Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LYmypTXYzd9CX9OfJ_i2Va1l0-M.roa
File: LYmypTXYzd9CX9OfJ_i2Va1l0-M.roa (raw, json)
Hash identifier: Xl5PrqBjXRcuEs1Fp7qsAlc4OXwYnmd+u94NkAbsVD4=
Subject key identifier: 2D:89:B2:A5:35:D8:CD:DF:42:5F:D3:9F:27:F8:B6:55:AD:65:D3:E3
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0199BADCDE02A2145BB7DAD088EC60DA85FD
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LYmypTXYzd9CX9OfJ_i2Va1l0-M.roa
Signing time: Mon 06 Oct 2025 18:51:00 +0000
ROA not before: Mon 06 Oct 2025 18:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57575
IP address blocks: 109.122.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ba:dc:de:02:a2:14:5b:b7:da:d0:88:ec:60:da:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 6 18:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d89b2a535d8cddf425fd39f27f8b655ad65d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:e4:a9:45:8e:91:4d:61:5f:27:2b:3a:f8:
19:52:fa:b1:2d:7a:d9:b6:81:ce:56:c5:4a:5c:43:
9d:4a:af:e9:46:0a:37:62:0a:0c:8f:28:40:76:dc:
24:f7:c0:dc:02:86:0e:d2:eb:15:75:02:55:13:2a:
e0:53:3b:4a:88:f2:d1:55:d8:0c:ff:e7:f2:53:0b:
c4:bc:18:a7:f7:e0:b4:be:1c:19:42:90:c5:14:8e:
b0:50:6a:a7:de:fe:33:af:e9:28:63:75:6d:c3:91:
47:b0:87:b9:2e:ed:de:52:12:d4:fd:52:bf:50:5d:
95:2c:80:f6:f4:ea:52:73:97:8c:2d:13:b4:4c:9a:
4e:dc:4a:f4:c7:cd:4d:9c:71:f6:10:40:69:11:7d:
e6:4a:b5:32:bd:2d:af:2d:fa:b6:3d:6d:d7:6f:08:
9d:c6:58:aa:da:f8:39:e7:1a:5c:c6:ca:8a:b0:fc:
5c:c7:21:69:76:de:6c:65:b6:3d:a3:de:0c:b0:58:
1d:9d:d2:69:9d:bd:46:8b:94:d5:67:6a:82:91:e5:
fc:96:be:44:2e:2f:aa:f7:bd:b5:3f:75:30:cc:7d:
79:3d:20:38:26:83:71:78:e1:d0:f6:9f:33:c8:43:
29:2e:a8:3f:2a:1e:21:eb:8b:ba:ba:ac:29:21:37:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:B2:A5:35:D8:CD:DF:42:5F:D3:9F:27:F8:B6:55:AD:65:D3:E3
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/LYmypTXYzd9CX9OfJ_i2Va1l0-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.11.0/24
Signature Algorithm: sha256WithRSAEncryption
46:45:82:d1:ac:e5:c6:51:a6:74:72:0c:84:65:ff:e6:cf:72:
ba:41:81:a5:7d:dc:81:73:8a:29:b8:f8:3c:14:f8:09:a7:9f:
58:c2:65:96:c8:5f:7f:91:1f:7e:8c:1a:e1:d0:e8:7c:ed:9b:
98:60:70:6c:b7:1a:75:6a:4e:b8:25:dc:a3:93:b2:f1:1a:90:
38:cf:84:50:c2:21:3a:95:14:c1:00:95:ce:33:2e:0c:57:64:
82:04:af:fd:31:59:c4:eb:85:ea:0d:28:98:fc:2c:80:55:ca:
45:12:e2:41:c7:29:b6:f1:12:fa:59:fb:d1:5d:32:bf:31:66:
d8:0b:34:b0:f7:a9:a1:2a:be:ce:42:a2:a1:9e:2a:6c:9d:22:
ed:72:9a:2e:0e:b1:78:0c:1b:29:e6:9b:59:cb:df:2d:23:d8:
76:e6:63:bb:cb:fb:04:75:32:e5:b1:2d:77:7f:ae:87:88:46:
5d:6c:d3:08:8c:a4:0a:52:91:02:c4:da:0c:bd:1e:02:16:4a:
7b:47:d1:3a:90:43:23:4a:38:f4:c9:ff:c2:6d:9b:ec:8d:ec:
39:ea:c7:85:02:1f:88:83:1f:a7:15:b3:ad:b5:d9:f7:a1:ac:
a1:c2:a5:09:b1:cb:93:69:ad:54:b5:6f:fc:81:49:9b:4c:e0:
55:8b:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:00 2025 by rpki-client