Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yovHEk4MCHBICdJuNjwrUiUUEdU.roa
File: yovHEk4MCHBICdJuNjwrUiUUEdU.roa (raw, json)
Hash identifier: tz5eQ1SCmrb2HGOXNXrueYcHiXH/+vqaOpIdOvKxSrk=
Subject key identifier: CA:8B:C7:12:4E:0C:08:70:48:09:D2:6E:36:3C:2B:52:25:14:11:D5
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01997360BCCB433CC83B8B30C099AFCC018B
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yovHEk4MCHBICdJuNjwrUiUUEdU.roa
Signing time: Mon 22 Sep 2025 21:42:23 +0000
ROA not before: Mon 22 Sep 2025 21:42:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 91.193.253.0/24 maxlen: 24
93.89.211.0/24 maxlen: 24
93.89.216.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:73:60:bc:cb:43:3c:c8:3b:8b:30:c0:99:af:cc:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 22 21:42:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8bc7124e0c08704809d26e363c2b52251411d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:d0:bf:d3:77:6b:22:f1:56:e4:9d:18:a4:
c4:c1:fe:a7:c2:50:fd:66:6b:35:76:66:ce:75:89:
e2:cb:10:df:47:70:24:81:ed:0e:70:78:d4:cc:67:
22:b3:57:07:7c:54:bc:c7:4e:ec:ca:b8:5c:aa:9c:
ed:17:44:27:f2:2c:c1:2b:13:9b:43:81:93:20:9b:
86:1e:75:d2:87:71:6e:7d:d0:80:68:4a:31:08:5e:
87:cd:5d:69:e1:26:9c:76:7a:f6:9d:cb:39:32:46:
48:f5:9a:cf:02:28:01:4c:4f:79:7a:9b:b5:c4:e3:
9f:a9:37:f4:56:69:95:63:b2:97:fc:27:c1:8e:f3:
6f:d7:ba:19:8f:da:d2:e0:36:bd:72:af:46:52:7a:
12:5c:a6:bc:7e:dc:c9:a1:98:d2:2c:1c:b7:cb:8a:
e3:c5:d9:19:b6:5a:78:5e:e0:cd:b6:97:a3:b4:4e:
40:a0:97:d4:11:27:28:77:bf:be:36:80:6e:e7:7b:
96:f0:ed:0a:28:24:b8:b7:c9:81:9e:9b:f3:79:02:
a5:b1:6a:3b:75:c1:2b:c6:e8:73:a2:47:fd:df:d3:
a8:50:a2:88:23:2b:a2:f2:35:35:b9:89:72:05:ef:
8a:f1:35:1d:44:8a:a0:59:9a:b2:cd:92:9d:63:19:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:C7:12:4E:0C:08:70:48:09:D2:6E:36:3C:2B:52:25:14:11:D5
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yovHEk4MCHBICdJuNjwrUiUUEdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
93.89.211.0/24
93.89.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:a1:00:c0:57:99:00:77:33:9a:0c:16:ad:93:f3:66:07:6b:
8d:d8:41:4d:43:d8:d4:1d:63:a8:2f:ec:99:93:fa:6c:1c:d4:
52:42:7e:ee:84:ba:bb:7d:0c:09:c3:fa:90:d1:91:8e:e8:20:
b6:e7:be:b9:22:52:49:f0:38:55:e0:5b:73:03:44:6d:51:e6:
33:71:d0:2f:65:7b:10:0a:6e:b5:e0:2a:e5:fa:66:c3:aa:b1:
e9:91:99:0a:98:8e:3b:41:a0:48:ae:65:3f:56:18:a3:7c:1d:
c4:31:ea:42:fe:d4:9e:26:0e:57:99:36:44:6c:92:35:97:84:
57:55:b4:ea:a4:49:7c:f4:68:22:63:1b:9b:b2:5c:75:e2:a0:
f0:0a:73:60:85:ea:06:18:3d:cc:d4:cd:6a:75:c3:9e:c4:73:
47:7e:f4:94:da:23:65:75:9c:c0:8a:ba:a5:9f:33:e0:d4:10:
cc:7a:ba:b3:e5:e6:5f:99:ef:ff:6b:ee:a5:af:57:97:36:b8:
d4:e7:b0:5a:3f:c5:84:f2:47:ec:da:92:f6:10:30:bf:ce:bc:
d6:1f:1f:4a:45:dc:b1:a0:e9:2b:14:cb:cb:23:d1:77:04:ae:
4a:2e:38:e6:a9:72:57:9c:e4:09:43:d2:85:d5:9b:08:8c:08:
42:da:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:19 2025 by rpki-client