Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Q2YqpAXgtWvBppY_D8fOP81XzM.roa
File: 9Q2YqpAXgtWvBppY_D8fOP81XzM.roa (raw, json)
Hash identifier: pLLj49UP0BY8ewDJchr7KsaH13T09HrWAcMCApWmeU0=
Subject key identifier: F5:0D:98:AA:90:17:82:D5:AF:06:9A:58:FC:3F:1F:38:FF:35:5F:33
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197839BD7A22C199FDE84DBE7A608004812
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Q2YqpAXgtWvBppY_D8fOP81XzM.roa
Signing time: Wed 18 Jun 2025 15:15:17 +0000
ROA not before: Wed 18 Jun 2025 15:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274838
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:9b:d7:a2:2c:19:9f:de:84:db:e7:a6:08:00:48:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 18 15:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f50d98aa901782d5af069a58fc3f1f38ff355f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:20:59:1c:fd:91:ac:3d:b6:da:15:d5:09:
8f:08:ca:58:7d:50:a2:cc:56:9d:da:c5:ed:5b:6b:
57:78:1d:15:21:33:40:52:81:5c:f7:99:80:e1:4c:
e9:8f:03:c6:7b:eb:a1:14:d5:17:c6:f4:ea:8d:57:
57:f0:aa:98:7f:5e:9f:71:97:9a:a5:f6:56:48:2d:
8b:b4:9f:f5:ec:9d:15:4a:37:3e:1a:23:eb:c7:b7:
e8:b9:57:23:db:bc:ae:42:3b:4d:05:cd:f1:39:77:
cf:b3:4e:74:ed:43:92:10:01:28:c7:04:24:8d:3d:
34:d8:37:d0:d6:d7:61:f4:66:59:0e:4a:41:61:1c:
d0:55:7a:5a:e2:6b:79:26:3e:81:3d:50:7a:77:68:
3c:8f:a3:d5:6f:b7:e5:9e:45:95:94:5a:7e:30:61:
5f:52:09:01:e6:d4:e1:f2:b6:12:0c:5a:8c:9e:d4:
c0:c7:30:97:88:03:08:f2:ee:9e:70:1c:7c:a4:b0:
3c:9c:a9:d4:0a:d6:76:24:47:9e:73:90:45:67:18:
be:d4:63:05:0d:df:f6:e7:77:dd:47:00:13:2e:64:
5d:9e:0b:2e:9f:30:63:1f:97:75:29:3c:1f:46:ab:
a0:1d:8f:0a:96:bf:69:72:79:ca:58:d2:23:b3:ff:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:98:AA:90:17:82:D5:AF:06:9A:58:FC:3F:1F:38:FF:35:5F:33
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Q2YqpAXgtWvBppY_D8fOP81XzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
33:23:b7:10:2d:b6:8a:c9:1f:f4:98:47:89:78:6d:29:cf:61:
84:5d:32:7b:16:f8:a1:5b:d2:a0:87:ef:d8:17:3c:08:23:db:
c4:b3:43:94:3b:02:d7:5e:10:04:8e:af:ad:47:43:5d:1e:c8:
d7:4c:30:1a:b9:02:a2:7b:de:5d:4b:58:37:e5:96:c0:18:b5:
7c:68:90:47:e8:d9:e7:77:56:3a:3c:bb:48:5e:37:ed:37:02:
a0:bc:91:92:5d:93:b4:81:d6:c6:47:dc:d8:0a:ca:fa:5b:05:
f2:db:f3:24:e1:e5:25:9f:57:c2:70:4b:5a:58:b3:fe:f4:d9:
5a:3a:5c:0c:c7:b5:71:87:fc:20:27:94:b0:cc:dc:ab:4b:05:
8e:87:93:6f:d1:38:fa:07:ca:85:59:a8:38:da:b2:e2:73:01:
df:0f:8a:5c:83:6f:87:6c:ae:ad:35:34:51:19:85:ff:bc:03:
12:d5:f1:54:0d:b8:d4:8d:02:51:d0:02:96:1a:a4:1e:74:1f:
28:8f:63:7a:ce:77:b7:98:13:ac:a3:d0:de:86:d0:29:d7:25:
2a:2c:3a:e3:64:68:0e:c2:5d:e7:c0:e2:fb:5f:99:da:68:85:
b0:d8:80:55:9d:28:bc:70:4c:f6:f9:ff:48:af:d9:12:fe:13:
41:05:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:30:29 2025 by rpki-client