Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/y94XHlBCW5YOW-6BdKgO-tlv_u0.roa
File: y94XHlBCW5YOW-6BdKgO-tlv_u0.roa (raw, json)
Hash identifier: FJGHpRnDkpY26xr1IUdzh+HyGoGoo1yGkxkAEbUhPfA=
Subject key identifier: CB:DE:17:1E:50:42:5B:96:0E:5B:EE:81:74:A8:0E:FA:D9:6F:FE:ED
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01997062712E36F31FA45CD82D27D2A33452
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/y94XHlBCW5YOW-6BdKgO-tlv_u0.roa
Signing time: Mon 22 Sep 2025 07:45:23 +0000
ROA not before: Mon 22 Sep 2025 07:45:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 188.255.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:62:71:2e:36:f3:1f:a4:5c:d8:2d:27:d2:a3:34:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 22 07:45:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbde171e50425b960e5bee8174a80efad96ffeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:7b:e0:94:80:2f:2e:51:a6:54:8e:86:25:
7d:ca:dd:56:e2:5d:9b:7c:98:f9:f1:fe:c8:8e:a8:
22:77:6e:c6:57:6f:7c:1b:9c:b4:21:72:75:97:1e:
94:44:a4:a9:52:6d:47:53:98:8f:9b:5b:6d:cc:ac:
93:e8:dc:cf:2c:c7:bb:c8:b2:df:30:08:f0:bc:14:
53:ff:50:82:00:df:eb:fa:27:e6:29:fe:5e:2b:56:
4d:54:74:1d:44:18:ef:48:5c:fc:4c:fe:75:9f:b4:
15:3f:d6:8d:82:db:15:d2:d1:6f:cf:6b:d0:53:66:
f5:3a:87:c4:bd:bb:06:7f:13:6a:90:38:29:92:d2:
26:61:7a:bb:83:78:5e:75:d8:1a:cb:4f:5d:a6:01:
6e:9e:7a:61:ea:17:e6:3b:0b:1d:57:81:17:ce:ee:
11:f2:50:98:f2:47:af:08:0f:f8:93:ae:24:7e:f0:
71:de:42:85:7e:fe:9f:47:72:1d:4e:ac:e7:e3:15:
00:dd:2e:0c:15:03:b9:b3:99:db:ba:4d:51:41:1b:
54:f5:c9:e1:79:74:39:c9:1f:ca:66:37:c5:46:51:
ab:06:94:f0:1f:70:60:9b:0a:0d:db:91:24:a0:fa:
cc:37:5a:ea:6c:f8:7c:91:31:3f:fd:1d:47:f8:b9:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DE:17:1E:50:42:5B:96:0E:5B:EE:81:74:A8:0E:FA:D9:6F:FE:ED
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/y94XHlBCW5YOW-6BdKgO-tlv_u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:66:5b:7c:f1:72:02:40:e6:77:88:8d:ca:d0:63:0d:52:81:
b9:39:bf:ce:f4:b0:46:53:e5:43:37:1a:e0:26:b2:88:22:7c:
24:c0:2c:63:49:78:6c:91:a8:da:dc:c1:68:e8:8e:2c:7f:c6:
07:5d:6c:85:d2:b2:62:32:7f:49:ef:d4:eb:71:f8:71:43:a8:
79:83:85:72:68:02:cf:c7:eb:d1:04:31:42:01:28:76:1c:81:
0e:b0:83:ac:98:4a:27:46:ac:5e:46:aa:d6:b1:81:1f:fa:c4:
65:01:56:3d:2f:61:d6:bd:25:2c:c1:a8:f5:53:e0:7e:63:ad:
fd:0a:6e:ce:20:20:8a:df:18:b1:76:11:61:9e:c8:03:86:d0:
2d:a0:f4:87:d7:44:15:20:69:53:41:a3:85:f5:03:7e:8c:8b:
78:92:ac:ec:25:5b:38:14:6c:58:62:47:a5:0e:96:4d:12:17:
90:44:42:0c:1e:26:0d:5a:3b:8e:58:49:89:d6:a0:31:bc:73:
9e:bf:e0:fb:74:00:d8:f9:c9:7f:fb:7a:fc:52:0b:49:06:ea:
3d:f8:42:a8:61:93:0d:3c:3a:b8:02:fd:bb:70:56:3b:cb:5d:
ae:0e:c7:67:61:69:9d:6f:01:9d:1c:0f:fa:bb:93:52:a8:19:
35:19:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:47 2025 by rpki-client