Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yytwgn_fchCGVZHdu0QrZIhD7gQ.roa
File: Yytwgn_fchCGVZHdu0QrZIhD7gQ.roa (raw, json)
Hash identifier: ozMk/IC61aeKuCihKKy2y2kLn7ifBp+thWswK/+Z+EE=
Subject key identifier: 63:2B:70:82:7F:DF:72:10:86:55:91:DD:BB:44:2B:64:88:43:EE:04
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198406BD49B80AE86E1847633BD55D115BC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yytwgn_fchCGVZHdu0QrZIhD7gQ.roa
Signing time: Fri 25 Jul 2025 07:11:05 +0000
ROA not before: Fri 25 Jul 2025 07:11:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209642
IP address blocks: 151.241.7.0/24 maxlen: 24
151.245.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:6b:d4:9b:80:ae:86:e1:84:76:33:bd:55:d1:15:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:11:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=632b70827fdf7210865591ddbb442b648843ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:1c:4e:ec:8d:7c:7c:aa:8f:bd:53:a4:ba:
bb:15:75:49:84:02:c7:6f:f6:a0:5a:31:50:3a:45:
12:91:87:a6:a0:6d:56:80:b2:9b:64:8c:ac:2b:81:
de:96:44:ef:51:34:9d:1a:c4:24:12:7d:34:3c:ae:
1d:a3:1b:7e:a2:03:9f:1f:5f:19:c6:e0:ad:ba:76:
5c:4e:4e:ef:70:0e:2b:50:2a:15:f6:30:8d:d1:5f:
40:2f:30:bd:ee:6e:44:5a:bb:70:26:f6:9d:94:a5:
ad:2b:35:f8:65:cc:90:27:b8:3c:3f:ba:5b:68:51:
da:b3:9e:60:52:9c:40:c6:c4:e2:50:8a:74:d9:75:
75:5c:b2:78:5c:a8:21:97:3e:c2:ad:e7:7a:91:9e:
cf:a1:3f:75:e0:aa:e1:7a:ab:d4:8e:66:96:96:fd:
ee:d3:c9:20:b9:1f:c5:d2:8e:8e:d7:05:d2:52:f3:
59:a1:0b:33:00:05:40:f2:24:ad:36:2e:c2:10:22:
7b:ec:c6:c5:3f:9b:e3:3e:43:91:03:ed:18:7d:b5:
82:82:89:ad:92:f3:f6:fe:1d:df:db:ec:7e:f6:98:
a8:f4:91:92:af:48:ef:60:c6:9c:6b:33:c0:07:63:
d3:a5:94:ae:45:bf:d0:7f:b8:ad:a8:21:85:d6:2a:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:70:82:7F:DF:72:10:86:55:91:DD:BB:44:2B:64:88:43:EE:04
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yytwgn_fchCGVZHdu0QrZIhD7gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.7.0/24
151.245.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d7:7e:32:51:ce:22:e1:c4:0a:ec:f0:12:84:d5:72:93:6f:
ee:00:ef:fa:ba:30:6b:7e:b0:5a:fb:0d:41:08:37:2d:fe:8f:
23:d2:c9:05:26:ac:5c:26:15:c6:56:db:c0:67:68:ca:36:b3:
c1:38:e4:dc:29:b4:e7:62:2c:05:dd:21:ed:d3:99:91:29:5d:
a4:5d:a6:a3:06:53:ec:7f:fd:b9:95:82:f1:98:ab:06:70:35:
fb:37:70:b7:17:2e:a7:69:9d:e6:05:4c:dd:ca:6b:62:a2:af:
f7:79:8c:72:63:0b:14:89:08:82:2f:a8:26:ad:17:f1:17:ab:
74:ce:9d:75:9c:b3:56:1c:cf:c1:09:7a:f9:f0:d7:cf:d2:13:
05:36:50:b8:31:56:27:a9:0e:7c:5c:9f:c9:13:b1:e0:39:3b:
c6:15:2c:ad:ca:cd:90:23:9d:29:e2:37:ae:8f:e7:ba:66:1f:
a3:1e:c4:4d:5c:55:bd:19:a7:55:1f:67:47:79:96:b1:16:d5:
0d:5c:26:79:4b:dd:38:79:99:a6:ab:29:5d:d4:08:76:52:9c:
22:a4:d9:ec:33:81:73:8a:2a:99:83:f7:a9:a8:9f:d2:77:eb:
94:1c:b1:e4:4a:ae:8c:de:b7:d5:d5:e6:90:4d:e7:37:f9:af:
e7:34:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:29:02 2025 by rpki-client