Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YlsSe-kZdyoSNv8frNMuJNKOEDg.roa
File: YlsSe-kZdyoSNv8frNMuJNKOEDg.roa (raw, json)
Hash identifier: KkWErRFQCKAaLuu8FmVfSF3bPQvyc+JXLf5z6FECaBo=
Subject key identifier: 62:5B:12:7B:E9:19:77:2A:12:36:FF:1F:AC:D3:2E:24:D2:8E:10:38
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01999B20816DC84F88188ABBD06382F354C7
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YlsSe-kZdyoSNv8frNMuJNKOEDg.roa
Signing time: Tue 30 Sep 2025 14:57:02 +0000
ROA not before: Tue 30 Sep 2025 14:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 194.143.221.0/24 maxlen: 24
213.220.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:20:81:6d:c8:4f:88:18:8a:bb:d0:63:82:f3:54:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Sep 30 14:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=625b127be919772a1236ff1facd32e24d28e1038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:97:1a:09:01:fc:54:a0:53:b7:5d:6e:a3:
be:28:0f:ac:d0:99:34:ba:cf:eb:65:79:89:fd:62:
a1:55:f9:d9:d1:22:47:58:eb:f9:7b:46:85:dc:80:
a9:e8:ea:5a:c6:59:99:66:72:16:35:87:db:97:86:
a0:3f:16:80:e1:b6:1a:b6:63:a6:68:16:a2:70:22:
dc:b4:98:e8:10:8d:2f:c1:60:83:c8:d9:07:b5:a6:
d9:8e:a8:a5:78:84:d8:66:8a:e9:ef:90:77:18:ee:
10:c8:ad:cc:27:57:7f:24:b6:b5:ea:ed:ec:b4:84:
74:90:32:1a:9a:f8:55:ac:f9:44:8a:83:43:0c:8d:
f1:19:e7:ec:7a:9e:bb:0e:30:69:30:5b:9e:f8:39:
c6:ff:bb:d3:88:31:90:be:42:5f:08:a5:85:a0:36:
3b:81:1d:a9:85:ad:56:ca:b0:39:f1:a9:75:09:24:
5b:4c:5b:0b:1e:fa:48:12:23:51:aa:4b:ad:53:4e:
30:f4:2a:98:cd:bc:ae:85:f1:b6:56:12:9e:e5:0b:
c6:6b:48:a4:4a:d6:a5:1a:f6:a1:82:4c:4e:21:b9:
9d:20:b2:63:8e:5c:a8:d3:8e:d0:35:d4:74:a2:22:
07:27:ae:ed:6e:0a:c0:33:3e:21:1f:3e:21:60:67:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:12:7B:E9:19:77:2A:12:36:FF:1F:AC:D3:2E:24:D2:8E:10:38
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/YlsSe-kZdyoSNv8frNMuJNKOEDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.221.0/24
213.220.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3a:b8:eb:8e:d9:c9:1b:75:26:12:0a:4b:b5:22:e9:e4:26:
69:97:48:f2:9f:2f:45:e9:37:d6:92:7c:9e:9c:ae:66:75:ea:
07:2a:7c:be:39:14:e9:3a:d0:ba:9d:4d:1d:3e:9e:ce:53:5c:
1f:1b:2f:f1:96:1d:8b:c1:d4:c6:47:5f:7a:c4:af:2c:00:12:
92:3f:88:85:5c:ba:e2:da:ea:01:9f:bc:c7:2c:a2:80:96:f8:
09:49:a0:2a:f9:02:00:f5:7c:e1:c6:59:d3:2f:ce:ad:63:1c:
54:86:c0:2a:c8:3d:05:f9:2c:b0:d6:26:ad:85:4d:30:00:5d:
0c:71:2d:44:93:eb:6f:e2:28:a6:36:b9:7f:65:d9:35:c2:62:
78:61:c4:eb:5c:56:01:64:0d:8a:82:2c:d9:b0:60:c1:0b:fe:
c8:f6:32:47:36:9f:b9:4e:0d:dd:e0:21:db:c7:67:d4:ea:d0:
88:8c:8a:62:14:0d:bb:91:5d:e9:54:44:dc:fc:6f:45:5b:f8:
91:d4:a0:4a:b2:67:23:e1:9c:51:00:c3:33:fc:b0:82:7f:dc:
c5:09:bb:fb:83:33:5e:fc:3e:a8:71:3e:f2:ae:d9:06:84:93:
8b:a6:88:b0:8c:06:e5:98:42:a8:7f:2f:af:8d:a6:c8:3a:30:
0a:f8:b2:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmbIIFtyE+IGIq70GOC81THMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjUwOTMwMTQ1NzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjViMTI3YmU5MTk3NzJhMTIzNmZmMWZhY2QzMmUyNGQyOGUxMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6viXGgkB/FSgU7ddbqO+KA+s0Jk0
us/rZXmJ/WKhVfnZ0SJHWOv5e0aF3ICp6OpaxlmZZnIWNYfbl4agPxaA4bYatmOm
aBaicCLctJjoEI0vwWCDyNkHtabZjqileITYZorp75B3GO4QyK3MJ1d/JLa16u3s
tIR0kDIamvhVrPlEioNDDI3xGefsep67DjBpMFue+DnG/7vTiDGQvkJfCKWFoDY7
gR2pha1WyrA58al1CSRbTFsLHvpIEiNRqkutU04w9CqYzbyuhfG2VhKe5QvGa0ik
StalGvahgkxOIbmdILJjjlyo047QNdR0oiIHJ67tbgrAMz4hHz4hYGc4owIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGJbEnvpGXcqEjb/H6zTLiTSjhA4MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvWWxzU2Uta1pkeW9TTnY4ZnJOTXVKTktPRURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwo/dAwQA
1dwHMA0GCSqGSIb3DQEBCwUAA4IBAQC4OrjrjtnJG3UmEgpLtSLp5CZpl0jyny9F
6TfWknyenK5mdeoHKny+ORTpOtC6nU0dPp7OU1wfGy/xlh2LwdTGR196xK8sABKS
P4iFXLri2uoBn7zHLKKAlvgJSaAq+QIA9XzhxlnTL86tYxxUhsAqyD0F+Syw1iat
hU0wAF0McS1Ek+tv4iimNrl/Zdk1wmJ4YcTrXFYBZA2KgizZsGDBC/7I9jJHNp+5
Tg3d4CHbx2fU6tCIjIpiFA27kV3pVETc/G9FW/iR1KBKsmcj4ZxRAMMz/LCCf9zF
Cbv7gzNe/D6ocT7yrtkGhJOLpoiwjAblmEKofy+vjabIOjAK+LIP
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:31 2025 by rpki-client