Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/ylzVDNqLg-U7e19yN1XUnVv4-mM.roa
File: ylzVDNqLg-U7e19yN1XUnVv4-mM.roa (raw, json)
Hash identifier: xAtySOG4/LBLHBr0GZndFnBbQp0zDTEtHkUbGSqzQLM=
Subject key identifier: CA:5C:D5:0C:DA:8B:83:E5:3B:7B:5F:72:37:55:D4:9D:5B:F8:FA:63
Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial: 0199197682CA7D232FC38FFF743CD4EAABF1
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/ylzVDNqLg-U7e19yN1XUnVv4-mM.roa
Signing time: Fri 05 Sep 2025 10:40:21 +0000
ROA not before: Fri 05 Sep 2025 10:40:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 167.94.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:76:82:ca:7d:23:2f:c3:8f:ff:74:3c:d4:ea:ab:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Validity
Not Before: Sep 5 10:40:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca5cd50cda8b83e53b7b5f723755d49d5bf8fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:d4:60:d0:0c:10:f0:ba:a5:73:5f:3d:6b:
92:6e:a2:fb:34:af:e4:dc:fd:9e:dd:e8:7f:ed:23:
45:ab:2a:7d:0c:11:1b:2f:d0:03:10:64:1f:ee:ab:
9e:1d:4c:3a:72:de:0a:b6:79:0d:9c:0d:a6:1f:4a:
38:cf:3d:11:7a:96:6f:55:20:7d:95:7d:9f:83:11:
1c:62:a6:fe:a7:62:45:8b:a6:39:a9:d1:1e:77:5f:
92:a7:fb:9c:83:19:98:08:17:59:fd:73:a7:43:4a:
5c:ca:62:e9:2d:9c:73:93:ba:56:a1:f4:59:b7:71:
fa:2d:60:4c:29:0e:04:83:82:18:51:b9:f0:56:19:
02:db:5d:aa:1a:26:b2:60:33:fe:63:d2:c2:e5:0f:
5e:15:87:67:19:ab:f8:55:71:ae:0b:26:d8:e7:0e:
e5:cb:ae:82:72:18:ac:6a:af:62:d5:19:2e:30:c6:
6f:9c:de:05:bb:7f:05:8e:21:86:1f:46:d4:19:30:
cb:78:de:f3:b8:d5:6f:19:e1:08:39:a9:33:91:b8:
d8:70:40:e4:1b:c2:2c:59:66:e1:5b:e1:30:2e:9b:
ff:7e:73:35:09:4f:c9:3e:ba:33:08:83:8c:47:fe:
76:f7:8b:52:26:85:95:9d:19:1f:61:6f:40:d2:77:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:D5:0C:DA:8B:83:E5:3B:7B:5F:72:37:55:D4:9D:5B:F8:FA:63
X509v3 Authority Key Identifier:
keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/ylzVDNqLg-U7e19yN1XUnVv4-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.246.0/24
Signature Algorithm: sha256WithRSAEncryption
00:68:dc:ce:f2:60:c2:44:67:67:70:0d:97:fc:02:76:03:cd:
1b:42:87:92:27:11:4b:44:70:b7:76:bc:92:0e:c7:9e:00:50:
5d:a3:a6:8b:fc:c7:20:d2:83:b3:26:3f:52:29:32:c0:c7:64:
cb:40:dd:cb:63:90:12:9f:ec:6b:3e:f6:98:f1:bd:75:10:99:
e7:03:bd:be:af:ec:72:1c:1c:61:ed:50:4d:3d:e8:78:f4:b3:
94:a4:9d:00:b3:89:0f:ad:52:d9:05:5a:b8:9c:9a:77:b4:ec:
b5:67:53:17:b4:99:71:c4:d6:f5:3e:f4:00:d4:98:e7:2f:bf:
33:64:38:5b:56:f6:e2:67:66:b4:46:87:f1:6a:01:57:52:cf:
9b:61:7f:b4:91:a2:61:39:82:5f:40:1b:fe:0f:82:47:ee:af:
67:79:57:50:c5:a5:a1:6f:2d:07:b9:24:e5:2b:cb:f7:2e:da:
c8:fe:61:07:c4:91:9e:d5:10:df:54:60:f3:cd:bf:b9:94:fa:
04:d7:2b:c1:92:d1:7b:7b:ef:f4:c3:90:11:c7:a0:7f:25:ef:
6e:d3:2b:a1:27:f2:21:99:16:9c:69:6b:cc:39:a8:fb:2a:f9:
b7:b5:ca:1e:1a:e6:34:41:de:3d:42:4a:2e:f3:20:64:c5:c5:
1c:32:51:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkZdoLKfSMvw4//dDzU6qvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmQ4M2I3ODMwOGQwOWU2NWQyMTUwZWFjMTYyM2RlZTk2
ZDRjNGIwHhcNMjUwOTA1MTA0MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTVjZDUwY2RhOGI4M2U1M2I3YjVmNzIzNzU1ZDQ5ZDViZjhmYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLXUYNAMEPC6pXNfPWuSbqL7NK/k
3P2e3eh/7SNFqyp9DBEbL9ADEGQf7queHUw6ct4KtnkNnA2mH0o4zz0RepZvVSB9
lX2fgxEcYqb+p2JFi6Y5qdEed1+Sp/ucgxmYCBdZ/XOnQ0pcymLpLZxzk7pWofRZ
t3H6LWBMKQ4Eg4IYUbnwVhkC212qGiayYDP+Y9LC5Q9eFYdnGav4VXGuCybY5w7l
y66Cchisaq9i1RkuMMZvnN4Fu38FjiGGH0bUGTDLeN7zuNVvGeEIOakzkbjYcEDk
G8IsWWbhW+EwLpv/fnM1CU/JProzCIOMR/5294tSJoWVnRkfYW9A0neQWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpc1Qzai4PlO3tfcjdV1J1b+PpjMB8GA1UdIwQY
MBaAFOItg7eDCNCeZdIVDqwWI97pbUxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQt
NjAzYjI5ZmQxYTA4LzEveWx6VkROcUxnLVU3ZTE5eU4xWFVuVnY0LW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xOGZjMTQtMDg3Ny00ZmE4LWE0YTQtNjAzYjI5ZmQxYTA4
LzEvNGkyRHQ0TUkwSjVsMGhVT3JCWWozdWx0VEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp172MA0G
CSqGSIb3DQEBCwUAA4IBAQAAaNzO8mDCRGdncA2X/AJ2A80bQoeSJxFLRHC3dryS
DseeAFBdo6aL/Mcg0oOzJj9SKTLAx2TLQN3LY5ASn+xrPvaY8b11EJnnA72+r+xy
HBxh7VBNPeh49LOUpJ0As4kPrVLZBVq4nJp3tOy1Z1MXtJlxxNb1PvQA1JjnL78z
ZDhbVvbiZ2a0RofxagFXUs+bYX+0kaJhOYJfQBv+D4JH7q9neVdQxaWhby0HuSTl
K8v3LtrI/mEHxJGe1RDfVGDzzb+5lPoE1yvBktF7e+/0w5ARx6B/Je9u0yuhJ/Ih
mRacaWvMOaj7Kvm3tcoeGuY0Qd49Qkou8yBkxcUcMlGh
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:52 2025 by rpki-client