Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa
File: j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa (raw, json)
Hash identifier: IQH0ZG03X6EDOf/JP581Nh+0AIMYOTDDiB4SyvCG/2A=
Subject key identifier: 8F:D0:AD:C0:E2:46:9D:52:92:F8:73:FA:00:78:DA:3F:84:17:FA:61
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 019938C6C8D4E6606B324597010ACE7CD004
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa
Signing time: Thu 11 Sep 2025 12:36:15 +0000
ROA not before: Thu 11 Sep 2025 12:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203159
IP address blocks: 185.130.72.0/24 maxlen: 24
185.130.73.0/24 maxlen: 24
185.130.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:c6:c8:d4:e6:60:6b:32:45:97:01:0a:ce:7c:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: Sep 11 12:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fd0adc0e2469d5292f873fa0078da3f8417fa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:8c:fb:0d:8f:3a:4e:45:ec:81:77:50:06:
bb:f4:3e:c4:c6:1b:24:5f:9f:eb:63:a5:e7:5c:b5:
fd:cc:f0:3b:f3:54:4e:b1:d6:10:bd:f3:39:81:50:
ad:35:13:f5:ed:7a:5e:d0:07:5b:03:3e:b5:95:c7:
92:88:57:f6:62:ad:90:c3:21:35:5c:08:c1:57:d0:
73:f0:c9:41:f8:30:dc:9e:84:41:81:98:cb:16:09:
05:a8:16:b9:19:9a:4c:f1:15:fe:b3:c4:1d:62:cc:
30:09:a4:1f:ca:8e:25:41:7a:c8:9b:4c:72:ea:43:
c6:10:c6:32:f5:d0:03:8d:6b:b3:80:54:45:d5:84:
d8:75:de:65:5f:c1:60:9c:be:f5:05:82:61:59:9d:
38:fe:2b:7d:72:89:78:dc:07:ca:77:67:cd:2c:54:
7f:67:d6:b3:d9:2b:d1:c2:2e:92:d6:13:71:24:b6:
e2:9f:2b:32:37:5c:1a:db:22:c7:c6:8a:7a:ed:5f:
08:ce:dc:07:67:d7:35:52:13:4c:03:1f:c2:00:1f:
40:a4:e3:5f:94:3e:de:54:27:f8:81:2c:ac:70:4e:
b3:c8:f5:63:ab:b2:87:cd:64:61:f2:60:a5:f1:15:
d1:bd:09:5e:57:c9:25:11:fb:29:30:8a:2b:01:46:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:AD:C0:E2:46:9D:52:92:F8:73:FA:00:78:DA:3F:84:17:FA:61
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.72.0-185.130.74.255
Signature Algorithm: sha256WithRSAEncryption
8e:73:be:5d:3e:dc:88:8b:bb:e2:fe:17:68:2a:e3:e4:25:85:
a3:bd:c0:e8:3c:cd:2a:03:52:20:f6:8a:22:9b:dd:b7:e1:46:
d3:3c:ef:5d:4c:04:76:bb:42:26:b1:bb:23:87:42:49:3b:11:
c8:5c:96:65:7d:16:6b:ef:33:eb:ae:d3:8f:3c:bc:72:59:2a:
1c:47:ad:b6:af:f1:a8:d3:4e:58:fa:fe:5c:57:80:e0:2a:97:
96:d9:8c:8d:cb:31:59:57:ae:93:49:f3:14:21:af:4e:cd:cd:
38:c1:ca:9b:0d:a5:75:5b:1f:43:9b:a8:6a:3b:e0:8c:90:dd:
45:13:e7:b6:11:e1:e6:4e:ca:f2:5f:25:42:4f:9e:8c:7d:65:
63:b6:e8:17:e1:11:6d:ec:7f:37:90:76:19:ae:ba:78:fd:11:
04:3c:3b:3a:bc:af:6c:66:88:c3:9d:55:90:49:22:4b:4c:46:
cf:c2:a9:7b:65:c3:47:49:d4:c8:e3:58:e8:5e:b3:cc:89:19:
60:79:c0:51:f5:94:df:d5:90:0a:96:fd:42:bf:33:e3:64:f6:
65:84:9a:02:64:73:66:89:e2:88:61:9a:f0:a7:ba:d9:d4:27:
f1:8d:e0:09:c3:df:29:86:5d:d6:8c:53:77:a6:af:f9:5c:8b:
eb:0a:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:54 2025 by rpki-client