Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xAImfJODTs2zsrACx9eeEsMp4M.roa
File: 9xAImfJODTs2zsrACx9eeEsMp4M.roa (raw, json)
Hash identifier: gSkZqCfSwfOJL0b2bYeZUGWxUdiYjnYulJENp5XdAs8=
Subject key identifier: F7:10:08:99:F2:4E:0D:3B:36:CE:CA:C0:0B:1F:5E:78:4B:0C:A7:83
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01999B1F9A0A45B60F606FD5F39044119552
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xAImfJODTs2zsrACx9eeEsMp4M.roa
Signing time: Tue 30 Sep 2025 14:56:03 +0000
ROA not before: Tue 30 Sep 2025 14:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 185.243.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:1f:9a:0a:45:b6:0f:60:6f:d5:f3:90:44:11:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 30 14:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7100899f24e0d3b36cecac00b1f5e784b0ca783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:7e:ac:7d:67:25:b9:0b:5a:f6:3a:52:7a:
c9:11:dc:67:fa:03:5a:81:b7:9b:25:1d:ce:30:e1:
e2:f7:1f:50:9a:2e:0e:4b:15:d0:76:ff:9e:96:40:
9a:75:fe:76:04:cc:21:7e:f8:83:da:64:75:9c:de:
e8:00:42:19:06:ce:65:42:98:9f:ff:09:45:d7:a8:
d8:e0:cf:ac:01:80:6e:fd:32:df:06:c2:68:32:be:
40:8a:66:b3:37:d9:b1:f7:a2:87:9d:a2:19:cf:2d:
ea:7e:1d:f9:f7:bf:42:0f:ff:83:90:76:f6:f4:e9:
9d:45:a8:9f:ba:e1:79:3d:a1:f5:92:71:9c:64:91:
43:95:22:ba:81:cd:50:1e:a6:25:ff:d6:03:71:c7:
d5:67:90:29:61:be:70:80:af:99:b3:5c:af:eb:9f:
70:5e:f9:72:1a:d9:11:d9:8b:8f:99:5d:9f:84:07:
e4:86:1b:0d:8e:1a:be:12:fb:e9:b6:a9:a3:98:64:
dc:ef:a6:d3:dd:d7:46:35:d0:81:ac:95:b1:95:6b:
1b:9b:89:ca:9f:4e:9c:9a:bb:aa:32:11:60:14:7c:
29:97:de:c8:f3:43:70:f2:3a:e9:a4:15:f8:ea:89:
92:54:0f:12:8b:c8:13:15:0f:62:37:3e:63:1f:ae:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:10:08:99:F2:4E:0D:3B:36:CE:CA:C0:0B:1F:5E:78:4B:0C:A7:83
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9xAImfJODTs2zsrACx9eeEsMp4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.182.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4a:cf:01:db:56:20:f8:b5:1c:cb:cf:ae:56:b7:ca:a8:ef:
6b:94:e5:34:83:f9:67:c3:b4:73:7f:10:57:0f:8b:b7:c5:a0:
a7:64:2c:52:45:9f:d4:93:42:8f:87:ca:3a:0c:28:d5:fd:96:
4d:49:9b:29:9c:f0:0e:39:83:85:24:30:8b:2b:71:72:09:dd:
4b:66:15:d0:5c:56:8c:f2:d9:af:ae:65:37:e8:ba:0a:94:e8:
e2:a5:38:40:b2:6a:ca:61:4f:29:3f:a8:08:2a:3c:e3:20:fb:
28:68:2c:36:98:18:b7:9f:8c:37:1c:c5:9b:1a:7a:1c:8b:cb:
d6:68:db:1e:7f:48:89:97:38:7b:ab:c7:be:2b:e1:84:3e:d5:
b4:7d:c7:fb:52:a5:80:90:29:84:c4:48:a7:89:2e:db:6d:07:
fb:29:72:e2:f3:a8:15:b6:eb:d2:b9:eb:3b:e4:b6:4a:16:30:
c7:e2:e4:7e:aa:93:22:87:39:f9:21:6b:85:6e:9a:76:5b:fc:
e4:9c:f9:ca:58:bc:f8:f3:d8:4e:b6:c3:9d:15:a4:38:bc:34:
f4:d3:11:70:6f:97:61:e4:1e:33:fc:d0:0b:16:5f:71:ab:d4:
0f:a8:51:df:3b:79:76:ad:1c:71:22:b4:96:b8:46:3a:b3:8a:
27:58:09:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:46:04 2025 by rpki-client