Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa
File: 9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa (raw, json)
Hash identifier: u33y8H6nVy03TdakAVCKdnmWlusbHupRimP8Gevy98g=
Subject key identifier: F5:E3:11:E0:53:49:0D:56:AE:5A:45:88:50:F4:15:A5:B4:39:09:78
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 0198CC16096FEF4C9DB3A270DFF98B6544D0
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa
Signing time: Thu 21 Aug 2025 10:04:12 +0000
ROA not before: Thu 21 Aug 2025 10:04:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42355
IP address blocks: 193.163.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:16:09:6f:ef:4c:9d:b3:a2:70:df:f9:8b:65:44:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Aug 21 10:04:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5e311e053490d56ae5a458850f415a5b4390978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:45:d3:96:7d:ad:88:90:e3:17:34:1d:f9:
5f:fa:e0:f3:86:b1:19:5b:70:b7:11:34:52:98:71:
4d:27:f1:0b:cb:b3:58:3e:d0:08:d1:3d:c6:78:77:
08:77:c4:72:16:6b:ff:0f:1f:e2:da:0e:c6:63:fa:
e8:af:04:d1:f5:3e:9a:bd:72:48:ff:ef:2e:f9:d0:
17:99:e9:81:ce:df:8b:9c:20:27:c7:ab:19:9b:23:
26:06:b8:ff:db:32:8c:ba:5d:fa:8d:c9:fe:e1:d1:
84:c3:90:38:98:1e:4f:8d:f4:2e:80:53:f2:be:c6:
97:07:be:f7:b4:ce:ba:9c:b0:c2:f6:48:d0:a4:66:
3a:75:b6:12:f1:36:a6:44:b8:36:a1:f5:44:82:9e:
63:f6:d3:12:cf:a3:e9:9b:81:ca:aa:2b:0f:cb:13:
77:73:fe:b4:c2:4d:ee:0f:95:40:4e:3e:32:cc:89:
e3:0b:3d:e7:61:40:55:f1:1f:d8:88:13:93:e2:a3:
94:d0:10:35:9d:ec:9e:aa:2a:89:8d:11:0e:c3:5c:
e3:90:03:8e:74:f6:25:b5:36:30:77:2c:06:39:a2:
90:42:73:83:e8:68:b0:ef:07:df:d8:9b:7f:22:43:
59:0f:f4:ca:9c:3b:a3:1b:a1:c7:88:e2:2e:df:70:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:11:E0:53:49:0D:56:AE:5A:45:88:50:F4:15:A5:B4:39:09:78
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/9eMR4FNJDVauWkWIUPQVpbQ5CXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:61:ad:ab:17:f4:2f:9e:ee:b0:d2:48:46:dc:94:c1:95:22:
6a:24:54:4b:7e:08:11:17:3b:71:d8:79:47:bb:c4:64:6a:77:
aa:b8:8e:8f:67:42:2f:6b:6b:5f:05:6b:ca:00:b2:2b:b6:d4:
87:8d:00:f9:b6:e3:01:1a:c5:27:6d:44:96:cb:62:59:2a:85:
84:af:e0:c3:11:71:b2:a9:6d:fa:24:b8:d9:da:2a:91:89:82:
ee:94:c5:09:b1:b5:0c:fe:3c:b8:8a:b4:a0:47:eb:7b:66:6d:
5a:dc:a5:5c:0d:4b:60:fa:38:6e:c0:b7:3b:81:1c:d8:72:0b:
34:90:28:65:bc:67:fc:4f:ad:82:01:51:53:cd:c2:1c:f0:49:
6d:d9:02:1b:0e:83:e2:3b:95:97:d2:e3:a5:f6:91:50:89:df:
4c:97:9a:8c:1f:61:89:76:95:27:e5:0f:1b:d8:47:ba:c4:1c:
e4:ea:ce:d1:01:e0:bc:02:6c:e6:71:98:5f:ef:91:f2:0c:fb:
f7:1b:c0:78:dc:5e:03:46:0b:9b:8c:5f:d9:af:cf:4b:68:59:
6d:a8:68:16:b2:20:f5:4c:34:fd:90:7b:6d:dd:6e:fc:fa:a9:
c4:f1:fa:f0:6a:8f:3f:92:45:b4:05:15:3b:c7:63:60:d0:fc:
09:f1:ba:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:47:51 2025 by rpki-client