Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ays9--_IW8JzhtfNk76o0BfVsHs.roa
File: ays9--_IW8JzhtfNk76o0BfVsHs.roa (raw, json)
Hash identifier: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=
Subject key identifier: 6B:2B:3D:FB:EF:C8:5B:C2:73:86:D7:CD:93:BE:A8:D0:17:D5:B0:7B
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 0199AB60A194CE7F44E4ED2FDF6C63048130
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ays9--_IW8JzhtfNk76o0BfVsHs.roa
Signing time: Fri 03 Oct 2025 18:41:00 +0000
ROA not before: Fri 03 Oct 2025 18:41:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203062
IP address blocks: 217.9.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ab:60:a1:94:ce:7f:44:e4:ed:2f:df:6c:63:04:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Oct 3 18:41:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2b3dfbefc85bc27386d7cd93bea8d017d5b07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:2e:33:2c:23:2d:15:24:4b:92:90:c1:9f:
a1:4c:ac:81:f8:17:d9:97:7a:2e:36:03:44:22:ea:
4f:13:bd:64:fe:d4:96:87:ca:ca:55:c8:6b:b5:9b:
2d:14:b8:48:6a:a1:eb:d6:4b:39:4d:98:61:56:48:
28:98:18:5a:a8:a4:33:33:13:06:70:1d:90:8c:0c:
ae:7d:82:78:56:3a:37:d1:cb:d1:53:69:72:cc:2a:
2c:51:89:0e:18:87:b9:b3:7e:98:38:af:da:a0:76:
64:95:1e:05:43:4a:7d:3b:7e:42:fa:a5:bd:07:41:
af:fb:e1:c0:e8:4b:18:5c:58:f3:56:bf:32:7d:18:
28:39:d0:7a:19:47:b8:16:70:ba:c3:1b:6d:92:6b:
db:89:56:90:08:63:6f:75:44:07:2c:e2:54:a1:61:
ea:6c:5b:e3:7b:14:e0:0a:61:fd:86:72:ce:b9:b9:
48:46:9d:b9:77:ae:23:03:d7:19:02:9d:c5:a3:ed:
b4:c3:2a:40:8c:79:85:26:7d:d0:75:ae:ba:aa:7a:
00:2f:fa:80:c7:1a:27:53:44:8a:81:cf:b4:da:04:
fd:32:06:35:f6:83:27:63:87:32:bb:59:bb:c6:11:
94:ec:67:9c:28:ef:d8:c4:d0:90:4e:93:df:dc:f5:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:3D:FB:EF:C8:5B:C2:73:86:D7:CD:93:BE:A8:D0:17:D5:B0:7B
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/ays9--_IW8JzhtfNk76o0BfVsHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:14:26:58:6e:76:2d:1d:29:1f:23:f0:56:3a:70:76:ff:20:
a4:05:7e:c7:6e:5c:17:8b:d1:ff:3a:4e:a7:06:1d:1e:7f:94:
93:75:66:c0:c8:ae:d1:a5:4a:0f:af:f1:04:5a:b4:1b:c3:cd:
28:0a:f6:29:b3:a1:a0:34:1c:e9:0e:92:de:2f:b2:83:33:55:
32:8e:cc:d5:0e:a8:2e:5c:75:df:4c:e4:ee:b9:8b:88:ec:e8:
4f:3c:a4:3d:b3:01:c4:f3:45:0b:05:97:af:41:c1:23:0f:53:
74:1d:0e:19:50:0a:f4:e0:59:b2:40:f4:6b:92:de:ae:f2:21:
3b:a0:9a:cd:63:d7:80:f6:96:a6:f4:71:26:ec:40:0f:9c:cb:
98:94:68:0d:94:df:50:43:cb:3c:d4:a2:2c:7f:a7:df:19:8d:
29:9d:b2:86:0f:21:41:f2:d9:9f:6d:d4:1d:ac:98:b2:eb:31:
86:b0:bf:a3:12:ef:c9:5b:37:ee:e1:b4:50:5d:5c:43:be:19:
5f:ed:18:4c:fa:5f:8d:42:84:43:38:f3:d9:03:e3:92:9e:f2:
6d:96:70:59:96:0f:f8:f1:99:77:2d:15:7c:01:68:28:7d:57:
f3:a9:c6:3f:82:73:09:ce:e7:e3:80:7d:fe:95:9b:86:8c:fb:
30:83:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:23 2025 by rpki-client