Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa
File: yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa (raw, json)
Hash identifier: dMxwivy3WoBvzsdqovQyIDGqZ1EWhn2L/4sgtoX9AUQ=
Subject key identifier: C9:73:00:CF:6D:5D:15:6E:92:7F:51:C0:6F:92:83:4E:7D:98:CB:48
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0199947B745870F4FCA340C17CA9B4B75491
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa
Signing time: Mon 29 Sep 2025 07:59:02 +0000
ROA not before: Mon 29 Sep 2025 07:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 185.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:7b:74:58:70:f4:fc:a3:40:c1:7c:a9:b4:b7:54:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Sep 29 07:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97300cf6d5d156e927f51c06f92834e7d98cb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:1d:68:cf:d2:33:2f:b7:be:c1:74:1e:f2:
cc:a8:a2:d8:b6:bf:76:37:8a:5d:2f:c1:56:e1:f9:
a5:15:75:61:e9:99:df:da:92:75:28:05:cf:16:ca:
aa:4c:60:87:9c:46:c1:63:1b:1a:04:bd:52:e2:5b:
20:ff:0e:c4:1b:fb:64:9b:f0:2e:be:60:b2:e0:fd:
a1:ec:4c:74:23:6e:6b:4b:18:d1:7d:bc:ca:57:a9:
52:1c:ab:b4:4b:0f:94:b0:25:e5:53:64:64:ea:5d:
a6:53:46:55:4e:6f:0f:af:90:b2:d4:2d:60:96:13:
24:68:82:ff:38:9a:ce:66:6e:7a:b7:6c:52:12:34:
5a:0a:3e:b1:8d:6b:0a:7c:d5:ea:8a:b2:f9:45:94:
b3:25:12:07:83:7d:cd:60:c0:84:01:b4:02:02:b5:
7d:0b:d1:47:8b:1c:26:d3:0f:44:96:da:2e:4e:0d:
96:e8:13:fd:39:13:fa:30:68:38:c5:4e:07:1e:36:
73:40:59:f0:8c:15:91:5c:19:fa:a7:7d:ab:bf:c8:
8c:28:3a:98:80:80:6b:b3:6d:28:03:71:f2:1c:8a:
72:2c:2c:97:df:b4:a9:a0:9b:42:9b:10:10:da:27:
8d:1e:18:3a:de:a8:ba:32:49:d4:ef:2b:53:eb:83:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:00:CF:6D:5D:15:6E:92:7F:51:C0:6F:92:83:4E:7D:98:CB:48
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/yXMAz21dFW6Sf1HAb5KDTn2Yy0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.83.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b4:44:55:9b:2e:f6:73:6a:94:a5:42:55:63:c7:cb:9b:5a:
f0:2d:2d:39:ae:da:b9:80:bc:7a:f6:27:b3:78:34:90:1e:56:
4d:b5:0e:ab:85:85:a3:d4:8f:90:6d:71:ef:b3:40:db:c3:85:
96:ec:52:50:9f:c8:7a:64:80:d6:96:73:7c:b6:6f:66:36:02:
1f:fb:e2:82:ac:85:06:ab:ad:ff:73:1e:60:07:d6:e7:5b:f4:
56:6a:cc:d7:eb:c1:02:e7:00:a1:ec:64:71:9b:14:0e:17:3f:
9c:03:2c:51:cb:a5:cd:d5:f5:bc:d3:29:51:6b:12:b8:ae:14:
bb:48:b3:17:2f:55:7b:df:9a:c5:c7:be:fb:de:58:7b:a8:50:
a5:88:25:bb:53:ea:1d:f4:5a:4d:82:85:65:4c:d9:0c:b7:68:
bb:4f:d4:9a:eb:d0:75:a3:77:d3:f2:c2:ed:1e:c1:2d:34:ac:
b5:6e:9d:93:c2:9b:39:b9:c9:01:f9:12:04:a2:4d:6c:36:84:
17:b9:2e:81:ce:73:ef:0b:e3:72:6a:ec:7e:7d:27:2e:70:d1:
4d:27:be:b4:69:68:1c:1d:6f:b7:4f:94:df:06:8e:d0:f6:69:
ed:86:9a:5c:d5:2a:22:86:16:d7:1b:50:8a:f7:23:7c:cd:f5:
63:d0:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:35 2025 by rpki-client