Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/smF0R1R_A0zx4qeKi8ts1NVojqE.roa
File: smF0R1R_A0zx4qeKi8ts1NVojqE.roa (raw, json)
Hash identifier: j+uf9Z2ujmHk6U0a8V2BdNuYKUEO2994xBDSPO5pRSc=
Subject key identifier: B2:61:74:47:54:7F:03:4C:F1:E2:A7:8A:8B:CB:6C:D4:D5:68:8E:A1
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01998A125B56FEEFA4D5845A7CF7FA753936
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/smF0R1R_A0zx4qeKi8ts1NVojqE.roa
Signing time: Sat 27 Sep 2025 07:28:02 +0000
ROA not before: Sat 27 Sep 2025 07:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 82.206.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8a:12:5b:56:fe:ef:a4:d5:84:5a:7c:f7:fa:75:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 27 07:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2617447547f034cf1e2a78a8bcb6cd4d5688ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:8d:6f:1b:23:7f:9b:24:91:4a:87:b5:d5:
6a:e1:58:5d:43:80:32:8b:86:f0:2e:fa:55:ce:62:
cf:d7:b9:77:1f:f9:93:83:45:05:74:51:9f:d9:9d:
13:ce:4d:d6:5e:9e:cd:f9:c5:1b:42:21:68:86:1a:
3b:52:07:04:94:d7:1a:5f:80:7b:f9:f4:75:8c:63:
94:2c:07:95:8e:7f:98:b0:62:45:e3:9d:06:45:ad:
42:6f:76:53:3b:ee:76:70:c3:e6:bd:70:e5:63:bf:
ec:0b:5f:92:72:47:be:ca:a8:d9:9e:30:4c:27:85:
3b:a6:20:8b:08:36:f5:92:93:bc:76:85:8d:7d:e5:
25:df:83:61:fe:4d:c7:1f:5d:ff:f0:fe:db:2c:e5:
44:2f:76:03:3d:ae:36:d0:bf:91:48:b3:ae:be:f8:
8c:09:f0:ae:bc:8f:9b:26:d7:dd:c1:1b:c2:a6:82:
f7:56:21:a9:75:0e:f3:17:f2:64:9a:9e:32:12:31:
9e:8d:0b:cc:d3:08:c2:e7:57:24:a2:16:72:23:ab:
45:61:7f:f1:ab:ca:ea:77:5e:d8:4e:47:35:89:5d:
31:d9:eb:3b:6a:75:75:7d:60:60:aa:38:bb:63:2d:
e7:33:b4:46:56:16:ff:8a:89:cf:4a:1d:fe:90:4c:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:74:47:54:7F:03:4C:F1:E2:A7:8A:8B:CB:6C:D4:D5:68:8E:A1
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/smF0R1R_A0zx4qeKi8ts1NVojqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:60:b0:a8:14:be:7d:e1:17:93:7f:1a:36:64:a6:ee:c2:b9:
af:a2:8d:8a:40:7e:1c:f3:05:9d:55:cd:43:f6:44:99:51:3e:
1b:aa:01:e0:c3:4c:39:a4:6a:fd:8a:5b:1b:12:ed:04:a5:04:
a5:02:00:f0:35:be:19:1e:09:6d:cb:85:16:07:d0:6b:8b:bd:
c3:10:c8:29:b0:21:4d:f2:a3:41:20:90:a1:b1:3f:04:4b:96:
ed:cf:b6:90:84:03:00:28:3c:2f:92:8a:11:48:79:43:92:c8:
27:9b:d7:9d:d6:7e:71:99:31:ba:64:70:d2:af:4c:85:3e:61:
a7:df:bc:85:25:46:1a:c3:3f:a2:1d:dc:72:32:ef:32:06:32:
17:ee:6e:45:9c:ef:2a:1b:09:75:81:d9:ab:86:a1:e3:b5:c8:
02:ad:f7:70:cf:34:ac:51:ef:6c:d7:5d:65:3b:28:e8:48:38:
b1:df:72:e5:d7:ed:43:76:c0:fe:32:64:2d:77:d0:24:3e:30:
7d:97:73:f4:b9:42:0e:d7:5a:b7:67:de:74:ef:18:71:bf:43:
2d:47:b4:8a:cb:c1:f2:2b:40:e7:5f:a3:e5:31:18:7b:b2:04:
31:24:28:2b:97:c2:74:79:d4:1a:6f:33:12:ee:05:ac:35:62:
f2:8d:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:02 2025 by rpki-client