Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/yTZK16Petp2vOn3txInnKgFuPZA.roa
File: yTZK16Petp2vOn3txInnKgFuPZA.roa (raw, json)
Hash identifier: f4X49bz3pXDeDuy49E2fyjRi845LCJEWL2iDzuqzg38=
Subject key identifier: C9:36:4A:D7:A3:DE:B6:9D:AF:3A:7D:ED:C4:89:E7:2A:01:6E:3D:90
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 0199DD5C9D72AA0D599BCAD94AAD748FBFBA
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/yTZK16Petp2vOn3txInnKgFuPZA.roa
Signing time: Mon 13 Oct 2025 11:37:38 +0000
ROA not before: Mon 13 Oct 2025 11:37:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 109.234.220.0/24 maxlen: 24
109.234.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:5c:9d:72:aa:0d:59:9b:ca:d9:4a:ad:74:8f:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Oct 13 11:37:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9364ad7a3deb69daf3a7dedc489e72a016e3d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:a6:f0:25:69:61:9b:bb:5a:92:85:45:8b:
4a:c0:8f:04:d6:ae:f7:e5:fc:56:e3:c9:70:e8:fc:
21:8b:fa:21:ef:cf:9c:d8:e0:9b:9a:8f:9c:60:dc:
5d:20:4a:f2:ff:e5:cd:94:f6:ad:9a:76:d7:5d:d9:
2a:1b:2a:4d:5f:2c:c9:48:bb:a3:63:a7:e4:d3:0d:
20:5e:70:b5:c9:32:29:60:c2:35:48:58:ca:6a:8b:
4e:63:78:00:c0:a6:00:31:9f:5f:ec:a6:31:40:42:
39:d4:ce:de:17:8b:d8:aa:e4:9a:a0:46:5e:23:36:
33:14:5e:f5:40:d7:41:08:0f:39:4a:05:b1:19:45:
1e:c6:31:e5:4e:f1:40:66:e1:59:53:fa:da:3c:d9:
7f:35:27:4f:95:63:0c:fd:35:84:da:dc:6c:1e:cf:
2f:00:4e:08:63:ed:6e:b1:0a:e7:c4:4b:b9:fa:37:
55:93:48:d3:a6:6a:50:f0:b8:e1:a6:7f:e3:62:57:
d7:0b:21:cf:4b:3c:0f:e1:18:8c:7d:5e:3d:9d:0f:
00:ba:00:a0:96:08:3d:0e:5c:f2:5f:22:a2:ba:a2:
b7:40:89:15:19:da:e0:4f:14:45:b6:a9:68:71:1f:
73:20:5f:a6:c2:8d:0b:85:5d:29:9e:50:ee:a7:8a:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:4A:D7:A3:DE:B6:9D:AF:3A:7D:ED:C4:89:E7:2A:01:6E:3D:90
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/yTZK16Petp2vOn3txInnKgFuPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.220.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:a0:9e:c7:3d:26:e0:94:36:0a:66:e4:24:b7:2b:f0:8b:47:
69:ea:22:9a:28:e8:4b:00:36:26:5d:c4:7e:cd:dc:0f:73:f3:
11:c6:0c:34:8d:08:e3:18:a1:00:48:ad:62:fb:53:f0:b3:75:
b5:56:db:88:6b:ac:1d:3b:fa:e3:95:b8:dd:0b:28:f2:8b:25:
4a:66:a4:2d:ce:ff:29:10:98:3e:47:69:30:4f:15:4c:6a:66:
34:0a:a4:95:e2:7f:5d:8d:9b:50:0b:30:f7:97:b8:6a:53:a2:
3b:67:cf:0c:f5:65:81:57:2a:2d:8b:a2:ff:1d:76:f1:8c:a3:
10:49:f6:12:4f:6b:33:99:f1:e7:d9:ac:ea:6f:04:92:7c:0f:
06:4e:a6:99:86:14:76:7c:7a:eb:3b:ca:d3:3a:52:3d:eb:a0:
e4:3b:1a:66:f9:d9:69:10:42:76:61:80:fa:7f:94:10:07:bd:
da:35:25:b9:70:9a:73:bd:d3:de:57:c6:8b:ad:ea:a7:4b:ff:
b3:97:d5:a0:52:2d:b3:16:6d:8e:ac:49:92:5b:ad:4c:5f:77:
55:5f:58:10:c1:47:4a:ab:3e:fa:f4:a3:b4:91:7e:ec:f2:e9:
d4:f5:09:f5:68:0e:85:ca:5d:0d:13:72:61:be:6f:29:f0:c7:
4d:7b:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:26 2025 by rpki-client