Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yyqYi6wr2GiPNqn6QjiCQbuU-Oc.roa
File: yyqYi6wr2GiPNqn6QjiCQbuU-Oc.roa (raw, json)
Hash identifier: 1YcZ7BvcaQPu6cL4hGqHylem6YKvX9TH8D4wE5nmP2Y=
Subject key identifier: CB:2A:98:8B:AC:2B:D8:68:8F:36:A9:FA:42:38:82:41:BB:94:F8:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01999539E4018396649E07899B16FEDCD34F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yyqYi6wr2GiPNqn6QjiCQbuU-Oc.roa
Signing time: Mon 29 Sep 2025 11:27:03 +0000
ROA not before: Mon 29 Sep 2025 11:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 163.5.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:39:e4:01:83:96:64:9e:07:89:9b:16:fe:dc:d3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 29 11:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb2a988bac2bd8688f36a9fa42388241bb94f8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:67:55:5b:fd:65:df:cc:81:4a:89:64:fb:
0c:49:d1:5c:fc:25:72:fb:01:e4:c0:cd:9f:29:d9:
f9:fa:a8:f4:c7:9c:ac:d7:9d:8a:6f:2a:89:9e:29:
43:eb:7b:91:2f:6c:43:78:32:4e:3f:d1:0d:b6:04:
0b:2b:dc:56:ad:29:38:50:f7:cf:9d:f5:2b:cb:93:
ef:e3:2e:3f:fe:95:95:ee:02:13:ee:eb:eb:5c:1d:
b6:3f:59:05:71:18:ab:13:ab:fc:08:f8:66:77:ac:
62:26:c5:39:b6:21:f7:d7:be:d4:11:b6:c7:8e:41:
bf:fd:31:86:18:23:4e:8c:67:13:c4:57:7b:c5:96:
41:87:1a:e2:5c:c7:52:54:83:f9:c7:23:19:39:37:
2f:94:8c:50:5e:1b:48:37:6f:06:81:86:a0:80:d3:
ef:c6:d7:be:d6:ad:83:0f:4d:70:4b:c3:43:78:67:
41:ab:66:aa:0b:18:d9:f3:9b:d0:82:61:7e:d1:1e:
08:f9:2a:c8:40:40:29:4d:4a:0e:96:08:3a:2c:f8:
33:09:06:b1:8d:19:f2:29:16:47:e2:f0:07:69:46:
a8:0d:89:e3:68:04:2b:18:b6:26:d3:c2:d5:87:7b:
16:3a:5b:6f:c6:84:fa:43:da:49:20:00:08:ae:3a:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:98:8B:AC:2B:D8:68:8F:36:A9:FA:42:38:82:41:BB:94:F8:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yyqYi6wr2GiPNqn6QjiCQbuU-Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/24
Signature Algorithm: sha256WithRSAEncryption
38:11:10:18:e7:0a:d1:a1:6f:f8:55:56:4e:72:58:1b:bd:87:
b5:35:53:92:5e:75:3f:23:f4:e3:9e:11:14:5c:c8:ee:e4:1e:
e9:52:fe:54:1d:d0:59:f5:12:7d:65:01:17:c2:00:d7:38:75:
fd:15:94:bb:ca:a3:dc:b1:c3:e5:20:c6:a7:5f:d3:62:cf:87:
7e:7c:b7:45:32:64:06:86:8c:06:f0:43:90:d6:42:c1:c3:36:
11:be:e1:22:22:62:bb:22:76:6d:d6:85:c0:0d:b9:6b:6b:c2:
56:7c:7c:74:dd:e1:10:1f:d2:06:ee:56:d1:6c:be:c7:5c:4b:
b9:c7:5b:91:61:06:04:f7:ae:32:e3:f0:40:8d:6b:ba:d5:63:
d7:a4:8b:cc:32:e3:08:1a:4f:00:a2:e5:92:ff:c0:c6:b2:54:
88:de:83:1f:af:bf:c0:94:8a:99:41:24:4a:60:98:9e:32:2d:
14:70:5c:46:7c:76:42:e8:42:b3:ac:e4:1c:d7:ce:40:22:dc:
26:7d:b4:69:a3:8a:76:eb:6f:c7:fd:92:24:b7:72:3b:91:84:
de:1b:00:88:11:f2:2f:56:ae:2a:04:9f:a1:5e:50:92:d0:ac:
ba:cf:15:35:6c:de:d3:da:24:1d:91:0d:89:5f:64:ef:79:e3:
18:91:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:27 2025 by rpki-client