Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa
File: YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa (raw, json)
Hash identifier: CmWcScHRFVyy1qyRSWQw5TEdbfc8FAZaUDEtIb/hOWQ=
Subject key identifier: 62:53:3D:5E:37:1D:30:7B:D8:3B:13:BC:73:90:89:DD:D1:11:6B:D5
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 01998D45C0494A2ECE2AA919652CA157C382
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa
Signing time: Sat 27 Sep 2025 22:23:02 +0000
ROA not before: Sat 27 Sep 2025 22:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213301
IP address blocks: 46.245.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8d:45:c0:49:4a:2e:ce:2a:a9:19:65:2c:a1:57:c3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Sep 27 22:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62533d5e371d307bd83b13bc739089ddd1116bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:b2:9a:cd:87:25:b3:88:0b:21:20:60:af:
5f:da:4f:c1:fe:ea:ad:b1:45:33:c5:c4:22:f7:fa:
c5:24:54:16:56:a6:94:ea:bb:b9:c1:35:18:02:b9:
69:f2:f0:ef:1a:ff:e5:b5:cb:65:89:4d:e4:a1:44:
ab:f2:58:a6:88:5f:de:48:47:e1:4a:d9:e9:ea:31:
6b:d0:7c:4b:2b:c4:d0:1e:3d:b5:8a:31:14:a5:3a:
38:18:45:00:00:d9:8e:7b:69:a6:95:35:26:7c:bd:
76:6a:89:ba:b5:51:8e:a2:c8:43:35:30:4b:32:f0:
64:a2:3a:ac:f5:2c:3a:fe:18:5a:0e:c6:8a:ad:02:
67:dd:1a:a6:31:6b:ef:c9:16:51:1f:76:ac:ba:7f:
8a:07:3e:3e:0c:ff:7b:a7:2c:b9:c1:22:fe:b7:09:
5c:7b:57:21:14:41:9a:de:bf:01:0d:33:8b:44:97:
82:f5:74:bb:ef:d4:ca:93:da:6f:d0:95:6a:bd:a9:
d4:61:9f:33:ea:59:a1:2d:6e:f4:37:77:ef:68:6f:
f4:10:08:5a:c8:66:cf:2e:e6:61:40:a9:89:c9:56:
55:c6:f9:c4:28:22:8e:4c:5e:00:a9:77:45:6f:88:
6e:ec:95:df:0f:20:30:b4:ee:0a:56:69:5e:95:b2:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:3D:5E:37:1D:30:7B:D8:3B:13:BC:73:90:89:DD:D1:11:6B:D5
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/YlM9XjcdMHvYOxO8c5CJ3dERa9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7a:80:57:e6:30:13:a6:28:c5:47:03:52:37:2f:13:b2:66:
d9:5d:f8:69:55:78:89:71:de:72:8f:52:36:a5:91:63:40:38:
ea:c2:69:0a:f0:c9:04:5a:ca:ed:a7:55:ee:2a:99:f2:b4:3b:
40:f0:5a:ce:4a:aa:90:e6:22:85:9d:7f:de:6e:37:22:41:f9:
4b:5b:7a:2a:31:01:a2:64:f8:da:20:ea:a7:1e:a7:8d:79:13:
08:1e:52:fc:5e:02:a1:f4:11:19:87:18:5a:e0:87:0b:87:b2:
39:fa:cb:99:92:46:41:4f:3c:09:fc:e0:90:54:8f:f0:89:09:
b5:14:6f:c5:9b:bc:65:69:e0:73:cb:ee:cb:4b:5c:b7:3f:59:
52:04:4f:ca:a2:2a:b5:d2:86:9f:72:96:90:91:0e:bf:eb:89:
c4:4a:3d:57:db:59:3e:ec:bd:b4:f8:07:f8:5c:f2:f8:5d:bc:
8c:41:9f:da:3e:7e:62:41:27:2e:6b:22:0e:35:ff:00:19:4d:
f1:15:a5:0e:31:c7:a0:f5:fc:c6:27:af:95:3e:e7:d8:a5:9c:
ea:3d:99:f8:51:ae:ec:f3:79:74:41:75:e0:7f:ae:77:12:08:
25:3c:93:af:5b:45:4c:7f:d0:2b:bd:0c:a4:70:a0:c2:4e:19:
d5:9f:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:56 2025 by rpki-client