Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/y5t9VCG86iK6aUs1XnSlJL9WwkU.roa
File: y5t9VCG86iK6aUs1XnSlJL9WwkU.roa (raw, json)
Hash identifier: AeobAv5BcqpSnLadsMWLSvPDtqBRihCI6v5wMAmYfok=
Subject key identifier: CB:9B:7D:54:21:BC:EA:22:BA:69:4B:35:5E:74:A5:24:BF:56:C2:45
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 019928A5D1BFAF4DD6A67A01AD87DB0AC341
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/y5t9VCG86iK6aUs1XnSlJL9WwkU.roa
Signing time: Mon 08 Sep 2025 09:26:19 +0000
ROA not before: Mon 08 Sep 2025 09:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 195.190.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:a5:d1:bf:af:4d:d6:a6:7a:01:ad:87:db:0a:c3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 8 09:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9b7d5421bcea22ba694b355e74a524bf56c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:16:15:09:69:d3:64:2b:ee:e6:39:1a:40:d8:
bc:35:d7:b3:3a:18:80:dc:76:92:43:cd:ab:b2:b2:
65:96:5b:2c:e8:d3:63:f8:11:96:4a:80:59:ed:d2:
c1:1a:e5:3a:76:25:07:19:59:e5:f3:60:96:aa:a7:
d7:8b:44:72:1b:00:d3:e1:36:ea:ba:6c:b0:c8:f0:
4a:77:98:16:90:cd:87:79:21:52:1c:2a:b8:b2:d4:
a9:24:7c:4d:86:62:26:15:ed:83:9d:52:76:c3:ac:
7f:8d:56:72:f5:a7:df:da:9b:9b:a7:e8:08:e9:84:
67:e7:fc:49:70:4e:5c:f2:ce:f3:48:dc:21:ed:6e:
b7:62:b3:e6:ba:9e:66:58:a2:26:b2:39:75:bd:a7:
6d:be:c0:58:33:08:6e:bb:96:2d:df:6b:2d:d6:d0:
66:22:65:d7:c8:5b:07:a3:6c:0e:72:87:78:c4:46:
80:4c:0d:eb:47:18:07:52:f2:26:1a:16:7d:e2:b2:
02:3d:fa:fe:1a:72:6a:4b:38:c0:85:8e:a4:2e:9d:
52:02:ee:1c:26:90:bb:9e:0e:30:64:cb:d5:f5:3c:
44:fc:ff:72:24:33:2c:2d:dd:17:0f:63:4a:1f:73:
34:5d:ef:ef:82:f6:41:2b:f1:b0:ee:a0:22:d5:6c:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:7D:54:21:BC:EA:22:BA:69:4B:35:5E:74:A5:24:BF:56:C2:45
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/y5t9VCG86iK6aUs1XnSlJL9WwkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2a:16:70:dc:8d:0c:43:2a:f0:a9:8d:65:0f:d4:c6:55:4c:
17:c8:9b:f2:e7:e2:1d:72:ce:04:20:3a:f7:a1:7f:b6:85:eb:
b3:81:42:f0:2a:98:20:f6:97:39:69:91:ed:cd:0f:e5:ea:00:
8c:9d:9d:df:c5:42:b5:a9:2c:28:18:4d:ef:3f:3b:c7:1f:d8:
a6:b7:d0:1c:91:ff:e3:17:29:aa:19:89:ad:62:eb:c4:68:1b:
fb:10:6d:c1:c5:4b:e8:b3:75:bb:8b:c0:98:60:8b:c4:a0:02:
30:e3:69:32:95:65:be:63:f9:48:a0:e7:58:04:b3:f0:0e:19:
dc:15:d0:73:9e:62:10:1d:cf:a7:1e:8b:23:26:10:3c:1a:42:
49:fa:22:f4:e1:65:e9:bf:ab:54:4f:c9:f6:67:ea:84:3c:21:
b1:98:72:1e:79:1e:16:ac:c2:2a:dd:b2:38:bd:be:1b:87:9d:
ca:c1:84:53:1c:fd:66:b1:4c:d0:b2:d2:34:43:de:7e:6e:63:
97:ea:75:29:5b:d3:40:1d:28:8f:a1:e3:9d:30:b1:23:90:0c:
4d:f9:5d:5d:f0:73:b8:97:5b:cd:d2:f9:3c:8f:7a:e7:a6:5d:
97:f0:f4:28:5f:75:ab:83:19:f9:b1:0c:de:11:ff:7b:b2:d1:
72:95:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:25 2025 by rpki-client