Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yMgN2lw4yVRG0XT_vDGki8ZxtOw.roa
File: yMgN2lw4yVRG0XT_vDGki8ZxtOw.roa (raw, json)
Hash identifier: tURPkCwkO1zPyl1jKCY06Mhga6oyH1MFUsZsdcfoyrA=
Subject key identifier: C8:C8:0D:DA:5C:38:C9:54:46:D1:74:FF:BC:31:A4:8B:C6:71:B4:EC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0198CCA1125B5E147D9FF35BE2580E14D461
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yMgN2lw4yVRG0XT_vDGki8ZxtOw.roa
Signing time: Thu 21 Aug 2025 12:36:04 +0000
ROA not before: Thu 21 Aug 2025 12:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214449
IP address blocks: 109.236.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:a1:12:5b:5e:14:7d:9f:f3:5b:e2:58:0e:14:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 12:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c80dda5c38c95446d174ffbc31a48bc671b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:45:a9:36:1b:90:73:d7:d0:42:18:cd:2a:
92:a3:ba:60:9c:d4:a8:d7:f3:20:e9:ff:08:34:37:
cd:62:0c:01:36:a5:d3:46:ab:f3:ea:cc:e8:45:3a:
ce:94:3a:a5:9c:b6:91:d8:fc:f1:ae:8e:e4:b9:9a:
19:2d:73:81:0f:1c:68:99:48:b9:92:ec:d7:c2:88:
25:ec:14:15:b5:cf:9c:5a:94:e1:f2:c8:e7:87:d8:
bb:e1:c9:8f:15:db:03:2b:ff:7e:15:71:4e:29:b5:
ef:68:3d:e9:ca:3f:a0:66:07:ce:06:d8:36:47:5a:
b2:7e:a0:09:a3:f4:57:7c:7b:e9:37:3b:95:89:94:
41:c1:c2:ad:94:d9:d7:0c:71:c2:ff:32:93:59:53:
65:45:0e:bd:b4:cc:db:ed:0d:4b:0b:ee:39:b5:c1:
87:2f:fb:75:55:fc:84:6a:e6:34:53:cb:e8:f6:ed:
03:29:c7:d7:44:ed:9b:d6:24:db:db:59:e2:70:d6:
a3:16:67:8b:df:e7:19:1b:7a:c5:a0:31:65:9b:a7:
87:2b:46:12:d3:5c:f5:f7:67:5a:04:fa:33:56:b3:
f3:66:fc:ae:c2:03:56:98:d8:d8:1a:5a:4c:f3:ed:
20:43:37:01:d5:b2:c7:69:51:f8:ab:af:2f:23:2e:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:0D:DA:5C:38:C9:54:46:D1:74:FF:BC:31:A4:8B:C6:71:B4:EC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/yMgN2lw4yVRG0XT_vDGki8ZxtOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.48.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1f:52:27:f3:50:8a:2c:5c:c7:9a:4f:61:74:dd:d7:d8:38:
59:80:03:1d:58:06:7c:34:0a:41:b1:64:d4:bf:14:fc:a1:41:
67:95:e4:c3:d3:5e:b7:09:27:30:2f:9a:46:f6:7c:f5:72:17:
ae:41:02:6a:b5:61:2e:29:ac:08:39:6b:c1:d8:f7:21:0a:c9:
c2:a9:7c:86:08:b1:32:73:69:c7:63:54:37:31:22:94:d8:40:
c3:22:83:17:94:38:d2:61:c2:3a:56:79:7f:e0:7d:48:54:5c:
e5:f9:4d:5d:fe:01:43:f3:b1:f4:e6:70:05:ee:ac:98:cf:00:
ea:32:2c:99:05:64:ee:06:58:6e:37:58:64:96:f6:6d:79:83:
b7:22:18:75:48:ff:96:1e:5b:cc:95:9c:1b:8c:3a:4e:27:46:
3b:d9:c3:23:4f:3d:4b:7e:01:f4:12:e0:4a:7c:77:a6:71:c4:
39:63:9a:e2:dd:2a:b1:ee:c8:22:92:cf:9b:a4:0a:8c:f1:7c:
88:d7:1f:b2:f8:1f:92:22:bc:e4:1b:09:68:bc:e1:02:30:52:
e6:c8:90:f5:a8:b1:99:c1:93:9a:e7:fc:65:96:69:ff:e9:b7:
f7:8d:7e:ff:89:ff:02:eb:cb:a1:5d:54:51:01:81:f3:73:3a:
da:42:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:03 2025 by rpki-client