Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yNx-9k_Hqwo_yqplpJdn78tSKdU.roa
File: yNx-9k_Hqwo_yqplpJdn78tSKdU.roa (raw, json)
Hash identifier: 4230fd6WYvfxeFDsl5OOA6m+P0csvFInssXIINquqaw=
Subject key identifier: C8:DC:7E:F6:4F:C7:AB:0A:3F:CA:AA:65:A4:97:67:EF:CB:52:29:D5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019A0B61187F6CD5BF53D3611FE0E4D21FFD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yNx-9k_Hqwo_yqplpJdn78tSKdU.roa
Signing time: Wed 22 Oct 2025 10:05:03 +0000
ROA not before: Wed 22 Oct 2025 10:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 82.152.102.0/24 maxlen: 24
82.152.142.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:61:18:7f:6c:d5:bf:53:d3:61:1f:e0:e4:d2:1f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 22 10:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8dc7ef64fc7ab0a3fcaaa65a49767efcb5229d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:0d:87:33:6a:a6:99:f2:07:5d:e4:a4:2d:
8b:b2:5e:87:0d:c9:c0:1f:f2:b9:74:88:09:64:89:
ce:3e:89:bc:3f:8f:11:fc:8c:f4:2e:ff:27:07:45:
42:2b:c2:0c:cf:6e:1e:f2:35:89:3a:2c:a9:b9:1c:
00:2a:4f:c6:fa:64:39:01:14:38:fa:ef:e8:73:a1:
74:2f:b4:5a:99:b7:96:fe:43:74:0e:de:46:ad:a2:
d5:6f:af:d1:87:d3:35:7a:d1:3e:f7:14:4c:2c:5d:
93:24:6c:36:0e:db:60:18:8d:6e:2f:d5:5f:3b:0a:
7e:c5:b1:fc:16:9c:ad:4f:18:24:1f:b4:d3:c1:42:
15:f5:8e:84:de:8b:71:06:e1:89:4a:97:cf:15:7d:
80:26:6d:2d:52:86:44:0c:d4:d3:8d:8f:6e:df:d4:
32:ac:d9:39:0f:96:a1:34:2f:57:b1:ea:57:06:08:
c6:a3:e0:fa:0d:a7:d7:b9:9b:fe:27:5c:14:0b:79:
f6:e6:f3:65:00:11:93:f7:e4:91:be:69:95:be:73:
6e:5e:b4:b5:e3:28:4b:dc:6c:b8:4b:c6:f8:1a:f7:
0d:80:2b:b3:52:42:f0:70:37:aa:a0:b7:94:8d:e0:
25:03:36:c5:54:8b:25:e5:4b:e1:c6:a4:46:2b:38:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:7E:F6:4F:C7:AB:0A:3F:CA:AA:65:A4:97:67:EF:CB:52:29:D5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yNx-9k_Hqwo_yqplpJdn78tSKdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.102.0/24
82.152.142.0/24
213.210.52.0/23
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f8:5e:8a:bf:7e:bf:a6:69:9b:36:cf:5d:24:de:00:66:c1:
ec:5d:6a:6f:52:0e:f0:11:cc:ad:f2:d0:a9:16:29:a2:cf:7b:
dd:47:2a:98:a8:15:95:ac:f5:e3:6e:aa:0c:c0:b3:b4:02:7f:
ec:59:01:7b:79:f0:e0:e9:c7:17:96:f8:d9:bc:66:bb:d8:86:
c2:81:17:27:52:45:5e:ce:78:0c:9e:f4:62:c1:3d:ee:9f:0b:
34:d0:9e:f8:c8:32:0c:5e:6a:ac:1b:21:1f:c4:3d:0c:42:7a:
f8:35:75:a2:e0:d3:70:d3:88:69:55:4a:e5:9c:12:d1:2b:5c:
a3:5f:ae:90:e5:5e:65:6a:1a:c8:b4:85:68:c0:b3:2a:e7:9d:
07:af:25:e9:64:ca:69:18:7b:eb:0a:6e:93:34:c1:c6:bb:eb:
9c:ef:e0:0c:71:bc:d7:bc:e7:aa:eb:b7:1e:ab:c2:10:5a:48:
d6:58:05:34:33:43:41:36:c8:1a:eb:9c:ab:0d:77:03:05:d6:
b1:44:95:7b:01:57:2f:69:48:90:c8:17:8a:ca:87:15:31:17:
5e:c7:29:6e:10:67:5f:87:6e:50:02:64:7b:bf:24:92:1d:59:
f2:0f:d6:50:51:ba:e0:a7:68:c7:7e:3e:05:77:28:87:67:c3:
51:e1:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:00 2025 by rpki-client