Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yfbMOE5waGLcQMqiWekkNZe3ekw.roa
File: yfbMOE5waGLcQMqiWekkNZe3ekw.roa (raw, json)
Hash identifier: yh3zo1MEkXJDsHfJDKvTV3MCxn2kWTfZlAU0rOP8JCk=
Subject key identifier: C9:F6:CC:38:4E:70:68:62:DC:40:CA:A2:59:E9:24:35:97:B7:7A:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988D2F060BF2F7D5E7359469B822DDDC18
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yfbMOE5waGLcQMqiWekkNZe3ekw.roa
Signing time: Sat 09 Aug 2025 04:55:25 +0000
ROA not before: Sat 09 Aug 2025 04:55:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 151.244.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:2f:06:0b:f2:f7:d5:e7:35:94:69:b8:22:dd:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 9 04:55:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9f6cc384e706862dc40caa259e9243597b77a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:77:da:e2:f7:6c:52:4d:21:d2:6c:fb:ca:
5b:78:f1:8b:04:35:28:73:f7:82:b1:fa:a7:b5:9e:
da:aa:91:c5:64:9c:d4:47:b8:d1:9c:ce:72:a5:ce:
d4:17:66:20:f4:ed:8b:18:7f:fc:84:a4:05:dc:93:
1e:00:77:8c:87:77:12:7d:35:4b:fb:46:8b:9c:6f:
94:bb:d5:07:41:2a:7b:b0:c1:19:63:b3:88:73:bc:
a0:66:35:e5:24:5a:3b:62:35:47:e4:7b:75:76:f9:
74:c1:03:a1:ad:9b:22:08:e0:8f:07:02:a1:98:97:
be:70:2e:04:be:2b:2e:4a:78:ef:8d:b3:4a:eb:86:
a9:50:05:a0:8c:21:26:82:d5:a6:c6:54:e3:57:06:
5e:a0:a4:46:2c:6d:0b:ae:ef:1c:a6:78:2e:cd:fd:
21:34:88:a6:7a:c1:59:00:a3:44:dd:8b:91:c8:15:
27:95:63:a3:70:d1:37:22:13:7c:7e:fb:b2:e2:d5:
47:ca:be:9d:12:19:71:c2:18:99:67:90:f8:a2:21:
4b:56:7a:fa:fb:e7:79:f7:b6:38:2b:40:73:ca:be:
f4:fa:d3:08:52:cb:08:a7:c0:8b:b3:3b:8e:07:39:
35:6b:5e:b2:60:d1:54:6d:89:e1:2b:0c:f5:1a:09:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:CC:38:4E:70:68:62:DC:40:CA:A2:59:E9:24:35:97:B7:7A:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yfbMOE5waGLcQMqiWekkNZe3ekw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d0:27:60:fc:d7:f1:8e:c5:00:f4:a3:60:e1:d0:2b:9f:fe:
91:51:a8:d7:50:18:94:69:43:b4:21:d0:70:07:09:a7:76:d9:
27:44:80:d5:0e:e3:0e:59:c2:25:0c:8d:99:03:f4:14:72:f8:
79:bb:36:d9:a5:bc:e8:3e:dd:0c:c0:84:b6:7c:51:1e:73:e2:
1e:de:05:f4:4a:92:88:11:de:9e:13:05:24:17:d1:e0:39:a2:
8c:94:50:53:3b:21:f1:94:f3:96:21:ad:3c:0d:0e:d4:96:3c:
aa:cf:f6:fd:c5:0c:2f:ed:66:6c:81:4c:fc:86:81:40:82:09:
bd:f5:c0:cd:70:a2:ab:bd:92:e7:49:11:1a:64:8a:d2:9a:b6:
3e:5f:24:57:34:ae:f6:27:96:e9:c5:ea:f8:21:78:d0:8d:cf:
5f:15:dc:87:a9:84:6f:21:86:7c:9b:fc:36:e5:c1:3a:bc:c6:
dd:d5:fe:da:bc:24:f0:43:33:69:96:a0:f5:d7:bc:a3:2a:83:
c5:ac:d1:d9:b3:2b:b7:f0:17:db:f2:a7:1b:c1:13:ac:5c:d4:
b0:df:1f:8a:10:08:d4:1e:25:2b:4d:9b:8d:bf:88:e9:f7:a2:
77:e7:a6:db:80:ff:8f:3e:ca:53:b0:d9:e2:b4:65:c8:7f:95:
77:5c:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:06 2025 by rpki-client