Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoHOUTeXKgXzP9JZE_T3K8vbxhE.roa
File: YoHOUTeXKgXzP9JZE_T3K8vbxhE.roa (raw, json)
Hash identifier: mFP2MB6CpHFOvJE3w4bZCsZ+Qgr70MagtyzLIYwSNiM=
Subject key identifier: 62:81:CE:51:37:97:2A:05:F3:3F:D2:59:13:F4:F7:2B:CB:DB:C6:11
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01992D8A54F928AB3168BF77508E2524EED5
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoHOUTeXKgXzP9JZE_T3K8vbxhE.roa
Signing time: Tue 09 Sep 2025 08:14:24 +0000
ROA not before: Tue 09 Sep 2025 08:14:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:8a:54:f9:28:ab:31:68:bf:77:50:8e:25:24:ee:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 9 08:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6281ce5137972a05f33fd25913f4f72bcbdbc611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:d8:da:77:4e:bd:43:12:8f:6a:21:8b:1b:
36:99:ba:e8:c2:0a:1b:e8:b1:54:7b:2a:ab:f3:40:
d8:cc:69:77:f2:4a:94:b9:25:c6:60:bb:4a:b0:f2:
b7:29:36:eb:60:07:58:c4:d3:e4:88:4a:ef:a5:a0:
a7:c0:60:23:c4:09:d5:6e:0d:a1:76:43:25:67:9b:
68:af:a4:66:ad:8b:36:49:9b:ae:05:e4:58:f6:f7:
5f:80:27:b7:35:03:02:e2:bf:f5:d8:5b:6f:18:5f:
58:f5:b1:4b:70:61:19:63:4d:7f:1a:98:6c:9f:0e:
39:fb:20:14:85:3e:3d:64:c1:00:71:28:68:18:61:
e7:c4:a3:ba:2a:4b:7e:72:43:4c:0a:27:d7:9c:2c:
d4:8c:58:8b:c7:11:d1:db:6e:c7:22:1e:05:5b:3f:
13:5e:19:7d:3d:f5:bd:64:2b:3d:0b:ec:e6:b1:d9:
3d:13:28:c4:07:33:91:21:07:71:66:68:59:d8:0c:
44:77:23:91:dc:3d:77:c3:c4:3b:42:86:34:07:df:
0d:ef:96:a4:19:64:8b:1c:09:fe:c6:2e:bf:18:92:
b5:ad:a2:5a:bf:b3:3f:28:8a:06:c8:bf:ed:77:25:
9a:71:02:81:fe:21:b8:bc:e0:b9:fa:41:37:a0:29:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:81:CE:51:37:97:2A:05:F3:3F:D2:59:13:F4:F7:2B:CB:DB:C6:11
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YoHOUTeXKgXzP9JZE_T3K8vbxhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f7:6c:6b:27:85:19:50:84:ce:6d:6a:ec:b5:0b:80:30:a4:
d1:e0:2d:ab:b1:24:1a:af:31:7e:65:81:72:fa:57:f7:d8:ec:
dc:16:ec:26:fc:7e:fc:99:ba:6b:b9:cf:c6:42:48:02:ec:21:
56:c3:b1:6c:aa:c4:a6:61:e6:48:1b:ff:fa:8d:2a:57:b1:60:
90:e2:c0:6f:71:af:fc:9d:96:6d:e0:8c:88:95:3a:c7:c1:fa:
42:1c:5d:19:ee:3b:6b:37:70:c1:a0:df:bb:ae:dd:6a:9a:48:
4c:87:12:ad:55:b3:fd:c1:b6:1f:df:74:d1:33:13:64:59:fe:
31:24:97:ae:f9:0a:0c:40:56:b6:13:ff:82:84:a4:45:e9:57:
10:3a:1e:72:04:93:3f:81:d9:d5:71:5f:c8:5c:cb:fc:92:52:
e2:65:0e:52:fa:3b:78:01:79:49:24:06:94:f8:6e:27:dd:35:
18:74:e6:69:90:00:1c:96:8d:f3:eb:e5:a6:3e:ab:d4:7f:47:
50:f7:23:5b:e8:f1:89:2b:91:d3:44:89:19:1d:9e:b7:18:d0:
a9:24:f7:a2:82:e4:af:a3:9d:58:e4:5e:49:98:76:68:53:ea:
aa:74:b2:d9:c6:18:0e:b1:50:39:4a:94:a6:e8:ca:16:23:95:
73:4d:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:26 2025 by rpki-client