Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa
File: ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa (raw, json)
Hash identifier: yTgovZsEnOISpJIgzu2owD01yBh+ryJFnZun9TCD92w=
Subject key identifier: CA:46:4C:4C:59:52:24:21:3A:83:51:D0:04:52:44:8F:4C:A1:F6:51
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 0199721F64D5DA39846E070F31BEF98243A7
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa
Signing time: Mon 22 Sep 2025 15:51:23 +0000
ROA not before: Mon 22 Sep 2025 15:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 5.158.80.0/24 maxlen: 24
5.158.81.0/24 maxlen: 24
5.158.83.0/24 maxlen: 24
37.235.32.0/21 maxlen: 21
37.235.32.0/24 maxlen: 24
37.235.33.0/24 maxlen: 24
37.235.34.0/24 maxlen: 24
37.235.35.0/24 maxlen: 24
37.235.36.0/24 maxlen: 24
37.235.37.0/24 maxlen: 24
37.235.39.0/24 maxlen: 24
149.62.176.0/21 maxlen: 21
149.62.176.0/22 maxlen: 22
149.62.180.0/22 maxlen: 22
149.62.181.0/24 maxlen: 24
2a01:b5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:1f:64:d5:da:39:84:6e:07:0f:31:be:f9:82:43:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Sep 22 15:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca464c4c595224213a8351d00452448f4ca1f651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:f1:47:39:aa:88:a5:09:5c:92:07:d4:0c:
13:ff:b3:13:14:e4:43:52:b8:ee:31:f4:3c:1f:5f:
44:b8:2d:c3:2d:fe:5c:81:90:cc:24:2e:51:25:ff:
31:52:0f:e9:14:3d:64:4d:55:99:4d:62:62:86:ae:
b9:14:b5:b1:d3:98:57:c3:b0:46:58:9e:03:0e:70:
59:be:3b:01:d4:33:fc:fa:63:09:ba:8c:58:4b:5b:
b2:bd:6c:1b:4d:52:9b:6f:de:14:17:aa:c0:2b:84:
bd:e2:7d:84:9f:36:00:3c:5b:5a:f7:df:0d:bb:5c:
df:91:22:6c:76:88:8c:b4:fb:b3:08:de:49:05:c9:
f8:f0:11:ac:ba:9a:d1:63:8d:48:4b:8a:99:f4:30:
91:e9:04:7d:28:bc:c4:80:0b:21:b1:2d:47:b3:56:
e9:e2:95:b4:3d:bc:64:f0:a4:48:04:e0:66:a4:e5:
19:41:80:d4:60:67:b9:a0:04:c8:72:34:bb:7f:e8:
29:7a:c8:d1:f9:ba:24:11:d9:72:ed:48:97:c2:08:
a1:34:61:be:a0:e9:c0:67:d5:c1:13:22:19:fa:00:
6f:44:d4:29:f0:2d:f7:83:40:c6:f8:d0:6d:db:dd:
da:26:75:eb:f3:0b:f9:20:8a:ba:99:20:6d:1a:97:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:4C:4C:59:52:24:21:3A:83:51:D0:04:52:44:8F:4C:A1:F6:51
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.80.0/23
5.158.83.0/24
37.235.32.0/21
149.62.176.0/21
IPv6:
2a01:b5c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:d2:f7:9f:7b:04:22:db:46:af:13:f2:68:6a:7b:d0:e8:f7:
76:43:a7:24:12:36:90:6c:90:8c:c3:c3:e5:88:b8:53:a2:9c:
de:67:82:15:65:5b:f2:cb:80:86:0b:0c:77:ea:d5:10:45:c1:
1e:32:20:31:4a:db:ef:ed:b9:e2:60:23:d1:f1:ac:84:6b:dc:
bc:e8:da:71:ed:13:da:e3:85:9f:cc:6a:04:aa:7b:6f:8d:a4:
0d:37:44:f3:b5:af:36:94:2f:97:5f:66:33:bb:e5:9a:4e:6d:
16:e0:f1:2f:43:1a:fb:52:14:d8:b9:0e:44:50:78:cf:22:16:
38:ce:12:8b:6c:41:a1:75:d7:7a:bd:06:07:3e:b4:81:13:34:
17:f3:13:5b:f1:3b:ff:44:ae:3a:03:53:67:7c:f0:e7:ab:c1:
cf:5b:93:68:f2:9a:d6:75:61:a5:57:e7:d6:6a:9c:52:57:b0:
65:de:ac:7d:6c:0c:34:eb:ce:c2:f4:c4:94:c7:1d:c8:72:5d:
aa:10:e8:a5:86:33:a6:22:38:57:d7:19:fc:18:29:82:9a:92:
d0:ba:6f:ac:ab:04:34:e8:89:80:5a:71:7b:ce:ba:fc:8a:a7:
fc:1b:d3:c7:7c:4d:ca:05:87:6d:20:09:27:15:24:8f:88:2f:
69:3e:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:40 2025 by rpki-client