Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/YJiS4qGuwLN_Sg41RSYko6CqAYU.roa
File: YJiS4qGuwLN_Sg41RSYko6CqAYU.roa (raw, json)
Hash identifier: 2h4yWiYaNQUsbtMp+bAg/Hr+KrDeiT3A2mqFfxK9yew=
Subject key identifier: 60:98:92:E2:A1:AE:C0:B3:7F:4A:0E:35:45:26:24:A3:A0:AA:01:85
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019A4AAC158D0510E121D076599F25571113
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/YJiS4qGuwLN_Sg41RSYko6CqAYU.roa
Signing time: Mon 03 Nov 2025 17:03:02 +0000
ROA not before: Mon 03 Nov 2025 17:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57324
IP address blocks: 93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.39.0/24 maxlen: 24
185.52.117.0/24 maxlen: 24
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
2a00:dd00:3::/48 maxlen: 48
2a00:dd00:4::/48 maxlen: 48
2a00:dd00:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:ac:15:8d:05:10:e1:21:d0:76:59:9f:25:57:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Nov 3 17:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=609892e2a1aec0b37f4a0e35452624a3a0aa0185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:56:89:fe:3b:f4:57:02:de:26:89:9c:e6:
9a:68:7f:ec:0f:78:24:4a:32:e8:cc:e5:bb:39:0c:
fb:1e:a6:37:86:da:9b:1a:e1:27:a0:61:98:8b:a6:
a1:b4:11:a2:95:e6:50:a9:35:b2:8c:22:ea:72:f8:
cf:57:84:f5:ab:79:39:a8:48:31:8f:26:e3:7d:b2:
60:01:e3:25:f2:db:d7:9c:31:95:fe:58:21:ab:08:
c4:5d:6a:16:bd:d9:a4:c7:57:e3:fa:8d:cb:d9:11:
01:23:81:93:20:f4:0d:7b:fe:62:e2:16:be:9f:a6:
12:03:0d:ea:7d:8b:38:07:8d:4c:cd:38:15:d9:f4:
36:f6:33:df:95:b7:ba:d0:d6:bc:79:d6:c6:9b:3f:
c6:07:56:a1:ab:1f:7b:24:7a:07:bf:03:bc:cc:ac:
85:1a:0e:3c:1d:ca:9f:fc:26:19:5e:45:08:66:9d:
da:33:bc:a0:ee:49:c4:b6:82:4c:f8:e4:7a:cc:62:
f1:36:90:e1:ef:89:32:cf:1f:20:4c:4c:ad:07:3e:
4f:ed:e2:ba:97:4a:47:32:c9:80:98:84:e4:65:90:
84:f3:39:92:18:2e:d8:50:a0:73:14:ff:ec:87:e0:
f6:d1:2c:66:d5:de:d9:3b:21:e4:70:ec:50:ac:1c:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:92:E2:A1:AE:C0:B3:7F:4A:0E:35:45:26:24:A3:A0:AA:01:85
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/YJiS4qGuwLN_Sg41RSYko6CqAYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.117.0-185.52.119.255
IPv6:
2a00:dd00:3::-2a00:dd00:4:ffff:ffff:ffff:ffff:ffff
2a00:dd00:6::/48
Signature Algorithm: sha256WithRSAEncryption
7a:5a:82:34:2f:f4:24:e1:db:b3:8c:09:a6:9e:3d:3d:18:a0:
12:86:f7:96:c1:83:dd:d7:58:8c:07:01:2e:e2:3e:bc:e5:b9:
61:fc:25:6c:32:ef:26:79:57:85:92:62:1d:c1:e1:0c:6a:57:
37:6d:71:0e:99:f6:98:d0:55:0a:21:7d:06:af:3c:e8:af:3e:
76:8f:b7:03:39:c0:3a:d7:d5:94:2c:11:2c:4a:1e:51:6d:6b:
dd:0b:28:57:2d:fa:86:6b:ef:13:17:64:55:70:f9:88:2b:2a:
ef:ef:e0:83:7c:03:5d:85:2b:d0:c8:72:29:43:87:b8:ec:45:
04:99:0d:7a:db:85:87:c5:46:b8:3c:07:98:90:5a:c9:ba:c6:
65:70:e3:f8:ba:ca:83:5e:e4:fb:85:67:7f:d5:88:25:89:b8:
2d:07:22:cf:68:ff:2b:2b:20:63:b1:9e:86:47:bf:f9:7e:31:
1a:7a:44:74:75:75:75:1c:a1:c3:0a:70:d9:bc:9a:bd:34:fd:
ce:db:47:b7:3c:e6:d1:af:96:46:b5:ab:db:eb:d9:69:4a:fa:
3b:a2:eb:8a:d6:b0:60:50:17:cf:d7:40:40:2b:91:99:4f:4e:
17:0f:bd:bd:03:7a:d7:05:1e:71:6b:1e:1d:88:e2:58:72:ab:
ff:fc:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:45 2025 by rpki-client