Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/dY03HFRy1RllCenKPrieGUzQXmc.roa
File: dY03HFRy1RllCenKPrieGUzQXmc.roa (raw, json)
Hash identifier: Whvf/7UBVmwJMgZJVFUghC//K+ikEuNaWx2rK86SYdI=
Subject key identifier: 75:8D:37:1C:54:72:D5:19:65:09:E9:CA:3E:B8:9E:19:4C:D0:5E:67
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01999B1F9796B1A35E7042F5C100EFA78E28
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/dY03HFRy1RllCenKPrieGUzQXmc.roa
Signing time: Tue 30 Sep 2025 14:56:02 +0000
ROA not before: Tue 30 Sep 2025 14:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 185.243.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:1f:97:96:b1:a3:5e:70:42:f5:c1:00:ef:a7:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 30 14:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758d371c5472d5196509e9ca3eb89e194cd05e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:6d:02:19:65:74:62:66:90:08:4d:02:ca:
fd:e4:de:f5:fe:84:99:69:4e:38:f2:40:c4:fc:50:
c6:c1:39:37:6f:c3:87:58:ef:e4:a9:55:ff:32:97:
a2:21:f8:0a:68:8b:4a:f6:79:d5:5a:8c:26:1a:08:
f6:1c:63:27:0f:b1:ae:61:e9:84:a1:49:ee:bb:ba:
70:a6:4c:7a:ad:26:7c:02:42:46:f8:62:9a:55:17:
06:f4:53:8f:e4:f1:ff:de:e2:12:5c:c2:38:7d:46:
1f:fc:de:22:1f:d0:db:c6:13:dc:d6:10:a6:d4:c3:
46:f3:0e:27:62:19:cd:e0:e1:b9:2f:f5:01:b0:40:
80:ec:f6:f0:4d:7d:2c:5a:08:00:8b:7e:03:13:30:
a7:70:57:bc:ae:9a:b3:69:14:04:c8:ac:f8:cb:3f:
bb:a5:c0:73:7b:a7:d1:4b:75:ff:c3:e9:27:a9:a8:
65:b6:09:2a:7b:20:51:b0:50:84:13:35:94:bc:57:
cb:a2:b1:18:7f:a9:b9:9a:e8:22:73:bb:d6:37:d0:
6c:d2:54:36:7a:f8:95:b6:ea:69:50:04:15:99:08:
54:bc:a6:5f:77:59:e8:4d:e0:6c:ff:b8:d1:c2:a1:
c5:b7:14:fc:c8:6d:80:07:88:3f:d8:d7:ca:9e:7c:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:37:1C:54:72:D5:19:65:09:E9:CA:3E:B8:9E:19:4C:D0:5E:67
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/dY03HFRy1RllCenKPrieGUzQXmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.182.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ee:57:ca:52:31:7f:4f:37:67:09:57:23:a4:13:a3:ca:20:
4e:88:b6:41:17:f6:2e:00:78:6e:61:2d:fc:f6:a2:6f:a2:5f:
8b:a9:f9:60:e1:bf:d1:f1:f0:35:d7:e6:1f:6f:29:31:5b:51:
b7:1d:39:b5:20:dc:be:52:c6:b7:ce:6a:5b:97:07:45:b8:ff:
c9:a9:d7:0b:7d:c3:00:87:dc:0a:53:5b:d2:e3:e1:fa:e5:45:
f2:b1:e6:7d:95:cc:fe:e0:14:05:d5:a4:48:c9:bd:98:54:e5:
56:dd:9b:29:1c:69:b9:b6:d4:f4:ff:4c:aa:a4:b9:fd:a5:a6:
77:e0:3d:a2:fc:a0:8c:56:cd:b0:52:8e:a3:13:69:f5:79:56:
28:b7:1d:a5:dc:a8:16:64:22:e4:78:e3:48:39:f6:03:ff:ed:
80:00:29:9b:03:1b:ee:a2:9f:97:6a:08:b1:20:25:5f:63:64:
68:a1:c9:2d:cb:a0:ab:29:5c:c0:11:7a:d5:0f:63:2b:ac:ff:
fd:fc:bd:b6:09:78:41:a7:98:af:8c:01:46:a5:00:4b:1f:4e:
55:be:c3:ce:98:a2:d6:04:83:06:43:98:68:79:9e:87:e8:55:
0d:7e:bd:db:6b:8c:5b:de:9e:b8:eb:90:32:bb:7b:e9:7e:66:
32:02:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:46:04 2025 by rpki-client