Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/v-YbZjkpkyNcTi_dH_isTonOWuk.roa
File: v-YbZjkpkyNcTi_dH_isTonOWuk.roa (raw, json)
Hash identifier: pvEYd1QCzYHc+/sjOC6/0V8Ctc55M7UP+DfQ+j94UXE=
Subject key identifier: BF:E6:1B:66:39:29:93:23:5C:4E:2F:DD:1F:F8:AC:4E:89:CE:5A:E9
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019938370D0A6CE0573845A081AD1048CC54
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/v-YbZjkpkyNcTi_dH_isTonOWuk.roa
Signing time: Thu 11 Sep 2025 09:59:15 +0000
ROA not before: Thu 11 Sep 2025 09:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 212.107.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:37:0d:0a:6c:e0:57:38:45:a0:81:ad:10:48:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 11 09:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe61b66392993235c4e2fdd1ff8ac4e89ce5ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:36:b8:d8:4d:ea:64:2f:f1:a3:cb:64:e0:
62:5b:d9:b9:65:ad:80:11:4e:bd:b7:fa:6f:51:cf:
5f:54:a1:d4:fd:46:59:3e:2e:9e:da:8c:12:e3:d5:
11:72:f7:e6:8a:7a:8a:d5:2f:c4:19:19:f0:4f:61:
55:15:96:17:47:68:01:12:81:4a:e9:bd:9b:fc:65:
4d:40:2c:7e:84:ed:01:e7:38:a5:f4:8e:6c:06:0c:
88:a2:5a:14:db:a0:0a:b3:8d:f5:04:a9:89:11:c5:
dc:46:2e:51:7a:f2:0e:24:93:1e:30:34:7e:5c:4e:
c3:cd:54:10:63:cb:6c:35:fe:a1:07:ab:92:0d:d1:
fe:44:42:62:c3:b6:07:8d:a1:7e:47:10:7c:8c:0f:
83:43:b5:d7:8e:a1:0d:22:7b:e8:50:08:30:d8:d1:
67:b1:da:02:33:72:21:df:20:18:3f:35:a7:3e:6b:
3a:d2:63:21:6b:6f:68:f3:41:9d:2d:71:91:01:c5:
95:bc:d5:7e:90:f9:1d:aa:4c:8f:76:62:eb:fc:ae:
6b:c0:35:32:0a:fa:52:74:b9:51:b4:b8:bc:fb:92:
d6:fa:86:1a:cd:45:65:67:67:d2:cb:b6:3b:e4:36:
72:cc:27:7f:e6:f2:69:57:f6:5e:d7:48:b4:b2:73:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E6:1B:66:39:29:93:23:5C:4E:2F:DD:1F:F8:AC:4E:89:CE:5A:E9
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/v-YbZjkpkyNcTi_dH_isTonOWuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.27.0/24
Signature Algorithm: sha256WithRSAEncryption
68:60:a2:12:8b:a3:9b:18:d4:fe:d5:27:53:66:cc:cf:4f:49:
74:9d:d7:f8:c5:92:48:0b:54:cb:52:72:7f:e6:bf:e7:bd:12:
b6:ce:56:ba:2c:f0:c2:98:e8:f6:9b:ee:c2:dc:c5:09:32:15:
7a:47:27:d9:fb:83:54:ec:f9:27:41:1a:27:f6:1c:39:0b:e2:
3f:15:6c:34:d3:ab:6d:94:50:2c:b6:bd:01:90:31:0e:c7:54:
b8:42:c3:e2:f3:62:8d:20:33:df:8d:97:19:09:63:04:8c:43:
df:99:ec:af:6a:07:70:36:ed:41:4c:bb:c6:75:04:b1:91:ea:
1d:25:6a:0d:09:50:84:8f:06:5b:92:26:07:1a:80:ea:ed:6b:
d0:74:37:d7:75:58:c0:a6:38:71:5d:90:75:fc:8a:8e:3a:7e:
d8:50:31:7e:ec:b6:6b:3e:77:0c:3c:ad:43:9b:f1:e7:1b:b2:
ba:e5:b3:cf:37:80:12:c9:27:d2:c8:17:6d:23:95:96:09:62:
7b:52:a0:e4:dd:9c:bd:cc:9f:68:34:99:36:5e:27:20:4e:f9:
40:14:68:61:61:87:71:c1:b9:6b:ae:a6:93:f5:84:6d:c9:6c:
86:ab:2e:4c:85:da:40:19:a9:8f:a6:d7:f3:c7:b9:9c:d6:72:
d9:22:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:42 2025 by rpki-client