Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YGvAmYR1OZcMrjYx-1SSZrqRe0I.roa
File: YGvAmYR1OZcMrjYx-1SSZrqRe0I.roa (raw, json)
Hash identifier: vCgNWuf2NCKoXeafjPp393+YkAJc9kNmcw3ORVHXUws=
Subject key identifier: 60:6B:C0:99:84:75:39:97:0C:AE:36:31:FB:54:92:66:BA:91:7B:42
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01997531D47E9393611E9F2D451A527C7E37
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YGvAmYR1OZcMrjYx-1SSZrqRe0I.roa
Signing time: Tue 23 Sep 2025 06:10:23 +0000
ROA not before: Tue 23 Sep 2025 06:10:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.153.0/24 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:31:d4:7e:93:93:61:1e:9f:2d:45:1a:52:7c:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 23 06:10:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=606bc099847539970cae3631fb549266ba917b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:b7:ff:ea:21:49:c6:0b:e4:f7:79:f3:65:
e6:35:51:57:de:fe:fc:6c:10:9d:a7:cd:8b:94:b0:
f1:e8:ff:fe:d9:f7:f5:18:44:04:2c:6a:c6:40:7c:
de:07:95:f7:d8:33:bd:3f:10:b5:8a:eb:c3:24:3e:
4c:74:a6:22:00:0d:0e:99:fa:07:b1:79:b4:f5:a1:
40:c2:1c:50:69:f6:cd:e1:7e:7c:4f:33:88:38:83:
13:03:b7:32:77:8a:f4:f8:0c:c0:f5:47:be:f0:5b:
90:bd:3e:08:bb:83:43:c6:a3:7f:53:5d:fb:b9:ac:
90:d7:18:dc:07:86:ea:30:8d:2b:d6:47:d3:2d:3f:
25:db:8b:64:39:ab:68:8f:51:ab:0e:b1:a2:39:37:
01:fd:31:8d:37:04:4b:01:a1:a7:df:63:38:f6:b5:
11:5e:f7:4c:40:2c:d6:3c:36:f7:19:7f:5f:ea:fe:
d5:80:d8:e7:aa:a1:3b:4f:8a:b2:ee:28:b9:78:21:
3e:e6:b4:f6:fb:d5:15:31:db:0e:c4:2e:3b:6c:01:
66:9a:5c:c8:34:46:93:68:5e:f9:89:de:09:0a:2c:
cb:e9:c9:73:1e:8a:08:ee:3a:df:9c:fd:44:0b:8e:
04:30:14:c1:8d:8e:76:22:1f:14:51:df:31:9d:46:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:C0:99:84:75:39:97:0C:AE:36:31:FB:54:92:66:BA:91:7B:42
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YGvAmYR1OZcMrjYx-1SSZrqRe0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.153.0/24
88.209.198.0/24
88.209.209.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c8:9a:2b:df:3c:b8:d2:1e:b1:46:df:7d:c8:bc:b0:5f:6d:
59:fe:56:76:af:c6:8a:0e:b6:58:b0:c6:b6:a0:7c:c1:10:40:
3f:80:82:31:c3:31:6e:30:a7:60:d0:02:60:fb:02:11:10:ea:
bc:d1:44:5d:7e:e7:5f:81:16:be:10:3b:b1:fc:17:c2:bc:c4:
cb:b6:46:87:a4:4c:b8:e6:4a:de:4a:42:52:96:f2:91:8f:4f:
25:a9:f0:0f:34:dc:91:63:fd:2b:f6:f0:cb:c9:e1:08:a1:6b:
b1:85:c8:94:71:56:af:d5:87:27:c1:4c:37:7c:70:cf:b8:13:
c8:61:f5:14:8e:dc:dd:25:1d:97:cf:02:cb:bd:ff:6f:45:f7:
b1:66:25:78:c2:ce:50:64:b8:c6:a2:fe:46:57:5e:c1:54:c5:
53:8c:cd:d5:1a:09:9b:c4:5f:07:5d:6f:95:dc:5f:24:00:41:
7f:81:9c:cf:f6:be:53:9b:b9:f7:15:1e:69:13:f0:ed:47:83:
8d:c1:d3:08:48:ab:1a:f5:fe:2c:69:ee:a2:71:88:22:30:38:
a6:f5:cd:aa:27:df:de:b8:3d:77:25:ae:44:39:69:f8:a1:1e:
ae:8e:0e:23:ae:56:73:e2:cb:ff:93:ea:bc:16:99:68:90:f3:
b4:3b:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:05 2025 by rpki-client