Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/y9KTYkCcz9X-wHblp6V4OiKB-A8.roa
File: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (raw, json)
Hash identifier: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=
Subject key identifier: CB:D2:93:62:40:9C:CF:D5:FE:C0:76:E5:A7:A5:78:3A:22:81:F8:0F
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0199C8E6E12388E761B0BC20B0C350A1369C
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/y9KTYkCcz9X-wHblp6V4OiKB-A8.roa
Signing time: Thu 09 Oct 2025 12:16:38 +0000
ROA not before: Thu 09 Oct 2025 12:16:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64439
IP address blocks: 109.205.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:e6:e1:23:88:e7:61:b0:bc:20:b0:c3:50:a1:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Oct 9 12:16:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd29362409ccfd5fec076e5a7a5783a2281f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:de:7e:a0:11:8b:c3:ff:ee:43:55:f3:c9:
45:64:92:07:b1:e4:20:e6:dc:c2:bd:fb:28:f0:57:
83:db:df:ba:27:46:8b:a7:4d:15:16:a8:ee:5a:a4:
4b:c3:7d:3f:7b:27:e1:f4:75:a3:ef:11:37:0c:7f:
94:65:f9:e6:b9:e7:a1:da:2c:2a:68:d2:47:d5:d6:
e8:6a:92:68:13:72:01:3d:58:5d:ce:e3:58:7a:a6:
64:dd:f4:9e:53:08:4a:be:b9:2c:55:be:17:6d:f0:
c1:22:c2:f6:00:1c:9f:0d:b4:c7:ea:34:65:37:ee:
55:fc:7d:22:43:42:e8:fb:1d:78:c3:cf:4e:16:9b:
53:4d:9c:b2:9c:33:15:15:88:f6:44:ab:ba:2e:5d:
cf:de:2c:59:d0:4a:c0:9b:d7:48:a1:7b:cf:40:f8:
3c:0c:e9:1e:93:c3:ec:5f:a3:8a:2f:16:b6:5f:a8:
03:4c:19:42:24:76:dd:d3:14:10:61:09:83:80:ae:
2b:bd:20:79:0a:e1:9a:46:6b:43:77:43:c2:47:02:
25:62:04:b7:d1:f5:4d:95:f9:7f:d9:05:a8:08:7c:
05:fd:7e:7b:be:6d:3d:67:67:c0:9a:50:44:a9:ad:
43:51:0c:03:1f:e7:5f:6a:a8:b7:04:e2:e4:00:c2:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:93:62:40:9C:CF:D5:FE:C0:76:E5:A7:A5:78:3A:22:81:F8:0F
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/y9KTYkCcz9X-wHblp6V4OiKB-A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:56:1c:7c:11:53:55:1a:f8:6c:fd:8a:97:5c:fe:85:c9:
a8:68:d6:73:2f:df:03:f4:4e:4a:2a:9f:7c:ab:d2:4e:c0:d6:
6a:27:ef:50:94:27:c5:4b:3e:70:2a:70:ed:ae:a1:0e:c6:49:
44:af:27:53:1c:63:fd:32:7a:03:8f:a7:98:80:ea:66:74:4f:
ef:34:f2:ed:c3:1c:f8:06:56:a3:d4:59:56:7a:de:88:47:c0:
f2:88:60:89:15:9a:e4:16:66:ba:0a:d2:e3:73:e8:43:54:ea:
a5:d9:0f:89:21:cf:0a:e2:ae:45:db:3e:84:7f:62:04:26:30:
39:b6:24:c5:e9:8f:19:03:69:96:6d:db:f4:61:c4:e1:79:f4:
a2:32:41:c4:f5:1a:ca:7c:cd:29:0e:6a:67:3c:1a:93:0d:61:
5e:28:be:03:61:13:32:4b:06:a5:07:65:0f:d3:c3:be:60:96:
a7:22:0d:59:84:b6:ef:64:2e:a6:c3:34:b6:be:cf:27:53:53:
d9:fc:f3:d3:f8:ec:e4:3d:8a:86:95:4c:2f:38:a4:db:80:08:
2f:63:c4:00:f6:80:37:12:a5:cb:04:46:fc:51:1a:65:3f:02:
df:6b:18:a3:56:e7:d9:8e:ca:2c:34:9f:70:80:33:02:72:08:
73:71:18:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnI5uEjiOdhsLwgsMNQoTacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjUxMDA5MTIxNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQyOTM2MjQwOWNjZmQ1ZmVjMDc2ZTVhN2E1NzgzYTIyODFmODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn3efqARi8P/7kNV88lFZJIHseQg
5tzCvfso8FeD29+6J0aLp00VFqjuWqRLw30/eyfh9HWj7xE3DH+UZfnmueeh2iwq
aNJH1dboapJoE3IBPVhdzuNYeqZk3fSeUwhKvrksVb4XbfDBIsL2AByfDbTH6jRl
N+5V/H0iQ0Lo+x14w89OFptTTZyynDMVFYj2RKu6Ll3P3ixZ0ErAm9dIoXvPQPg8
DOkek8PsX6OKLxa2X6gDTBlCJHbd0xQQYQmDgK4rvSB5CuGaRmtDd0PCRwIlYgS3
0fVNlfl/2QWoCHwF/X57vm09Z2fAmlBEqa1DUQwDH+dfaqi3BOLkAMLA7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvSk2JAnM/V/sB25aeleDoigfgPMB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEveTlLVFlrQ2N6OVgtd0hibHA2VjRPaUtCLUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc04MA0G
CSqGSIb3DQEBCwUAA4IBAQCIi1YcfBFTVRr4bP2Kl1z+hcmoaNZzL98D9E5KKp98
q9JOwNZqJ+9QlCfFSz5wKnDtrqEOxklErydTHGP9MnoDj6eYgOpmdE/vNPLtwxz4
Blaj1FlWet6IR8DyiGCJFZrkFma6CtLjc+hDVOql2Q+JIc8K4q5F2z6Ef2IEJjA5
tiTF6Y8ZA2mWbdv0YcThefSiMkHE9RrKfM0pDmpnPBqTDWFeKL4DYRMySwalB2UP
08O+YJanIg1ZhLbvZC6mwzS2vs8nU1PZ/PPT+OzkPYqGlUwvOKTbgAgvY8QA9oA3
EqXLBEb8URplPwLfaxijVufZjsosNJ9wgDMCcghzcRjn
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:51 2025 by rpki-client