Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa
File: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (raw, json)
Hash identifier: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=
Subject key identifier: 3F:BB:62:FC:82:10:F2:04:81:78:6F:98:4E:53:49:B2:E1:6A:43:F2
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 01999A0A544EE5764DDA04B0E3181E9B7F13
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa
Signing time: Tue 30 Sep 2025 09:53:12 +0000
ROA not before: Tue 30 Sep 2025 09:53:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24658
IP address blocks: 81.19.128.0/20 maxlen: 20
2a10:ad80::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:0a:54:4e:e5:76:4d:da:04:b0:e3:18:1e:9b:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Sep 30 09:53:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fbb62fc8210f20481786f984e5349b2e16a43f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:3d:99:28:62:f9:be:50:5e:f0:28:ab:f6:
ec:1b:76:e5:5a:f8:3c:f6:9e:9e:71:3b:11:63:11:
72:f7:25:ae:af:fc:cf:e1:f9:10:d3:11:26:f9:7e:
dc:0a:3e:b3:af:4e:f1:99:21:c5:09:4e:28:d8:3a:
f9:57:fe:7e:27:90:9a:71:56:17:a0:51:a9:c5:8b:
a0:b0:09:41:d1:17:e3:f5:95:6f:37:28:e2:a0:c3:
95:cb:ab:47:5e:cf:a1:1d:65:5d:1c:90:45:50:45:
8e:6f:85:57:db:33:91:6a:45:4a:e5:28:a0:81:b6:
22:c7:90:00:5a:8d:90:60:13:97:68:28:49:60:d6:
06:e2:19:f8:27:e7:71:2b:16:32:a8:90:48:3e:0f:
22:6a:c4:40:ab:55:b7:b0:97:1c:e5:70:5a:4b:c8:
84:73:e8:cb:89:b5:e0:ef:79:dd:a2:1e:c7:82:ae:
2c:d0:c2:f5:63:b5:6d:1d:a3:16:ec:e5:c2:c5:38:
de:c5:da:1f:f8:6e:bd:db:6e:bd:2f:94:b7:57:fe:
e3:20:20:07:6b:ab:46:88:69:6f:f1:4c:93:0b:eb:
e0:d9:84:26:44:dc:7d:42:a2:55:83:06:89:99:5b:
95:66:35:1e:b1:4e:d1:ab:55:6f:f5:65:cd:95:0a:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BB:62:FC:82:10:F2:04:81:78:6F:98:4E:53:49:B2:E1:6A:43:F2
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0/20
IPv6:
2a10:ad80::/48
Signature Algorithm: sha256WithRSAEncryption
bf:48:84:9a:6c:68:00:58:a0:a4:a5:84:bf:f3:74:b3:89:e7:
cc:e9:80:59:7c:01:c6:53:de:f0:06:18:40:12:bf:bd:43:5d:
0a:b6:c8:bb:d6:34:57:f7:85:81:75:3d:94:dd:f0:e2:53:5f:
4b:6a:48:08:16:da:53:59:a4:d5:c2:53:fb:fe:72:56:4f:ee:
2c:e8:3a:84:5f:24:99:38:d0:5d:8e:4e:47:62:05:63:5c:1d:
4c:f1:91:a7:38:41:f4:74:df:3a:04:14:eb:e6:a0:dc:40:31:
a4:ed:00:74:7a:14:23:1c:5b:aa:c6:37:16:c1:b2:86:3a:6e:
0e:51:8a:18:d1:f8:e7:42:5f:52:79:00:e4:a0:b6:f9:dc:67:
ac:44:b1:c0:94:f5:05:87:5c:61:a4:6f:e0:ba:55:cd:bb:e4:
61:6a:1a:7d:4a:8b:77:ee:f7:b2:8c:dc:90:ed:d5:52:c8:e7:
14:7d:3e:2b:dd:38:4b:bf:f4:03:62:b3:57:d0:85:15:be:46:
5f:80:99:1c:ec:b8:29:f6:30:48:f5:c5:65:49:8b:15:3e:67:
6a:f6:4e:f6:96:bb:c4:2c:5a:ca:54:b6:ca:cd:fd:26:eb:f9:
b8:b6:ba:46:6f:6e:59:7d:59:f4:b6:ef:39:d2:6e:83:fc:94:
20:73:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:26 2025 by rpki-client