Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/10YxumJfCgMbEFFhgimNAitIXbo.roa
File: 10YxumJfCgMbEFFhgimNAitIXbo.roa (raw, json)
Hash identifier: v3bYOpwG4V7mwXqa0+rkwNDr8sO1z2gnt3eo4dKc+lg=
Subject key identifier: D7:46:31:BA:62:5F:0A:03:1B:10:51:61:82:29:8D:02:2B:48:5D:BA
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01998A143076D188F957E929327932B14649
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/10YxumJfCgMbEFFhgimNAitIXbo.roa
Signing time: Sat 27 Sep 2025 07:30:02 +0000
ROA not before: Sat 27 Sep 2025 07:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.206.80.0/24 maxlen: 24
82.206.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8a:14:30:76:d1:88:f9:57:e9:29:32:79:32:b1:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 27 07:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d74631ba625f0a031b10516182298d022b485dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:cb:6b:ec:58:2c:3b:17:1f:62:97:3c:2f:
94:5b:f3:72:42:cc:c2:79:22:61:24:3e:10:57:0a:
e0:09:39:b3:58:2e:0a:a5:c2:55:62:64:e6:39:1a:
f0:9f:6a:5f:d9:1d:ff:f7:e6:11:b3:5a:19:5e:22:
01:c6:ce:a7:ea:68:ab:0d:d6:77:67:33:2a:d3:09:
bc:69:e5:b1:47:54:9c:49:98:12:61:58:49:d6:a4:
51:71:e7:b6:73:82:58:09:08:ec:23:01:8b:b3:cf:
50:b5:32:ed:66:f5:41:4c:1a:e7:60:5b:16:85:df:
e4:41:80:41:dd:6e:88:3b:b0:a9:ea:b9:63:f1:8e:
b2:ca:b1:88:d9:f1:f0:d1:1f:22:49:cc:04:f3:7c:
2a:78:fa:93:db:99:48:7c:52:ed:7f:7c:9e:dc:80:
30:83:ed:f1:b5:75:40:33:37:5b:fb:18:58:9e:6d:
4c:85:46:f0:78:7e:37:b3:de:19:43:3d:15:ea:c3:
59:c3:19:84:a5:29:c8:e0:cd:72:74:8d:b8:5a:60:
61:ea:4e:ad:52:5f:21:55:b6:e2:d0:5c:48:bf:b9:
b2:95:fa:49:5a:33:b8:83:d1:c8:0c:af:98:e2:ff:
0b:6c:41:03:78:26:8c:8a:76:26:17:a0:26:0f:83:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:31:BA:62:5F:0A:03:1B:10:51:61:82:29:8D:02:2B:48:5D:BA
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/10YxumJfCgMbEFFhgimNAitIXbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0/24
82.206.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:8a:f9:f5:07:3a:ee:c1:3a:ba:b7:52:e8:f8:4a:b1:9f:
b9:6a:00:2e:19:dc:81:73:fc:27:d2:9c:c2:98:a8:90:72:e5:
b4:70:6d:45:30:80:c9:83:7e:29:99:da:55:13:9e:02:3f:4a:
1b:cc:99:60:59:aa:e5:53:7a:04:c5:9f:2f:3b:2f:09:31:47:
4c:37:0a:e8:90:af:49:fa:e6:9b:a1:c2:79:15:d5:57:04:86:
50:fe:c3:54:bb:85:03:e1:88:d6:92:7b:f6:2b:85:25:c8:83:
70:8e:ee:8c:b8:45:5d:b8:1c:51:86:e5:a3:19:85:65:17:4e:
ed:41:48:ae:98:ea:dc:f5:e7:76:60:78:c8:01:24:3d:6b:5f:
65:71:d1:cd:0c:d0:cb:27:a4:e0:e8:34:16:09:4d:42:9b:38:
1e:d4:63:ba:2e:75:b2:89:a8:67:2e:eb:f7:b4:4f:7a:c4:88:
bb:b1:f2:5c:a1:83:26:86:95:b9:21:55:7e:e5:18:24:66:2f:
01:f7:4d:89:a2:ca:1d:da:7b:e2:e8:65:6d:72:33:0a:09:e1:
99:a9:0f:05:bc:5c:68:d9:6b:07:8a:1a:50:99:99:48:7b:67:
87:14:14:eb:58:f5:ec:8a:f5:ca:dd:38:35:b4:50:aa:1f:af:
3c:15:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:42 2025 by rpki-client