Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa
File: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (raw, json)
Hash identifier: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=
Subject key identifier: F5:9A:1B:43:35:18:1D:F5:E9:FB:23:00:67:14:5B:01:5E:44:89:91
Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Certificate serial: 0199C8DA1110E42A5902D30CDC12C9057510
Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa
Signing time: Thu 09 Oct 2025 12:02:38 +0000
ROA not before: Thu 09 Oct 2025 12:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59790
IP address blocks: 5.154.243.0/24 maxlen: 24
176.56.40.0/22 maxlen: 22
185.65.208.0/22 maxlen: 22
185.109.144.0/22 maxlen: 22
185.182.164.0/22 maxlen: 22
185.227.52.0/22 maxlen: 22
193.93.140.0/23 maxlen: 23
193.124.14.0/24 maxlen: 24
193.124.84.0/24 maxlen: 24
194.135.47.0/24 maxlen: 24
194.135.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:da:11:10:e4:2a:59:02:d3:0c:dc:12:c9:05:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd
Validity
Not Before: Oct 9 12:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f59a1b4335181df5e9fb230067145b015e448991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:d0:69:a6:31:2f:5f:83:eb:08:33:e3:78:
db:c1:81:1e:e7:b7:2b:ed:6b:19:5c:1a:76:8d:f8:
e6:75:46:d5:8f:17:02:44:1f:3f:c5:79:d3:d0:9e:
59:ab:41:55:ad:91:14:a2:1a:3a:b2:0a:ed:47:8d:
c6:62:6f:c4:69:86:04:35:d5:8f:19:46:f0:9e:12:
86:14:3e:56:44:4e:ec:98:b7:86:09:75:05:6a:12:
d5:4b:4e:6d:3c:77:dd:a3:39:7c:07:d4:e4:18:67:
52:63:ff:fe:f9:49:b0:0f:10:98:f0:71:35:ca:d2:
13:c9:41:62:24:1a:d8:57:44:e6:e6:3a:42:bd:33:
0d:fe:d9:b3:0e:44:8f:f9:bd:03:89:e5:ad:84:7d:
74:71:c3:22:8a:70:8f:7f:0c:ca:6f:34:5b:f9:8c:
b8:57:7c:c2:8e:62:d2:3d:1d:28:58:77:0f:94:71:
56:53:ee:35:aa:8f:3b:70:2e:20:da:97:48:42:95:
54:cf:6c:c9:c9:64:75:fb:70:cc:68:03:8d:21:c3:
cb:75:92:14:ba:7b:8a:e3:38:13:0e:65:b9:23:33:
48:ae:4e:d6:5d:0a:0b:d2:35:49:69:e1:62:f3:22:
6f:26:23:6e:ec:18:73:07:b8:89:06:bf:82:bb:4a:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:1B:43:35:18:1D:F5:E9:FB:23:00:67:14:5B:01:5E:44:89:91
X509v3 Authority Key Identifier:
keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.243.0/24
176.56.40.0/22
185.65.208.0/22
185.109.144.0/22
185.182.164.0/22
185.227.52.0/22
193.93.140.0/23
193.124.14.0/24
193.124.84.0/24
194.135.47.0/24
194.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a5:8b:fc:8e:1f:8b:c3:bb:d5:9d:3d:15:2f:1c:d2:96:29:
f1:5b:10:c2:02:4a:f1:b0:b2:ec:ad:90:7d:ab:1a:64:36:99:
0c:6b:a4:fe:fc:3b:e1:90:73:b8:7b:49:e7:5f:7c:98:57:11:
74:ab:67:a2:37:d6:88:a4:c5:30:c4:97:0f:3a:1c:c8:30:81:
24:b5:8d:70:7b:8b:03:26:82:93:71:db:1e:a6:58:79:b7:58:
a8:d2:b0:b2:d2:bd:e2:21:1e:01:ba:f2:7e:c1:8d:d9:3c:fc:
14:c3:b3:dd:c2:a2:36:2c:2e:46:e4:75:57:8b:92:62:21:1e:
f5:e8:4e:f9:1e:ea:34:01:4f:60:a4:96:80:6f:fd:be:8b:5f:
eb:a1:aa:5d:27:bf:3e:e6:11:d3:1a:92:90:50:ef:30:5d:6f:
25:77:c8:98:ba:4a:76:3c:fe:c8:9b:a7:d4:22:82:55:1a:76:
c7:6f:66:61:40:c1:08:02:97:17:ff:7a:1c:ce:47:51:59:ca:
9d:86:71:1f:f9:e1:85:94:52:4f:cb:e1:37:b4:fb:1b:8d:f0:
fb:71:9d:15:3c:5c:56:41:fe:f7:f2:b6:ac:9b:42:9c:0e:c8:
66:f1:2e:30:e6:4c:ab:b7:2c:b8:ef:1f:ea:9e:2c:72:d1:89:
e0:ea:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:06 2025 by rpki-client