Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EY-GYc_OgBsb1UIfjvb41Bwimi4.roa
File: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (raw, json)
Hash identifier: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=
Subject key identifier: 11:8F:86:61:CF:CE:80:1B:1B:D5:42:1F:8E:F6:F8:D4:1C:22:9A:2E
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019877E05BE07BE3768C68E500C366460329
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EY-GYc_OgBsb1UIfjvb41Bwimi4.roa
Signing time: Tue 05 Aug 2025 01:37:29 +0000
ROA not before: Tue 05 Aug 2025 01:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398993
IP address blocks: 116.204.164.0/23 maxlen: 23
116.204.166.0/24 maxlen: 24
222.167.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:e0:5b:e0:7b:e3:76:8c:68:e5:00:c3:66:46:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 5 01:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118f8661cfce801b1bd5421f8ef6f8d41c229a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:12:6a:97:a8:14:35:e0:5c:78:77:e5:09:
3b:69:0d:ca:7e:6f:17:83:04:fc:41:b5:56:8b:21:
33:20:3e:a8:2b:29:f2:de:33:64:eb:23:34:65:ee:
35:dc:25:f2:28:b5:49:9c:5f:11:19:69:df:12:c9:
84:af:fa:e6:2b:4f:00:4c:fb:1f:c6:ee:38:0f:fa:
b9:13:b6:ab:d7:d3:eb:4e:82:29:8b:96:24:d4:ee:
db:c8:d5:1d:41:0a:d6:d9:34:a3:9d:d7:0f:1c:67:
45:03:29:c0:8e:80:95:c9:46:fb:7c:b5:10:2c:74:
5c:fd:cb:52:d2:a8:1e:b0:3e:2a:0e:3c:09:21:b9:
bc:f4:6f:42:29:29:2b:18:48:59:0a:b9:f6:a3:1b:
34:87:23:37:1f:9a:2d:de:49:ec:31:5a:39:36:55:
60:be:b2:b4:5d:5a:d7:d2:36:32:ef:aa:60:f8:29:
46:2f:d8:09:ac:70:27:05:31:77:43:6b:a1:c3:5b:
05:69:58:87:66:87:18:ab:e1:6f:9e:17:db:31:a7:
b2:52:f6:77:37:21:36:ab:f3:82:5a:60:54:d6:04:
4b:c4:b8:5d:86:52:1b:ab:ca:22:6e:f3:13:02:ac:
2d:db:7f:18:e1:67:83:b7:69:a9:dd:b6:dd:ce:01:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:86:61:CF:CE:80:1B:1B:D5:42:1F:8E:F6:F8:D4:1C:22:9A:2E
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EY-GYc_OgBsb1UIfjvb41Bwimi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.164.0-116.204.166.255
222.167.208.0/20
Signature Algorithm: sha256WithRSAEncryption
87:9d:4d:c0:ef:3c:c6:0a:a1:d6:3f:2b:fd:4a:30:6d:61:ac:
53:a1:1c:cb:3f:c0:61:70:9b:c5:7b:28:3a:ec:22:cb:02:79:
73:e4:fe:ec:b9:0c:f0:b0:6f:8d:6a:5d:bc:dd:05:af:49:25:
04:5b:ae:e9:10:3c:33:d5:32:d2:d1:7c:67:9e:53:66:21:8f:
1e:b7:17:68:61:fe:6c:70:88:ca:bd:32:8a:b4:b6:05:e2:99:
d1:3d:02:b2:a5:e6:b9:b9:89:84:3d:ee:b0:64:c0:be:10:4a:
32:88:a3:d6:bc:f3:7a:d1:83:7e:e8:bf:10:1d:c3:e6:df:c0:
23:ec:82:c8:e5:2f:59:ef:14:4e:08:8d:60:5d:a9:89:2d:4d:
a6:3e:89:5b:06:f4:1b:7b:f5:ef:37:21:6f:ed:dd:c1:d0:e3:
2e:14:d3:68:88:45:ef:6e:88:8a:15:9e:c9:50:6a:c4:2c:4c:
f9:03:b0:6a:e5:d6:f5:42:77:39:ea:49:11:37:1f:ef:6d:37:
22:5c:bc:07:40:d9:22:0a:59:7f:1c:ef:dc:d8:54:c4:89:91:
3a:8b:58:f5:08:82:58:6f:d1:76:36:ba:53:67:57:01:bd:8a:
bc:5b:8a:28:0d:08:d6:65:02:a7:0e:d8:be:17:ec:4c:3e:21:
25:9d:5b:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:59 2025 by rpki-client