Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YdSHkmxaKGsPWAVPOrWWw_ZEGMQ.roa
File: YdSHkmxaKGsPWAVPOrWWw_ZEGMQ.roa (raw, json)
Hash identifier: xbMbtDkZuBR3igPRUOZT/UOnmnpg5z7C9ymnyoxmkCQ=
Subject key identifier: 61:D4:87:92:6C:5A:28:6B:0F:58:05:4F:3A:B5:96:C3:F6:44:18:C4
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01985A485F48982E72B45D8A4133FFBA40C2
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YdSHkmxaKGsPWAVPOrWWw_ZEGMQ.roa
Signing time: Wed 30 Jul 2025 07:42:29 +0000
ROA not before: Wed 30 Jul 2025 07:42:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212525
IP address blocks: 185.52.101.0/24 maxlen: 24
185.52.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:48:5f:48:98:2e:72:b4:5d:8a:41:33:ff:ba:40:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jul 30 07:42:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d487926c5a286b0f58054f3ab596c3f64418c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:c4:bc:a2:51:8e:eb:1d:9a:72:b1:be:be:
48:10:13:72:7a:0e:44:73:81:e9:89:17:0c:77:31:
ef:c6:59:ab:e1:a8:ce:0e:9f:c4:20:69:6a:63:b7:
09:aa:83:47:ef:86:3a:c3:fa:cb:a6:ab:16:f3:00:
a5:b4:37:a7:26:81:5e:4b:df:14:c3:9e:6d:a1:bd:
76:f9:cf:60:8e:01:5e:7f:49:b0:b7:8b:d3:06:b9:
5d:9e:4b:19:06:95:b1:a3:84:73:1c:32:95:25:48:
ff:07:99:b1:13:3f:0e:8c:d8:7b:37:5b:d6:99:35:
bc:98:cd:00:6e:ec:35:1a:0b:b0:09:bf:07:90:81:
be:6c:0b:01:27:1c:4b:dd:b9:a0:d3:2a:ab:6f:bb:
29:fe:d8:bc:e0:78:f3:9f:f1:1b:90:e8:43:96:1f:
4e:bd:0a:00:2b:07:c1:a7:e5:33:61:63:9a:8c:99:
f5:1f:0b:8a:0e:70:8f:f5:dc:a2:17:b4:23:76:2b:
0a:7e:d5:b3:73:99:b0:1f:13:2f:37:38:2a:2f:8e:
70:68:17:7c:c8:e7:d2:bf:43:80:3f:52:75:e8:ed:
36:69:8e:7b:2e:a3:e8:1b:e8:15:c2:14:b7:43:7e:
32:c5:07:52:b2:88:18:76:94:23:02:8e:6a:62:48:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:87:92:6C:5A:28:6B:0F:58:05:4F:3A:B5:96:C3:F6:44:18:C4
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YdSHkmxaKGsPWAVPOrWWw_ZEGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.101.0/24
185.52.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:59:49:65:82:12:88:ec:1c:ac:f8:fc:6d:94:bb:db:fb:4a:
68:64:a9:f2:82:0a:ae:94:f7:ef:57:f7:96:33:bf:9b:a4:2d:
3a:37:f7:31:04:3f:e4:81:21:a5:15:ad:82:54:bb:0b:ab:d4:
36:d1:8c:5c:0c:0c:2c:4d:0f:e9:3c:f6:db:f3:3d:5f:08:26:
d5:65:e1:86:32:f9:cb:0c:e9:89:e4:6d:98:a8:61:22:bd:ca:
f4:09:04:8b:d1:17:0b:7a:d1:36:00:45:d2:fe:2a:69:c4:bd:
20:30:cf:a2:49:2e:2f:80:66:9a:55:bd:b0:5c:28:af:a4:b5:
69:35:95:0e:dc:5e:b1:69:fb:91:4b:07:93:27:7f:33:a5:fc:
12:e6:ff:43:f1:52:51:e9:c2:23:a1:fa:88:5f:45:aa:29:74:
1d:08:14:59:76:3f:a1:53:a0:54:10:6d:5d:e1:6c:bc:8c:2f:
e3:5e:6a:f3:fc:f5:fd:23:71:87:b9:89:0d:e8:4f:9d:dd:8e:
a1:b7:39:cf:1b:e2:88:1a:f4:a4:ca:42:35:14:55:b8:aa:7a:
7f:84:e0:e3:89:da:65:f3:c1:e8:ad:e6:d6:dc:d0:a1:e5:13:
99:7e:53:1f:d2:1e:f2:49:c9:7a:07:5f:38:d9:9e:46:41:77:
3c:00:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:49 2025 by rpki-client