Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/yPv21KR4O8eNyOEbMiFjKgHXJPE.roa
File: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (raw, json)
Hash identifier: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=
Subject key identifier: C8:FB:F6:D4:A4:78:3B:C7:8D:C8:E1:1B:32:21:63:2A:01:D7:24:F1
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01977863D58262FB8FD50E2850A9EA085B5E
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/yPv21KR4O8eNyOEbMiFjKgHXJPE.roa
Signing time: Mon 16 Jun 2025 10:58:17 +0000
ROA not before: Mon 16 Jun 2025 10:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34177
IP address blocks: 91.198.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:63:d5:82:62:fb:8f:d5:0e:28:50:a9:ea:08:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jun 16 10:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8fbf6d4a4783bc78dc8e11b3221632a01d724f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:18:53:c3:2c:cc:67:f8:5e:d4:8f:bd:d1:
83:8e:6e:36:3d:14:71:ed:e3:06:96:61:f8:20:c4:
27:2a:04:9b:4f:19:5a:0b:83:9c:18:37:44:b8:34:
ad:10:f6:a5:69:dc:8c:fb:42:e2:7a:d1:f0:ed:c8:
89:c7:8b:4f:3d:00:c9:a9:28:de:35:a6:8d:60:be:
e1:51:6b:91:52:66:ac:56:7d:4d:b0:3f:0d:3e:8d:
e9:4d:f7:1c:9f:78:f7:9f:e2:b5:1a:40:5c:c9:4e:
5e:0f:99:96:0e:54:6a:b7:91:62:e9:96:e7:4c:cc:
9a:f1:26:79:a4:80:31:d7:97:3d:18:73:fe:2f:cb:
ac:62:19:a0:e5:73:77:be:b1:27:08:bb:e8:ef:05:
c2:1f:dc:06:7b:ec:43:54:d4:cd:83:6e:c0:5d:55:
33:e3:84:63:6d:0f:01:9a:14:53:98:f9:0b:8b:3c:
08:80:a4:98:8c:6c:92:db:87:36:d4:31:6e:15:8b:
b1:dc:5e:cb:fa:12:02:34:f9:52:a3:f6:e1:ab:9b:
ff:0a:8c:31:5f:a7:76:11:57:06:ff:ca:7b:ab:f2:
7d:52:60:9b:c0:59:2f:31:99:33:3e:44:90:5e:20:
f0:ed:fb:95:63:65:af:f8:a8:69:b7:37:da:70:f5:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:F6:D4:A4:78:3B:C7:8D:C8:E1:1B:32:21:63:2A:01:D7:24:F1
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/yPv21KR4O8eNyOEbMiFjKgHXJPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.105.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e8:11:40:5a:3d:15:73:a5:3a:2a:e9:8d:f7:4f:a7:ac:6f:
76:3d:5c:a4:e5:4a:99:ed:0b:74:68:b6:5f:42:ec:53:46:7d:
10:00:c1:0e:c5:47:70:ea:60:d0:00:cb:3f:26:8e:43:c3:97:
bf:f7:c9:73:10:58:cc:52:09:97:03:cf:c7:d1:2b:e7:8a:7e:
1a:29:8a:ce:0c:aa:a9:56:10:26:ee:d4:f8:f9:ea:2d:6f:af:
42:7e:da:1d:8e:1c:19:94:b1:0b:64:01:a9:6c:1a:85:47:6c:
27:3c:6b:55:26:2c:45:04:b8:22:8f:fc:f7:e0:e9:a5:74:b3:
11:bb:58:03:b6:0d:bd:90:7c:06:f5:47:a6:85:ab:10:bb:ca:
50:1b:95:02:63:72:43:23:99:24:91:f4:d2:5d:d0:0f:a5:92:
18:2f:8e:1d:9d:94:45:1e:60:cb:9c:0d:1e:cd:e1:d1:31:76:
25:9f:29:57:9e:56:8c:70:75:34:c1:13:e1:24:55:e3:d3:d7:
aa:9b:7a:0b:82:f1:29:79:a7:4b:92:87:e2:e2:12:bd:90:a2:
5a:a3:56:9a:21:9d:ee:00:a1:6e:d5:f8:ad:f4:81:e9:a4:2c:
68:03:18:59:f1:7e:17:eb:a2:84:47:4e:30:16:1b:3a:9d:2a:
15:1a:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:37:46 2025 by rpki-client