Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ihLuXTigfByuno797cx2r5HHi8M.roa
File: ihLuXTigfByuno797cx2r5HHi8M.roa (raw, json)
Hash identifier: 62jHP8VppEogFeOM+W9GgNiQtEW3P9+Mk16CucJKwuc=
Subject key identifier: 8A:12:EE:5D:38:A0:7C:1C:AE:9E:8E:FD:ED:CC:76:AF:91:C7:8B:C3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019999DB7F517AD702EFD9505D6D6526237F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ihLuXTigfByuno797cx2r5HHi8M.roa
Signing time: Tue 30 Sep 2025 09:02:02 +0000
ROA not before: Tue 30 Sep 2025 09:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 194.231.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:db:7f:51:7a:d7:02:ef:d9:50:5d:6d:65:26:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 30 09:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a12ee5d38a07c1cae9e8efdedcc76af91c78bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:44:da:06:0c:3e:67:ea:c5:a5:a6:c8:8c:
1b:2d:aa:f9:ae:16:73:42:1a:e9:94:a5:a3:57:20:
b5:05:d4:83:b4:13:dc:6a:69:e1:c2:18:9a:5d:73:
5f:36:7c:36:2d:c1:01:ed:57:59:49:66:46:c1:3f:
a6:61:88:df:7e:00:41:1c:1c:82:39:06:fc:f4:34:
2b:6a:28:ef:c1:9a:33:63:9b:d6:f4:ea:6e:74:50:
79:01:aa:87:e7:b7:24:ec:f4:d6:85:e1:a8:4c:5d:
d6:e0:d0:df:95:74:e4:7f:b1:42:b8:71:70:9d:bc:
0a:8d:e8:b3:72:54:d8:93:3a:bd:40:4c:f0:c9:56:
66:18:3a:69:b6:90:58:70:7a:18:bd:a8:a5:e0:60:
88:a5:ef:7b:fb:58:6d:fe:b0:47:d9:a0:06:bd:a9:
87:2b:a6:68:86:c1:33:cf:24:4b:33:64:ea:c2:08:
d1:c5:1a:d4:ad:32:d0:fd:bb:e0:28:ee:1f:5a:36:
84:3d:29:e8:99:0e:ed:58:aa:43:a8:9c:17:48:b2:
77:83:3e:dc:d4:ca:da:78:aa:ee:7a:8a:05:a6:53:
6a:de:0e:8b:13:fc:e2:f7:5f:20:a9:93:d2:97:1d:
37:a0:40:4a:62:ee:90:33:ed:54:e8:6b:da:08:3e:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:EE:5D:38:A0:7C:1C:AE:9E:8E:FD:ED:CC:76:AF:91:C7:8B:C3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ihLuXTigfByuno797cx2r5HHi8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.200.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c7:47:2b:2d:ba:10:d0:5e:be:ca:42:4c:fa:cb:45:40:b6:
88:58:74:ed:48:2c:3b:e9:bc:73:3c:58:1c:8f:e3:f6:74:0c:
05:5c:4d:b1:08:ff:66:3f:01:ae:96:4d:ec:49:39:d2:cd:a0:
bb:f4:b8:f8:4d:1a:69:36:73:81:27:e2:c9:0f:94:92:4e:cc:
2e:a8:95:b9:91:24:2f:69:b7:ff:a2:29:9f:3e:12:00:dd:58:
9c:28:49:8e:c6:6a:58:70:f8:00:44:90:a2:d2:1f:90:b9:cf:
32:2f:c3:ec:94:f3:57:70:ba:50:48:cc:a1:cb:de:c4:66:6a:
19:cd:25:e0:15:4a:c6:d7:31:ec:42:26:be:d1:69:a9:ac:d4:
03:0a:1a:07:24:1f:4f:fa:30:8c:48:4e:df:a7:84:bc:f5:88:
43:47:40:21:10:8e:84:ec:43:86:d3:b5:92:95:ee:4f:d5:53:
4b:6b:01:67:c7:dc:a1:e0:db:0c:db:50:1a:76:30:cc:6d:46:
42:d8:71:7b:84:47:03:ab:1a:a9:e5:de:51:cd:83:06:f0:2e:
c5:e6:c2:2f:a7:45:c6:1f:33:f5:ec:b7:c3:bf:d0:5a:4c:da:
a6:71:b3:d1:58:b3:da:ac:ab:6a:79:cb:1d:2c:c7:37:cb:d7:
e2:1a:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:21 2025 by rpki-client