Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yPiwl9qBas0_CWwr3HhvXq6bAGE.roa
File: yPiwl9qBas0_CWwr3HhvXq6bAGE.roa (raw, json)
Hash identifier: yb05fvQGJfFhNZnnjkljRSCUExMNOud+I+YEv/Cdk1I=
Subject key identifier: C8:F8:B0:97:DA:81:6A:CD:3F:09:6C:2B:DC:78:6F:5E:AE:9B:00:61
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 019773CA7619A6F0A957A111F5944CA0AD5C
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yPiwl9qBas0_CWwr3HhvXq6bAGE.roa
Signing time: Sun 15 Jun 2025 13:32:17 +0000
ROA not before: Sun 15 Jun 2025 13:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205240
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
2a0f:99c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ca:76:19:a6:f0:a9:57:a1:11:f5:94:4c:a0:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jun 15 13:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f8b097da816acd3f096c2bdc786f5eae9b0061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:bf:f1:4c:53:c2:c3:06:c1:07:1e:02:b8:
4a:f7:2d:1e:19:31:1f:58:12:ac:37:8f:79:f7:61:
e1:06:40:bc:83:44:fb:84:07:c6:63:19:99:da:db:
e6:15:39:05:3c:1b:97:24:82:51:b0:a0:24:06:0f:
dd:0a:d3:ac:49:1e:cc:91:4f:ab:69:30:68:3b:65:
2e:26:14:29:fb:04:fa:e5:41:3b:93:41:34:fb:32:
8a:ca:d6:4e:36:38:06:47:82:45:25:8f:10:3d:92:
0f:b8:7a:a4:59:ab:c3:92:4f:ed:c9:91:0a:a3:a7:
ca:7e:ad:69:1b:ed:cc:fb:5d:af:5e:d6:cc:27:12:
a9:60:8f:77:da:53:a4:78:6a:8b:eb:ad:46:20:b2:
6a:11:79:27:00:d9:53:e1:ca:c5:5b:5c:e8:3d:41:
7c:fd:10:0d:1e:39:31:4a:ac:0c:ea:d6:3c:40:c6:
07:8b:bd:a1:bc:90:94:05:d6:c3:1a:19:6f:86:04:
70:3c:07:b8:82:21:24:d8:a2:7d:0a:a7:3b:68:08:
42:72:8c:9d:8e:f3:a2:10:6d:41:96:03:5e:77:bb:
04:89:e8:0f:d7:65:e2:f1:08:aa:30:1b:cb:58:5a:
ad:6c:b8:30:56:f0:cf:1f:a8:2b:c0:66:93:66:4f:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F8:B0:97:DA:81:6A:CD:3F:09:6C:2B:DC:78:6F:5E:AE:9B:00:61
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/yPiwl9qBas0_CWwr3HhvXq6bAGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
IPv6:
2a0f:99c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:73:3c:95:e9:98:14:bf:58:72:79:39:96:e4:43:50:63:85:
30:ae:1f:cc:9f:c2:e5:07:c3:bc:17:56:aa:f2:c5:1e:60:16:
36:c0:7f:37:ca:1a:99:32:44:cc:11:93:ff:5e:e2:5c:37:3c:
8a:d2:1b:86:9a:ca:7b:bc:94:63:90:d1:b1:e7:75:88:b2:9d:
07:94:60:2f:5e:e4:17:50:37:d8:4e:dd:ce:fd:3e:b1:5b:fb:
f5:6b:f9:6b:59:04:46:98:a7:ee:bd:7c:0c:42:ec:49:eb:8e:
b7:e1:0a:71:ab:77:75:62:85:93:df:65:7e:18:11:09:8f:de:
61:0d:3a:d6:5f:7e:c8:78:75:ba:ed:65:89:a9:30:f1:1e:79:
8c:be:16:3d:55:bb:d5:e1:d6:bd:93:15:af:5b:e6:29:37:ae:
f2:b3:2a:a3:0f:f3:39:83:0b:fb:fa:1c:ff:e4:65:fb:66:1c:
c3:96:96:db:40:11:ea:f9:69:90:b4:d4:8e:b5:80:bd:f2:78:
62:f1:9b:01:a1:d6:a0:fd:e9:7f:6a:f1:ea:d5:a1:2c:91:4c:
bd:27:ac:dd:c0:cc:64:18:db:9f:0e:f8:43:45:79:76:dd:57:
36:9d:bb:f4:4e:96:f3:44:5f:76:6b:7d:3e:4a:32:28:69:f5:
b9:94:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:01 2025 by rpki-client