Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y7_kgT9uE1bWgX8LO4SnJ34HA3Y.roa
File: y7_kgT9uE1bWgX8LO4SnJ34HA3Y.roa (raw, json)
Hash identifier: o34J9keWRgLOnGkcWIYMq+OSnUyaPVgwOOcNmEtUwP4=
Subject key identifier: CB:BF:E4:81:3F:6E:13:56:D6:81:7F:0B:3B:84:A7:27:7E:07:03:76
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0199F30ADBABA73A6E191D88A971C0A768ED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y7_kgT9uE1bWgX8LO4SnJ34HA3Y.roa
Signing time: Fri 17 Oct 2025 16:39:59 +0000
ROA not before: Fri 17 Oct 2025 16:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 150.241.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:0a:db:ab:a7:3a:6e:19:1d:88:a9:71:c0:a7:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 17 16:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbfe4813f6e1356d6817f0b3b84a7277e070376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:2c:2c:1c:58:56:25:8b:12:10:4b:58:33:
57:ac:02:61:5a:47:f3:83:52:41:f7:e6:24:80:2d:
6d:15:fd:07:e8:7d:2a:3c:a8:ac:a8:bc:d4:e2:e4:
09:eb:ac:fe:49:0c:73:2f:bb:27:67:69:8d:99:ba:
8f:ec:e9:de:65:73:c9:a0:7d:e6:c5:0b:07:9e:29:
13:64:01:e3:f7:5c:1e:17:88:5e:dd:0d:6e:22:c3:
50:e5:8b:6b:92:0b:6c:00:c6:a9:17:fe:19:56:2f:
71:13:90:93:7c:b4:e7:0d:80:e3:e5:e5:57:da:78:
d2:6b:e9:c3:2f:af:cf:9b:89:14:07:37:e3:42:34:
53:6f:95:f1:43:3e:86:dd:fe:57:df:d3:f5:6a:e2:
0e:89:88:e5:06:d5:21:a4:e1:d7:8b:2e:3e:35:29:
99:e6:7f:fb:90:40:7d:3b:e2:c3:fd:52:c8:40:78:
72:e6:63:d4:70:28:cf:fd:16:6f:d9:54:9b:16:de:
32:43:9a:26:5d:37:dc:9f:e9:19:bc:17:4d:28:b6:
26:ab:0f:68:3a:cd:5c:1c:29:1e:04:2e:ff:4d:70:
41:a6:19:21:5d:13:41:e3:c7:93:2c:f3:48:5a:63:
fd:e2:a0:34:e7:e4:43:43:f2:66:fa:e6:91:f4:75:
40:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:E4:81:3F:6E:13:56:D6:81:7F:0B:3B:84:A7:27:7E:07:03:76
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/y7_kgT9uE1bWgX8LO4SnJ34HA3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.121.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d2:ab:83:d1:4f:09:d0:48:c3:e4:f3:ab:00:53:ea:35:7b:
43:3b:ab:22:2f:4b:79:92:ea:d2:1d:a5:95:c1:91:01:8c:f2:
9b:aa:ff:33:8b:1f:a5:21:8d:2c:66:d7:ea:d9:3c:64:56:0f:
74:b5:51:a1:fa:da:69:6c:bd:38:7b:c6:8a:9b:aa:a3:c8:65:
55:1f:02:e3:f3:56:b3:dd:86:63:4a:eb:57:bd:f6:fc:1f:56:
fb:0c:14:a5:ba:8f:0b:48:58:cb:4f:5f:64:7c:c6:ce:e0:a7:
22:c0:c8:cf:bb:ae:fa:ff:3a:c1:f2:35:36:24:3e:53:16:88:
61:59:73:79:d5:fc:ee:82:2a:1b:1d:e3:8b:72:0c:31:92:b7:
8f:17:d3:76:d3:72:b4:b5:1c:cd:e4:22:f4:94:f9:e9:da:a1:
97:51:41:b7:be:12:86:3f:84:c0:89:f9:05:0e:25:64:9c:1c:
56:a0:08:59:04:b4:39:86:e8:44:3f:73:41:3c:54:03:08:0b:
9f:70:31:02:0c:c4:a7:e4:46:f5:ae:ca:d7:cb:79:54:35:93:
b2:da:46:99:3c:2e:da:a2:11:c5:c8:1a:82:c3:22:e4:50:5a:
f3:56:a6:a7:47:19:58:3a:6b:2c:e2:fe:89:e3:1e:28:a9:c8:
5d:56:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:43 2025 by rpki-client