Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/YxylaQOafZhI24pv2ROMkb6L8uQ.roa
File: YxylaQOafZhI24pv2ROMkb6L8uQ.roa (raw, json)
Hash identifier: zhgD7wCyXnWilojWXPMdeWuf8dVD/porAHOT4NA/gWY=
Subject key identifier: 63:1C:A5:69:03:9A:7D:98:48:DB:8A:6F:D9:13:8C:91:BE:8B:F2:E4
Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial: 0199DF8FA94F2D6E5F58D938CCB9C24C7E02
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/YxylaQOafZhI24pv2ROMkb6L8uQ.roa
Signing time: Mon 13 Oct 2025 21:52:38 +0000
ROA not before: Mon 13 Oct 2025 21:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210806
IP address blocks: 185.37.11.0/24 maxlen: 24
193.200.233.0/24 maxlen: 24
2a11:da80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:8f:a9:4f:2d:6e:5f:58:d9:38:cc:b9:c2:4c:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Validity
Not Before: Oct 13 21:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=631ca569039a7d9848db8a6fd9138c91be8bf2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:73:b5:a8:ea:3a:a3:87:e7:bf:36:dd:aa:
a5:d9:58:4b:77:a9:92:c7:04:e6:71:7c:c6:67:37:
9c:09:30:1a:96:8d:2f:52:4b:ae:bb:8b:ec:e7:92:
5e:9a:e0:c7:58:a7:98:c9:e3:2d:70:cc:22:94:bf:
fe:3e:00:1b:c3:42:0e:de:cb:25:fd:9d:24:5a:1f:
e2:97:bb:fe:fe:cd:d0:ba:a2:7b:7c:9b:61:4f:f2:
92:5d:a9:8c:1b:e0:de:46:cb:9f:af:eb:ff:c2:c0:
78:2e:cc:05:96:1c:42:a9:bd:b2:a5:5d:c9:6d:0d:
a6:ac:eb:13:05:ed:7d:38:38:2d:15:8b:e5:27:c4:
bb:cb:c4:f1:ad:48:0b:6f:60:16:8d:18:2b:09:49:
9c:45:96:d6:8b:5c:28:0e:36:9d:31:6c:b4:9d:57:
b2:4c:aa:b4:33:c4:be:bd:98:f4:4d:01:5c:42:e2:
aa:54:50:b1:7e:2c:c2:f8:af:7f:fa:1a:59:58:dd:
a5:cd:2c:40:58:c8:f9:77:67:a4:63:16:0f:31:7a:
9d:83:70:93:79:50:4a:b8:07:f4:27:0a:ef:9a:f3:
0f:c2:ef:5b:28:9d:10:b8:f9:0a:4d:a1:6f:39:c1:
57:26:41:6a:6c:16:f8:4c:8b:45:db:90:d4:b2:c5:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:A5:69:03:9A:7D:98:48:DB:8A:6F:D9:13:8C:91:BE:8B:F2:E4
X509v3 Authority Key Identifier:
keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/YxylaQOafZhI24pv2ROMkb6L8uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.11.0/24
193.200.233.0/24
IPv6:
2a11:da80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:48:6c:0d:ac:40:84:95:70:a2:7c:f0:58:db:22:10:53:18:
b5:9e:9c:79:fa:ef:dd:02:77:11:1e:a4:46:c3:89:b4:c0:3e:
c6:a5:62:ba:e2:13:17:60:4a:18:b6:85:bd:6f:fa:48:84:75:
ba:2e:df:76:03:ef:16:0f:21:33:da:e1:14:c7:56:dc:92:bd:
7a:c2:a5:79:69:30:25:3b:1a:f7:37:e9:d2:a5:40:02:6a:0f:
c3:cf:92:90:2f:d8:26:21:a9:ea:da:02:6e:58:2f:df:a6:a0:
0e:75:16:c2:8b:b9:ec:53:8e:89:3b:6c:0c:5c:f1:76:1b:eb:
d0:2b:8b:a1:d9:fb:57:f1:87:e0:4f:01:56:c6:b0:4a:a8:0a:
11:3f:36:5d:e1:eb:d5:00:bc:a3:27:e7:45:b7:62:7d:56:44:
06:e3:74:ae:5a:7c:f6:6c:d4:65:16:ff:fe:bc:7d:89:55:f4:
33:66:de:ca:f5:76:bf:ba:27:32:db:5c:d5:b3:2d:9b:39:f6:
b1:d1:3b:aa:6a:b8:04:34:f3:56:41:a1:8d:14:3b:9c:ca:04:
4b:9f:0e:c9:e7:8a:e9:63:4f:0f:9f:04:55:8d:f6:82:77:f9:
e8:73:7f:66:4c:cb:82:b2:62:f6:be:bb:35:10:4b:1c:cf:4f:
27:62:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:24 2025 by rpki-client