Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Yxw9CgVFv8XNwyz0O8AL1qaw9K8.roa
File: Yxw9CgVFv8XNwyz0O8AL1qaw9K8.roa (raw, json)
Hash identifier: vOqNj6Vd6gLLk/83Q4bEPX8D3jOCAg0ZiF3Yt+kCm00=
Subject key identifier: 63:1C:3D:0A:05:45:BF:C5:CD:C3:2C:F4:3B:C0:0B:D6:A6:B0:F4:AF
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0198A5C800F5138225B5D58CB7F061F3D4B0
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Yxw9CgVFv8XNwyz0O8AL1qaw9K8.roa
Signing time: Wed 13 Aug 2025 23:33:24 +0000
ROA not before: Wed 13 Aug 2025 23:33:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205566
IP address blocks: 89.187.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a5:c8:00:f5:13:82:25:b5:d5:8c:b7:f0:61:f3:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Aug 13 23:33:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=631c3d0a0545bfc5cdc32cf43bc00bd6a6b0f4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:f8:68:c2:9a:5c:d5:61:69:18:2d:b2:65:
12:60:a8:e1:d9:0c:dd:a6:c3:4d:dd:16:0d:e6:69:
f8:44:62:f0:cf:5f:19:9c:67:c3:d8:71:bf:df:38:
a5:7b:53:0a:8f:3a:e1:5d:2a:f6:28:1f:0e:70:ad:
0b:48:cd:7f:e0:db:63:85:f0:97:f7:fb:f1:7d:b8:
7a:f5:db:db:4a:07:78:0a:bb:2a:e5:d7:22:ee:81:
fe:84:6b:e3:23:d5:c1:34:2f:bf:6a:b9:bb:86:25:
85:f3:91:b3:f5:bb:82:ca:a9:76:b7:b1:6d:0c:7c:
83:c6:0e:bc:15:5d:1c:ab:0e:b7:1d:dd:98:26:81:
a4:46:a5:25:a8:59:75:b5:e9:af:99:7a:0e:aa:8e:
19:02:73:7a:fd:84:50:5e:ed:61:42:60:ec:67:42:
b7:2f:f6:20:d3:16:c7:12:d0:7d:09:71:b6:7f:b6:
42:a7:3d:08:20:60:07:af:1f:1e:69:ab:05:59:90:
6e:ae:84:ee:18:75:5e:a5:cc:33:32:ff:58:d6:26:
f1:44:36:3d:28:bd:06:d2:3a:c3:92:7e:bb:24:4f:
e4:90:be:48:6d:89:00:72:b7:3f:00:51:85:a1:2f:
94:4e:4a:62:41:85:d5:6f:cc:37:8d:0f:d5:43:90:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:3D:0A:05:45:BF:C5:CD:C3:2C:F4:3B:C0:0B:D6:A6:B0:F4:AF
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Yxw9CgVFv8XNwyz0O8AL1qaw9K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ec:f9:1f:f8:2c:d3:e8:2b:a3:68:72:25:97:99:e7:40:a0:
26:95:a8:55:48:d7:7d:25:c1:a7:70:2b:ba:f8:a8:95:b1:b3:
49:1a:4b:6c:38:ce:f6:86:05:87:e5:f0:15:13:d5:bd:b7:c5:
33:c2:ac:d3:dd:17:52:ef:4a:73:f1:f8:b0:7e:25:cd:0f:60:
14:df:45:71:1b:03:17:75:d7:59:0b:7e:55:ee:a3:49:ca:3e:
83:b6:5e:f8:b6:06:b9:15:17:dc:70:9f:ac:d0:0e:09:e0:1c:
94:05:2c:bb:ce:07:1f:c3:f9:e7:0a:74:e0:3f:63:f3:f0:3e:
46:b3:e6:7e:b7:bd:61:85:8f:5c:d3:20:84:2b:6e:68:60:9b:
ac:be:6e:cc:56:aa:61:9b:bf:74:28:32:fa:62:61:aa:5d:fc:
ee:30:1b:c2:49:7e:52:86:c2:08:60:c3:6a:a8:eb:77:af:e1:
62:76:7e:cc:d7:24:90:45:3d:04:80:14:e5:99:3e:da:47:95:
25:21:f7:38:4c:f4:af:4d:ce:ff:c3:a6:d6:8a:e3:c7:3b:3d:
59:0c:f9:78:52:b8:13:c9:53:30:69:9e:58:09:c2:a9:8d:82:
aa:24:df:33:54:c0:ff:fd:88:51:4c:86:98:a9:91:af:5e:b8:
c3:ad:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:16 2025 by rpki-client