Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ya5-uX_wcHeLZkiZfUJvjaJfW_k.roa
File: Ya5-uX_wcHeLZkiZfUJvjaJfW_k.roa (raw, json)
Hash identifier: teIoN4qV6Q9ahHurhlUvCgLjL9xG1kYFMqPNQ/qKCRQ=
Subject key identifier: 61:AE:7E:B9:7F:F0:70:77:8B:66:48:99:7D:42:6F:8D:A2:5F:5B:F9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0198425B21836CCC3B7E245AB26374AC5EF3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ya5-uX_wcHeLZkiZfUJvjaJfW_k.roa
Signing time: Fri 25 Jul 2025 16:12:05 +0000
ROA not before: Fri 25 Jul 2025 16:12:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63902
IP address blocks: 89.28.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:5b:21:83:6c:cc:3b:7e:24:5a:b2:63:74:ac:5e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 25 16:12:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61ae7eb97ff070778b6648997d426f8da25f5bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:b4:b3:67:a5:16:a7:f3:d2:f9:3d:e0:46:
07:70:57:de:57:ab:98:03:87:e6:cd:c1:99:f6:e2:
1c:59:ec:ce:13:25:e2:ea:41:61:ab:a7:83:43:6c:
02:2a:00:89:38:55:8a:da:90:ef:ce:6a:b0:f3:3e:
4d:5d:ff:58:99:09:7a:96:2a:9a:b5:28:36:8a:b5:
9b:54:6d:53:d6:f0:1d:31:86:0b:03:f3:22:ac:d5:
ec:1d:50:26:2c:07:5c:fb:23:9b:45:f2:9f:ac:af:
0c:c8:c9:2b:dc:ac:a8:d3:93:44:c8:ad:f4:32:6c:
90:9f:3d:27:b4:6d:3b:aa:47:8a:28:cc:84:04:be:
b8:99:be:67:63:7e:7e:aa:78:fc:03:35:73:30:bf:
35:32:e8:7a:e7:99:d0:ad:be:02:b4:3c:88:17:f7:
b5:29:ec:21:f6:da:d4:87:66:41:65:4e:0b:d2:8d:
53:07:63:4b:99:6a:08:b9:ab:10:7d:82:77:0c:7a:
19:41:48:bc:4b:08:0e:ba:87:e6:20:c1:70:c3:52:
b3:43:4d:c5:7d:6f:b8:63:81:b9:95:07:75:87:6c:
16:64:59:f3:ff:0c:02:12:ac:36:af:03:c2:8d:1f:
13:4d:bc:00:5f:98:4d:88:69:be:f3:3e:bd:da:ad:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:7E:B9:7F:F0:70:77:8B:66:48:99:7D:42:6F:8D:A2:5F:5B:F9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ya5-uX_wcHeLZkiZfUJvjaJfW_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.235.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a4:55:bd:c5:70:bb:50:3a:2a:0b:06:75:2a:d9:2d:68:25:
3e:f9:91:bb:89:6e:68:07:da:55:23:79:43:08:fd:08:1f:cc:
21:d3:20:a2:bd:0d:44:e6:6a:3e:8a:04:0e:74:f9:21:42:4d:
ce:8b:5e:63:ed:fd:f8:8d:ff:e7:f7:7c:bb:a4:62:32:e6:70:
d4:57:07:01:90:c4:76:de:0e:4c:6d:88:d8:e7:07:ab:56:1b:
9f:0b:55:aa:05:d5:0e:62:81:75:25:cf:72:ea:70:42:64:8b:
ab:c5:f5:34:dc:4c:42:9d:63:79:76:15:2e:e4:ac:63:c1:b7:
9b:55:67:78:de:59:fc:de:7d:b5:70:0c:a7:3f:34:e4:b0:4b:
c2:cf:56:bd:13:a8:24:4a:95:48:c8:25:4c:9b:25:4f:4e:fc:
c0:6e:ef:50:19:db:ca:92:63:ca:1f:07:1f:e2:52:1d:49:7d:
f5:9f:83:d4:b9:0a:1a:40:8d:ea:21:4a:d9:0e:01:5c:fc:b9:
ef:94:7c:ed:8b:fd:da:18:ea:75:a6:48:8a:50:9f:f0:6a:2c:
5e:69:30:83:4f:d8:ad:5b:4e:b4:90:86:37:49:47:db:68:6f:
14:93:4a:6f:4b:85:93:0c:15:ff:92:7b:fd:a5:d9:c6:3e:3a:
c3:95:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:21 2025 by rpki-client