Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa
File: YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa (raw, json)
Hash identifier: 79y53z5o9XdogxOi0yLDNYi3RG7BP5zSnNpGbs32iuE=
Subject key identifier: 60:A5:25:DE:D9:12:F6:6F:18:2C:B7:30:D0:06:75:6E:FA:45:3D:7C
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 01975A6378E6073700F9FDDBA7F26B989DD1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa
Signing time: Tue 10 Jun 2025 15:09:17 +0000
ROA not before: Tue 10 Jun 2025 15:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149020
IP address blocks: 194.5.96.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:63:78:e6:07:37:00:f9:fd:db:a7:f2:6b:98:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jun 10 15:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60a525ded912f66f182cb730d006756efa453d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:80:9c:af:10:3d:dc:9c:1b:2b:ea:a1:16:
fe:c9:16:c1:44:de:3e:8c:a6:ec:b7:dc:6f:0f:20:
09:42:1b:8d:ee:f6:97:e6:dd:f0:4c:be:71:b9:9a:
76:c0:bf:10:55:00:d3:a1:24:93:f5:67:b2:94:e9:
22:82:52:67:9c:50:95:b4:0f:94:86:0b:15:ab:a1:
29:f5:2c:83:4b:89:65:db:e1:dd:9f:6e:a4:98:14:
a9:18:56:a2:16:6e:d6:e8:e8:e6:9a:3b:5a:af:74:
3b:c9:5d:de:96:f9:fa:f1:bf:e2:e5:7a:68:fe:aa:
42:02:6a:5e:49:78:32:3d:d1:cb:9a:c1:7e:12:c2:
52:29:d4:10:7b:74:f0:73:7f:9c:d7:db:42:d2:51:
90:03:26:a4:f8:08:e6:87:19:3e:ad:a1:ca:56:b6:
f1:65:f0:51:5b:a4:7d:68:fe:68:df:fe:c4:17:3e:
6a:2d:d6:55:a7:02:17:13:0c:09:5d:9a:0d:c1:2b:
bf:b4:20:52:51:fc:be:6a:04:11:fb:c3:11:07:75:
27:25:81:17:ba:2c:43:26:8f:84:c5:21:5c:5a:59:
91:ba:5a:01:09:26:ea:ff:c9:44:bb:36:d3:7a:83:
43:fe:4c:6e:c7:a6:a1:20:5e:c4:47:7a:93:ac:97:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:25:DE:D9:12:F6:6F:18:2C:B7:30:D0:06:75:6E:FA:45:3D:7C
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/YKUl3tkS9m8YLLcw0AZ1bvpFPXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.96.0-194.5.98.255
Signature Algorithm: sha256WithRSAEncryption
92:5e:35:0a:02:65:91:0b:ba:65:80:f0:00:18:67:f7:95:45:
88:d2:8c:a2:0c:12:30:ca:ab:e1:ac:be:ed:33:a8:e9:94:38:
1b:83:ef:05:90:61:b0:7c:0e:c0:87:22:6e:e5:5d:83:52:a6:
56:11:24:42:06:d5:2e:3b:d9:b3:fa:a2:d3:5f:b2:2e:5f:f8:
a3:2a:0b:7e:d2:4a:fd:82:c1:0c:b1:f5:3e:bf:a9:4f:d6:a1:
d9:d6:3a:9a:ca:45:8d:93:08:d6:f1:8f:9b:ed:4b:02:be:01:
95:63:d8:57:a5:ab:ca:65:3d:ee:c8:90:b9:41:4b:4e:cd:aa:
5b:cd:a9:5f:34:c6:94:69:91:5b:c5:37:9b:0a:bc:4b:a1:21:
7f:7e:16:8f:42:aa:3c:7c:fa:75:3a:9c:16:48:10:af:dc:de:
79:a3:55:aa:fc:7b:7f:21:16:eb:6e:5a:f7:11:19:90:9c:0d:
49:15:44:2b:f3:1a:dc:1d:46:44:2a:78:bb:89:78:fc:90:9a:
b0:4c:96:cd:5e:aa:51:9c:19:da:af:b6:1f:c6:5a:20:00:23:
08:09:aa:78:92:c3:7c:d7:ff:e2:e9:5d:3b:51:94:de:a7:a6:
a4:84:1d:36:f2:e7:c9:a6:6e:31:72:e3:5e:c7:78:f5:e2:50:
36:b4:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:03 2025 by rpki-client