Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YJNv9H4LNU3LIyJh8zUXz-uFn8w.roa
File: YJNv9H4LNU3LIyJh8zUXz-uFn8w.roa (raw, json)
Hash identifier: RyDInA7Kfan6Q1E5Pw3hMW97caM8cTEUIT/SRGC0K9Q=
Subject key identifier: 60:93:6F:F4:7E:0B:35:4D:CB:23:22:61:F3:35:17:CF:EB:85:9F:CC
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019792AAE9FB015F0E030AC2566017D84D92
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YJNv9H4LNU3LIyJh8zUXz-uFn8w.roa
Signing time: Sat 21 Jun 2025 13:26:03 +0000
ROA not before: Sat 21 Jun 2025 13:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43793
IP address blocks: 31.47.144.0/20 maxlen: 20
46.183.80.0/21 maxlen: 21
109.205.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:aa:e9:fb:01:5f:0e:03:0a:c2:56:60:17:d8:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 21 13:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60936ff47e0b354dcb232261f33517cfeb859fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:f0:d3:96:79:df:94:33:39:88:81:9d:f6:
e9:dc:d0:7e:a9:e1:b1:6c:24:cd:b8:4d:81:96:15:
59:04:fd:72:76:87:69:bf:4f:7a:02:4c:d4:dd:a7:
3f:28:45:4b:c3:16:ae:dc:ce:af:c7:42:59:9d:10:
3f:3f:9a:c7:9a:b9:a4:4c:16:59:65:d9:8e:1d:88:
56:c5:9c:5b:33:d4:56:d8:24:09:5c:87:24:b1:1b:
b4:04:17:f2:1a:6f:da:0e:0b:73:d3:9c:e4:99:45:
ae:42:f4:67:c6:8a:49:be:f5:4e:15:47:70:ed:dd:
93:af:82:58:ab:11:44:d4:c0:9f:bf:e8:02:76:73:
b0:0f:8d:5f:71:7a:cc:cd:6e:4a:49:e3:de:a6:b4:
56:70:62:0e:b2:9c:71:94:80:d2:7b:41:12:7d:9e:
e5:44:07:a1:8c:ff:34:76:40:11:02:fa:ef:4a:4d:
84:3d:85:ce:77:67:bf:43:16:08:75:39:2f:ac:e5:
f2:02:67:c9:cc:dc:08:ab:95:f5:79:e5:91:a4:69:
14:79:2f:5d:bb:05:59:e5:e4:26:89:2b:3a:36:07:
8a:2b:55:27:1f:59:88:6b:ef:bb:3d:58:6d:05:97:
d4:7b:cd:d2:37:28:4a:c7:ea:12:9a:61:03:c8:07:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:6F:F4:7E:0B:35:4D:CB:23:22:61:F3:35:17:CF:EB:85:9F:CC
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YJNv9H4LNU3LIyJh8zUXz-uFn8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.144.0/20
46.183.80.0/21
109.205.144.0/21
Signature Algorithm: sha256WithRSAEncryption
28:65:fe:0d:ba:9b:90:ca:29:5b:14:e0:0f:18:4a:d6:f8:4e:
42:a0:6e:78:53:8b:47:38:0d:79:fe:54:6a:ca:e0:9d:3c:45:
f9:49:6a:00:ef:73:47:6a:0b:bb:e8:d6:e5:59:dc:c8:18:80:
d1:31:2b:55:fe:11:d7:db:fd:6b:e4:bb:c3:3b:36:cb:48:ec:
a3:cb:8c:92:0e:e0:b7:6d:11:38:d4:45:48:01:45:ae:a0:ea:
63:02:64:6a:d5:7f:86:24:d7:3a:5a:33:f1:3b:2d:68:53:a8:
85:55:2b:dc:bb:2e:a5:3b:7c:8c:27:90:ed:40:2b:af:c5:41:
a0:2e:82:5a:07:d8:69:1d:52:a5:80:3e:07:a7:41:a4:8b:66:
29:72:83:49:84:0d:f3:5f:1a:44:d1:aa:7e:8d:de:da:36:32:
81:43:55:d3:21:a5:59:37:32:af:05:43:a0:c1:46:df:c8:bd:
7a:58:46:f5:d9:1b:36:82:04:56:c0:65:61:8a:16:e7:68:c2:
8d:31:8a:7c:01:e4:f7:50:ff:91:44:b8:0f:a4:ee:ba:54:1b:
51:ad:e6:b4:fa:7c:d9:48:44:73:b8:2c:cd:06:e5:1d:fd:02:
0a:09:9d:e4:f6:78:98:b6:7e:04:8f:16:b8:59:1c:b3:f3:27:
a6:ba:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:56:50 2025 by rpki-client