd:d6:84:bb:c5:e3:82:d1:9b:ed:a0:f1:12:4e:90:a3:79:
0e:92:de:d6:1b:d4:fd:2a:61:09:3e:18:e1:27:bd:f0:27:d2:
aa:d6:81:81:e0:2a:34:16:e2:d5:84:4f:da:65:42:1e:ca:dd:
48:05:c3:16:13:a7:1c:ca:16:a4:5d:bd:bd:c5:fe:cd:d4:e2:
da:09:35:b4:e0:36:c9:2b:a3:d6:29:88:a6:38:a9:31:c6:0b:
da:8b:62:e1:99:b8:80:7a:cb:4b:29:f4:1b:a8:91:47:22:e2:
b9:f2:83:dd:83:90:8f:a5:49:3d:81:ab:c6:3f:dc:82:6d:dc:
4d:49:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:03 2025 by rpki-client