Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/I6C9OUy79kypN0-jFqEW807fCi0.roa
File: I6C9OUy79kypN0-jFqEW807fCi0.roa (raw, json)
Hash identifier: 1Hel0O7FmPuldt5t71KSS/2qCERXV6+QisRzagvf8w8=
Subject key identifier: 23:A0:BD:39:4C:BB:F6:4C:A9:37:4F:A3:16:A1:16:F3:4E:DF:0A:2D
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019948FCDE24ECCAB14BEE67DC62B0A10C7F
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/I6C9OUy79kypN0-jFqEW807fCi0.roa
Signing time: Sun 14 Sep 2025 16:09:15 +0000
ROA not before: Sun 14 Sep 2025 16:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 217.147.192.0/22 maxlen: 22
217.147.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:48:fc:de:24:ec:ca:b1:4b:ee:67:dc:62:b0:a1:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Sep 14 16:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a0bd394cbbf64ca9374fa316a116f34edf0a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:47:ec:29:22:44:9d:73:6a:ca:eb:c5:be:
cd:b9:de:15:35:10:68:2b:4e:10:ae:61:ba:0b:54:
f5:80:fe:d9:88:f8:e6:40:41:2e:d7:ff:82:f4:c1:
b9:38:20:84:01:e3:69:63:77:44:ea:8e:3f:99:8b:
75:9f:dc:51:ad:a6:82:6d:54:e6:a4:31:bb:da:9a:
e2:4b:91:71:2e:23:e1:2e:f6:c5:38:ca:a2:e4:01:
f5:06:d0:b6:22:c9:77:ec:74:b4:cd:10:02:d7:3a:
45:60:da:09:b8:25:5f:25:45:00:d2:ea:4b:66:4f:
a0:a2:de:ce:ac:da:3a:28:ba:08:8f:30:92:ab:16:
f7:ea:9f:c9:58:7c:dc:39:22:b4:a6:cb:72:f9:09:
02:a1:be:b8:33:24:37:f4:6b:68:5f:f8:bc:e4:28:
b8:46:a5:fb:8c:82:55:fe:9b:8f:d1:cb:fc:1d:c0:
4e:fc:eb:ec:0d:91:b4:7e:1f:6e:85:95:1f:5e:42:
38:e1:7e:f5:14:fe:65:1e:8a:49:d4:2a:03:b2:4f:
b8:89:4f:42:97:f5:48:a9:47:7d:ee:6d:3a:3a:2b:
40:93:f9:23:75:83:a5:d2:cf:49:83:c9:db:03:ff:
d7:57:96:dc:71:7b:7a:45:59:88:fd:93:a6:d6:97:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:BD:39:4C:BB:F6:4C:A9:37:4F:A3:16:A1:16:F3:4E:DF:0A:2D
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/I6C9OUy79kypN0-jFqEW807fCi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.192.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:27:1f:f6:33:50:96:73:ff:0c:c9:64:7a:b8:96:e4:44:fd:
d7:fd:5b:be:f9:0f:1a:20:9a:19:2f:ef:7c:d4:aa:fe:41:f7:
19:5f:61:75:20:3a:6c:92:02:2e:64:2f:a1:6a:ee:ce:fe:3a:
ed:95:5e:e1:29:30:0d:cc:e3:01:3f:62:00:62:f7:1f:0e:21:
c2:58:4d:a8:f5:ec:8d:27:f6:1f:16:0c:70:aa:81:f6:4a:6f:
41:61:b5:d7:c1:50:66:e0:72:af:73:6a:69:0e:7b:5c:a7:15:
78:58:c9:36:53:69:0e:f8:61:4a:44:51:d6:36:5f:a9:bf:96:
0e:84:81:9b:71:05:d2:7d:65:0e:67:99:f3:1c:43:10:62:16:
3c:d1:f2:38:d5:b8:68:bb:de:71:2e:de:ae:a7:81:6b:24:90:
53:50:ac:e2:2b:99:07:ff:38:3d:0e:55:35:1a:74:5b:be:aa:
0c:30:78:9a:80:fe:2f:69:e5:99:35:78:79:0b:37:e0:1f:b7:
81:cb:72:df:ad:e5:dd:75:e5:e5:06:84:bc:a7:bc:80:5b:1c:
1a:eb:ec:b3:88:66:68:71:1e:3c:1b:18:f5:f4:84:57:67:d3:
48:7a:76:4d:8c:ee:d0:ec:b1:77:f3:6b:e6:34:e9:ab:44:7d:
08:91:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:36 2025 by rpki-client