Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YNF2aMKOo8XZqCm4WJmoBXdnEi8.roa
File: YNF2aMKOo8XZqCm4WJmoBXdnEi8.roa (raw, json)
Hash identifier: 3nvhYV6NyAW2+bJu1MKrW7Nj5g5qQwLXJAsayCb6Xso=
Subject key identifier: 60:D1:76:68:C2:8E:A3:C5:D9:A8:29:B8:58:99:A8:05:77:67:12:2F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0199B97C64011E322D23A2496EC45207747C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YNF2aMKOo8XZqCm4WJmoBXdnEi8.roa
Signing time: Mon 06 Oct 2025 12:26:00 +0000
ROA not before: Mon 06 Oct 2025 12:26:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52114
IP address blocks: 93.171.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:7c:64:01:1e:32:2d:23:a2:49:6e:c4:52:07:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 6 12:26:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60d17668c28ea3c5d9a829b85899a8057767122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:4e:e1:17:89:b2:6e:17:8c:18:fc:88:2d:
8a:f6:0e:63:fb:ec:67:09:9e:9a:ea:50:26:a2:fb:
32:43:44:6e:82:58:d0:50:eb:6c:8d:4d:14:f8:71:
3b:46:ac:f3:46:8a:4e:72:42:e6:ac:d7:3c:cb:5d:
7d:0b:57:87:b1:27:03:a4:fa:c3:72:15:6f:11:34:
10:d0:1a:30:9a:78:de:1f:f6:90:8e:d3:a1:57:17:
e1:97:ff:ab:72:10:44:5c:fc:df:c1:45:7e:f2:13:
87:ce:24:83:16:30:1c:58:8c:b2:14:ad:8d:a3:a3:
63:48:ab:2d:81:17:c9:a3:cd:c0:c7:aa:76:cd:ff:
87:79:74:ef:ac:85:69:6f:25:fb:34:fe:f8:3d:af:
7e:0b:a1:00:ad:2f:58:54:d2:bc:c3:00:05:b3:ab:
5a:b1:a0:4e:e1:7f:a0:0c:09:e4:33:36:58:ca:f9:
54:39:7a:bb:dc:20:a2:50:ea:0d:01:9d:8e:de:8b:
40:d4:f3:d6:f7:f9:2c:2e:2c:77:84:8b:e8:02:62:
26:3b:1d:c6:ed:80:fe:eb:d3:03:70:58:60:f1:6f:
e9:69:40:b9:f7:7a:7c:0e:ae:d5:96:51:13:cd:c5:
8a:45:de:0c:3c:21:27:d6:61:fc:94:79:b7:7e:0f:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:76:68:C2:8E:A3:C5:D9:A8:29:B8:58:99:A8:05:77:67:12:2F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YNF2aMKOo8XZqCm4WJmoBXdnEi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.176.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a7:26:bc:d7:b8:12:dd:9e:d9:71:1a:a5:65:9f:9a:17:32:
d6:ad:6f:f9:ca:5c:65:31:ea:85:69:36:99:1b:0c:6a:8f:52:
de:ea:6d:27:f0:a7:51:4a:9c:bd:0f:ed:a1:a2:7d:9b:63:55:
ea:c5:de:0e:01:5a:a3:d5:05:1c:74:69:42:0c:da:b6:cb:a2:
4d:40:75:55:2a:4a:25:50:62:45:00:2f:e8:34:8c:4d:b5:b4:
54:45:95:1a:ff:0d:24:66:d9:21:fd:47:84:b5:23:d8:f2:3d:
8b:28:2c:c6:02:d9:58:43:95:2a:cb:60:e5:f7:d7:1a:34:e4:
e7:49:dc:2d:6b:9e:f4:4a:ac:ee:0a:1d:63:e8:e8:6c:be:f8:
6d:03:a7:21:64:05:c7:7b:f4:a9:d1:7b:0b:e4:35:ed:a9:65:
9a:9a:a0:45:27:c3:72:b4:38:76:41:0a:da:fb:26:9d:40:74:
0e:7f:a6:e2:9c:7d:eb:28:2d:8e:e5:7a:78:43:4f:19:96:df:
cd:eb:8c:36:24:24:77:c2:8a:21:8d:c3:97:1a:77:b7:d0:05:
33:e8:15:69:42:aa:de:8e:92:8a:c4:ad:ff:c1:dc:fc:79:34:
6a:85:53:da:cd:b4:13:05:db:96:3a:f4:aa:de:75:a1:b4:6b:
11:0f:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:20 2025 by rpki-client