Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/yzSelLKPU3VJWRULncODW1JLnv4.roa
File: yzSelLKPU3VJWRULncODW1JLnv4.roa (raw, json)
Hash identifier: pPcz5rA+Lrdx6qCJtY4WbI9HG/rGZ22PkchlWUt0nic=
Subject key identifier: CB:34:9E:94:B2:8F:53:75:49:59:15:0B:9D:C3:83:5B:52:4B:9E:FE
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 01989E2F5A92F9DFEBE247B754FBF2870516
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/yzSelLKPU3VJWRULncODW1JLnv4.roa
Signing time: Tue 12 Aug 2025 12:09:20 +0000
ROA not before: Tue 12 Aug 2025 12:09:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200973
IP address blocks: 185.90.0.0/22 maxlen: 24
185.90.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:2f:5a:92:f9:df:eb:e2:47:b7:54:fb:f2:87:05:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Aug 12 12:09:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb349e94b28f53754959150b9dc3835b524b9efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:f6:a4:7c:5e:e8:2c:58:8f:ec:77:ac:65:
e8:16:7d:94:79:63:64:10:b5:33:72:14:61:12:b5:
72:40:e5:55:9e:3d:5c:5f:76:24:61:7c:b3:85:2a:
2d:5d:10:cd:bd:2e:f7:1e:10:7b:49:d1:58:04:c1:
eb:15:86:2d:62:ac:cf:1c:f0:b4:6e:f1:fb:a1:b4:
67:9e:4e:82:a2:ae:03:dd:27:35:4e:e3:a9:cf:c7:
04:61:0d:9f:f3:ac:ed:e7:0b:cb:1c:87:80:84:1b:
a9:10:8c:af:1d:53:75:ca:35:d7:4c:b0:8e:0b:bf:
9d:3f:04:79:8e:b4:b9:0b:83:7a:ca:0e:2e:ef:35:
f4:fc:fe:cd:f9:2f:61:c8:85:35:a6:9e:51:db:53:
c7:e1:ae:b3:21:85:50:90:ea:81:a0:3e:3f:41:a1:
43:3b:e1:a0:78:12:59:a5:4f:b1:f5:b0:cd:b1:0d:
35:3f:e3:6f:a0:4a:1e:0c:d9:21:3c:80:fd:52:74:
2f:34:a2:4d:dc:29:49:24:23:ce:2f:14:b4:c0:af:
03:b0:0d:53:35:ea:8c:e4:94:1b:38:6c:c1:d8:f2:
ca:a1:84:91:3a:51:63:71:7b:8d:a2:d0:33:d8:62:
fa:ab:ca:56:7a:3a:af:f7:bd:da:8a:d9:27:6a:10:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:9E:94:B2:8F:53:75:49:59:15:0B:9D:C3:83:5B:52:4B:9E:FE
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/yzSelLKPU3VJWRULncODW1JLnv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.0.0/22
Signature Algorithm: sha256WithRSAEncryption
49:60:66:09:05:5c:b9:27:0b:49:67:fd:92:90:bf:79:d6:f5:
27:1a:70:c3:e9:cb:af:fc:fd:1d:d8:ab:f9:9c:38:cc:9a:35:
7a:01:13:3d:5a:8f:6e:3c:49:e0:37:1e:26:d9:f1:b9:60:c1:
62:25:56:07:cf:76:12:3f:eb:d2:a5:31:31:e2:37:9b:6b:9a:
7b:14:e4:8b:99:45:e1:37:d3:92:c7:c9:23:2b:37:e0:6b:34:
b6:e9:c7:8b:60:36:ea:aa:6d:60:7e:0d:b7:0a:5b:97:b0:3a:
68:e3:13:8b:7d:dc:6f:77:97:bc:11:c8:e9:e6:cb:e7:cc:19:
20:8a:2f:10:f0:11:7d:ab:f0:1c:6f:05:81:60:e5:d5:f7:37:
eb:01:44:9b:bb:12:21:72:29:7f:db:77:07:bb:76:76:c2:66:
22:ad:af:26:b4:5c:b7:90:1e:f9:63:f0:56:9c:60:c2:fb:3e:
24:ac:3b:c5:fc:0a:41:ef:c2:e5:3f:79:6a:87:15:44:c8:78:
75:2f:9a:fb:77:12:91:46:34:27:50:7d:93:66:ab:72:87:50:
ae:93:f6:21:94:5c:86:b1:ee:ca:f1:cc:81:de:b4:cf:81:38:
c2:95:fb:99:7b:bd:79:35:6f:34:7f:7b:1b:d4:53:71:d5:95:
dc:f7:2c:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZieL1qS+d/r4ke3VPvyhwUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGY3NzQyODkwMTczOTI3OTM1MjA2YTI4ZWZiZjQ4MTIz
ZTc4N2MwHhcNMjUwODEyMTIwOTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjM0OWU5NGIyOGY1Mzc1NDk1OTE1MGI5ZGMzODM1YjUyNGI5ZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK/2pHxe6CxYj+x3rGXoFn2UeWNk
ELUzchRhErVyQOVVnj1cX3YkYXyzhSotXRDNvS73HhB7SdFYBMHrFYYtYqzPHPC0
bvH7obRnnk6Coq4D3Sc1TuOpz8cEYQ2f86zt5wvLHIeAhBupEIyvHVN1yjXXTLCO
C7+dPwR5jrS5C4N6yg4u7zX0/P7N+S9hyIU1pp5R21PH4a6zIYVQkOqBoD4/QaFD
O+GgeBJZpU+x9bDNsQ01P+NvoEoeDNkhPID9UnQvNKJN3ClJJCPOLxS0wK8DsA1T
NeqM5JQbOGzB2PLKoYSROlFjcXuNotAz2GL6q8pWejqv973aitknahCMWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMs0npSyj1N1SVkVC53Dg1tSS57+MB8GA1UdIwQY
MBaAFGbfd0KJAXOSeTUgaijvv0gSPnh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYt
MDk3ODdmMTUyYWRlLzEveXpTZWxMS1BVM1ZKV1JVTG5jT0RXMUpMbnY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODQzNDAtMTI4YS00NDk3LTk0NmYtMDk3ODdmMTUyYWRl
LzEvWnQ5M1Fva0JjNUo1TlNCcUtPLV9TQkktZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVoAMA0G
CSqGSIb3DQEBCwUAA4IBAQBJYGYJBVy5JwtJZ/2SkL951vUnGnDD6cuv/P0d2Kv5
nDjMmjV6ARM9Wo9uPEngNx4m2fG5YMFiJVYHz3YSP+vSpTEx4jeba5p7FOSLmUXh
N9OSx8kjKzfgazS26ceLYDbqqm1gfg23CluXsDpo4xOLfdxvd5e8Ecjp5svnzBkg
ii8Q8BF9q/AcbwWBYOXV9zfrAUSbuxIhcil/23cHu3Z2wmYira8mtFy3kB75Y/BW
nGDC+z4krDvF/ApB78LlP3lqhxVEyHh1L5r7dxKRRjQnUH2TZqtyh1Cuk/YhlFyG
se7K8cyB3rTPgTjClfuZe715NW80f3sb1FNx1ZXc9yxC
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:07 2025 by rpki-client