Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa
File: YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa (raw, json)
Hash identifier: 8L2JOWpp8ODt1ijnUyg6XruASgyQTxKsYir/kGA2dxs=
Subject key identifier: 60:9F:80:B5:A3:7E:B0:5C:8C:D2:EE:FF:21:86:11:1E:B8:6C:96:94
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019A0DF618212AFC93B4BD94803095687368
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa
Signing time: Wed 22 Oct 2025 22:07:03 +0000
ROA not before: Wed 22 Oct 2025 22:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.235.156.0/23 maxlen: 23
185.235.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:f6:18:21:2a:fc:93:b4:bd:94:80:30:95:68:73:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 22 22:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=609f80b5a37eb05c8cd2eeff2186111eb86c9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:56:ef:02:ad:ce:76:b8:bc:e3:01:a4:ba:
b6:20:fa:57:c3:af:45:bd:98:88:cc:28:94:9c:bb:
2a:63:4c:2d:45:c3:59:aa:db:05:e8:b3:f1:4f:4a:
4e:c9:4e:30:cd:f0:12:73:2c:fa:93:20:5f:08:77:
52:d8:cd:72:51:1c:fb:9b:d1:8d:d2:a7:94:c2:a4:
b0:48:d1:73:a6:41:38:1a:20:b6:69:97:6c:69:f3:
a2:27:58:2c:4f:c5:a2:93:6d:b8:e0:16:38:ab:37:
a4:ec:17:a9:f5:76:b6:b4:2a:f6:09:36:6f:49:e1:
e1:f5:88:86:40:88:99:e0:9b:61:34:76:18:99:3d:
ce:ff:86:55:31:52:29:4a:04:90:5a:d4:d0:42:06:
e2:45:e7:2c:0e:49:05:e4:c2:7b:59:1c:ca:68:2b:
84:17:af:7b:ee:13:85:d6:47:f2:ac:e5:29:85:47:
ca:bc:36:98:89:cf:98:8c:b0:5d:37:90:24:d5:80:
f5:88:35:11:93:91:9b:a7:54:24:8b:a3:50:de:79:
0a:fc:0c:2e:e2:62:b3:38:9d:b4:59:4d:35:2d:89:
c4:5f:42:64:be:5a:ba:8b:ab:8a:d9:72:eb:ed:7c:
ab:29:28:6a:f3:03:70:bb:72:94:19:9b:e5:4a:96:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:80:B5:A3:7E:B0:5C:8C:D2:EE:FF:21:86:11:1E:B8:6C:96:94
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.156.0-185.235.158.255
Signature Algorithm: sha256WithRSAEncryption
7b:93:93:07:35:90:b8:4e:d1:bf:90:60:08:fb:54:7b:b0:7e:
41:30:a1:f9:e9:49:95:e9:bc:2f:75:fa:29:48:87:b1:39:8c:
e5:36:31:f0:03:ea:75:7b:ec:eb:41:1e:a3:19:5e:2e:18:40:
af:1b:e3:b1:1d:4b:d5:a0:7d:74:af:18:a6:06:ae:83:a8:36:
56:be:6d:0a:67:16:12:9e:98:16:a2:8f:0f:f1:0c:33:28:aa:
47:c8:f1:09:a5:42:ae:a1:0b:e6:59:be:ae:22:ae:20:9a:8b:
c1:12:85:77:49:3b:c0:f0:b2:94:fb:c0:fe:d8:d8:39:89:b8:
99:83:32:ad:ce:fa:52:f1:a6:e0:06:d4:34:39:be:fc:f4:fe:
5a:86:b4:1f:24:c0:91:dc:9b:9f:7e:89:17:9f:ad:7a:d3:27:
06:d7:c7:02:79:9b:23:ba:5a:45:47:e2:ff:9f:96:2d:3d:1e:
41:51:7e:a7:84:e7:4e:82:4d:62:48:84:1a:58:af:3d:8e:42:
8a:cf:1a:b1:f3:29:00:38:3e:d6:e7:70:38:cc:59:4c:a4:75:
92:4a:ab:7c:5f:1e:49:f5:a3:0d:0a:8b:cc:ab:1d:c0:8b:51:
00:40:c4:1f:46:d1:21:86:f2:7b:d7:4e:79:ce:be:ae:42:1a:
26:c0:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:40 2025 by rpki-client