
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa
File: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (raw, json)
Hash identifier: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=
Subject key identifier: F4:C6:1F:6D:D1:2D:2E:3B:44:BA:8A:B8:07:53:9C:3C:62:00:B4:35
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0199E1ABD3A6FCA1BADADFB1D66D4B99867A
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa
Signing time: Tue 14 Oct 2025 07:42:38 +0000
ROA not before: Tue 14 Oct 2025 07:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
94.240.132.0/24 maxlen: 24
94.240.133.0/24 maxlen: 24
94.240.134.0/23 maxlen: 23
94.240.144.0/20 maxlen: 20
2a09:65c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:ab:d3:a6:fc:a1:ba:da:df:b1:d6:6d:4b:99:86:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Oct 14 07:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4c61f6dd12d2e3b44ba8ab807539c3c6200b435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:27:0c:77:9f:2e:a6:b6:be:01:a2:06:57:
0a:9a:dc:13:6a:f5:65:84:62:79:ab:6b:00:a1:9c:
32:98:41:18:a1:8a:fc:35:ca:38:a3:51:4e:a5:b4:
97:e3:c2:63:4a:06:70:40:41:95:5c:db:dc:c5:36:
9a:4c:e4:35:1f:ca:ff:b7:db:b4:54:52:50:3f:d8:
d1:9d:20:8f:f6:d4:b8:e0:02:73:bc:c3:4e:d2:2f:
1f:7d:bd:da:51:9b:4c:00:2a:98:e7:45:cb:33:01:
0e:c1:cb:2a:ef:22:d6:e4:23:49:ff:05:bb:d2:39:
93:b2:22:5c:8b:b7:8a:ef:f9:c2:76:f7:83:7a:76:
9f:81:98:46:86:8a:bf:2c:fb:7d:7c:e8:98:ea:03:
af:e8:4f:e8:48:a6:67:45:49:a8:25:92:75:d0:30:
cd:a2:be:69:e8:c6:58:79:c4:9e:45:7e:48:e7:84:
b6:a2:ea:0e:11:bd:fe:6b:8c:6c:c6:73:79:df:41:
7f:2f:04:b4:d8:19:2a:a0:68:e5:96:9f:15:b4:f5:
c4:85:5b:7f:d7:61:2f:b8:d0:38:61:4c:fa:c5:b1:
a3:97:d0:11:f3:dc:01:73:ed:7c:e6:de:4e:49:63:
99:73:7d:11:74:5d:d5:10:18:2e:ac:09:11:d2:c5:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C6:1F:6D:D1:2D:2E:3B:44:BA:8A:B8:07:53:9C:3C:62:00:B4:35
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/21
94.240.144.0/20
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:01:7b:33:dd:45:09:c1:e6:a2:70:f7:9d:c8:7e:4e:7f:dc:
cc:64:30:a9:15:e0:0c:b9:71:cb:d6:7c:c4:00:1d:86:23:98:
ab:d7:9c:e4:ed:91:0a:e6:89:27:f6:da:c7:92:d1:a0:55:07:
cf:f5:75:ce:92:c8:57:71:65:05:45:aa:dd:95:f3:d1:67:ce:
7c:62:af:47:51:92:6f:22:59:0e:b7:28:21:61:f2:3e:59:a0:
02:ba:65:e5:71:12:86:65:7c:1f:61:e1:f4:2a:3c:7b:f6:31:
e3:35:1a:bd:41:ed:7c:83:45:e3:f5:24:d9:3d:53:ba:39:97:
7e:96:47:1c:6f:c5:21:47:c3:21:7e:04:24:48:9b:05:f5:89:
bb:8d:c7:e1:80:f7:a7:ae:8a:df:58:99:b7:b9:8c:84:94:c3:
3f:14:54:02:17:15:0e:df:70:36:b3:77:d4:79:c7:74:f7:a5:
d7:ec:f0:f3:1d:a2:2c:c4:03:e8:0a:94:8e:50:f2:da:49:85:
ff:e0:47:35:ee:e7:7f:7d:7c:b6:37:44:28:f8:c7:16:ca:d8:
19:1a:04:26:12:fa:af:30:37:f7:79:82:77:d1:57:b3:91:d3:
91:8e:6e:5f:a1:a9:9c:6c:8e:78:3a:5b:6b:e9:6c:1a:b0:86:
a9:a6:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:51 2025 by rpki-client