Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ky4IvYt7nopisVOjwVBufStCdX0.roa
File: Ky4IvYt7nopisVOjwVBufStCdX0.roa (raw, json)
Hash identifier: fjBij3ikcbAO5SqkUbVEYvxfxaxIPqwo95+6B/l0+VA=
Subject key identifier: 2B:2E:08:BD:8B:7B:9E:8A:62:B1:53:A3:C1:50:6E:7D:2B:42:75:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0199A4E6A485880E6C42D596D3BAC0C4BC57
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ky4IvYt7nopisVOjwVBufStCdX0.roa
Signing time: Thu 02 Oct 2025 12:30:02 +0000
ROA not before: Thu 02 Oct 2025 12:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 185.220.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:e6:a4:85:88:0e:6c:42:d5:96:d3:ba:c0:c4:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 2 12:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2e08bd8b7b9e8a62b153a3c1506e7d2b42757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:57:d1:90:aa:6a:e7:ef:8c:7c:f6:e7:64:
76:a6:b2:ff:be:ed:c5:c3:21:12:2c:8a:2b:9a:0b:
2e:d1:03:4a:6e:37:fd:53:48:51:5c:66:71:c9:54:
4f:4d:3e:df:0e:a3:68:d8:c8:52:0c:b6:43:fb:99:
b9:af:f4:ac:3d:30:d7:21:83:21:67:e0:61:be:3e:
86:f6:68:57:5d:3f:51:71:54:06:e3:2c:92:fb:12:
7e:ad:52:04:5a:e6:3e:84:45:98:b2:27:5a:1b:7d:
73:bd:b6:9c:b7:b6:26:7d:fb:8e:cd:aa:fa:26:63:
ce:ed:88:25:fc:22:49:b8:c6:14:4f:3e:46:cd:eb:
ee:77:17:0e:7c:e9:08:e8:33:79:fc:62:bd:4d:7a:
68:2a:99:ed:f4:d3:d0:68:6d:c1:0f:75:d1:d3:93:
0f:57:f0:ea:f9:5f:5a:bb:b5:0b:a3:1e:6f:4d:ef:
eb:d0:ba:89:a7:c9:49:68:3c:5b:2f:01:3f:3e:2a:
2a:e4:66:f0:a4:ab:1a:7d:4d:c8:67:25:90:bb:ca:
ab:3e:dd:d9:be:83:5d:bd:7b:4d:08:16:2e:8d:90:
68:09:24:8f:99:bb:d8:06:bc:36:00:1f:95:f5:27:
9a:19:91:ab:47:f8:6c:e1:6f:bd:53:43:b5:bd:91:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:08:BD:8B:7B:9E:8A:62:B1:53:A3:C1:50:6E:7D:2B:42:75:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ky4IvYt7nopisVOjwVBufStCdX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:34:a3:ad:14:4d:37:17:68:56:8a:13:60:a6:ac:db:a0:49:
4c:31:b8:60:97:1f:e2:b9:a5:e5:e5:60:21:fa:0b:b5:1b:62:
17:b4:d3:6c:e3:46:47:69:20:58:cf:cc:db:59:bd:fe:0b:d9:
6c:67:7e:76:3a:f5:f3:d4:a3:e3:0e:2d:dd:ac:0e:6a:15:07:
9e:df:5b:b8:cf:af:19:df:65:2d:b3:f9:c6:1e:5c:a9:88:9f:
08:3a:8d:37:62:e0:0c:a9:65:8b:26:25:e5:ab:69:22:cc:d7:
44:f2:35:18:e0:22:b4:a6:9f:a6:50:66:ab:37:4e:7f:5f:a5:
dd:22:3a:3e:36:fa:e9:5d:7e:ea:2b:ab:41:b6:d1:89:78:08:
a5:1a:5f:13:8d:01:e6:98:da:68:40:d9:2a:9b:0e:f6:69:36:
14:a0:18:75:72:6e:bd:a8:71:9d:dc:03:7b:6e:56:93:9d:92:
99:03:5d:c0:04:7c:2b:e3:96:16:1e:8f:69:3b:d4:21:ff:fb:
07:87:bf:78:c5:25:61:fa:44:92:85:e8:f2:74:29:72:73:51:
54:a3:bc:a8:63:fd:b7:50:b3:fb:72:c6:35:68:77:f7:4a:1c:
0c:0b:88:73:16:6a:28:8a:5a:f2:47:df:7c:04:81:d8:f3:3c:
fb:f4:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:31 2025 by rpki-client