
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/l4stELRsm4OIR2OfQNRP6wUDNC8.roa
File: l4stELRsm4OIR2OfQNRP6wUDNC8.roa (raw, json)
Hash identifier: RmYimRuUUl+Ib7kNy7hDbF/Rvh4tKq5FXQ0HhazRHR0=
Subject key identifier: 97:8B:2D:10:B4:6C:9B:83:88:47:63:9F:40:D4:4F:EB:05:03:34:2F
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 0199FA234320CC91C744E0C94229672B625A
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/l4stELRsm4OIR2OfQNRP6wUDNC8.roa
Signing time: Sun 19 Oct 2025 01:43:58 +0000
ROA not before: Sun 19 Oct 2025 01:43:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:23:43:20:cc:91:c7:44:e0:c9:42:29:67:2b:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Oct 19 01:43:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=978b2d10b46c9b838847639f40d44feb0503342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:26:17:20:c8:d2:26:f9:73:ca:16:fe:72:
e2:c2:b8:65:38:12:02:14:e4:ae:d4:a2:94:02:39:
68:73:22:10:99:7d:08:41:24:08:c4:45:7b:08:89:
ae:32:65:a6:ae:3d:4f:d2:6f:f7:55:8f:27:47:74:
37:70:79:63:99:f0:3b:2d:90:a5:85:af:aa:50:5e:
a0:b3:d2:8d:1d:95:22:20:5f:37:22:a9:d1:63:46:
c1:ca:97:d2:2d:27:2d:76:5b:a4:f2:3f:19:0d:91:
5f:77:ab:ec:99:24:c7:d4:94:68:94:8e:fb:45:0b:
53:c7:da:cf:9d:d2:95:c7:6b:09:67:6f:80:2c:a6:
05:43:66:b2:eb:67:1a:1c:a7:4d:3c:f7:30:4a:35:
aa:5a:c9:65:fd:d3:62:b0:c3:05:38:84:94:a2:48:
bc:f7:22:9f:62:90:de:0d:ce:8b:3c:38:a1:a7:ab:
83:21:cf:de:8d:32:d3:5e:03:44:76:94:5a:13:0b:
09:67:2f:fc:2c:7b:47:cf:88:60:d3:fb:4a:95:6e:
29:46:b1:d0:90:af:fd:e5:d2:fa:99:ec:3f:27:28:
15:67:c4:ee:c8:c1:9b:f1:13:29:ed:62:1b:70:0e:
12:cc:98:a2:3b:12:ea:07:43:4c:d8:2d:ed:f7:eb:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8B:2D:10:B4:6C:9B:83:88:47:63:9F:40:D4:4F:EB:05:03:34:2F
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/l4stELRsm4OIR2OfQNRP6wUDNC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f7:29:d2:8b:2f:a0:dc:a5:da:e6:ac:5e:ad:e3:56:07:dd:
c9:be:b1:c1:9b:ff:60:c5:8d:56:7f:b0:60:8b:4f:51:c3:65:
e4:f5:74:b9:57:4c:43:d7:f8:de:d5:6a:9f:d1:0f:a9:b6:3e:
81:bd:ab:a7:0a:a4:ba:e2:d6:b8:b3:21:2e:5e:97:28:9b:d3:
e1:c4:42:7c:68:6b:98:76:a4:98:28:c1:9e:46:8e:5c:b0:4b:
b6:c7:ae:35:52:84:c7:de:48:f8:1f:89:d9:1f:38:a2:ce:89:
54:06:a1:f5:94:53:1e:59:2c:da:c1:85:81:5d:59:0e:fc:58:
1a:2f:fc:84:b2:03:94:38:0a:12:a9:d8:2e:0c:b4:a9:af:54:
cc:95:2d:bd:57:58:5a:5b:ec:43:c8:6b:42:59:5a:51:7e:58:
fd:fb:22:66:62:82:52:6f:c4:f6:26:5f:f1:d2:b3:69:77:07:
d5:15:e5:14:d1:78:23:41:58:c8:db:dc:dd:f4:0d:8f:dd:f9:
b9:16:62:4a:a6:6b:f2:ee:34:33:c5:df:b3:81:c7:d4:3f:77:
d7:0f:4c:4e:c4:51:9d:34:de:67:13:df:0c:f3:45:e9:a4:21:
95:18:c2:2a:f0:c5:7f:e3:5a:8e:32:dd:d4:f9:8b:5d:6b:43:
f0:39:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:44 2025 by rpki-client