Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9NYm3tG9eZ-7CUL1L71yCfYf8oc.roa
File: 9NYm3tG9eZ-7CUL1L71yCfYf8oc.roa (raw, json)
Hash identifier: iDMDCic0ncmc0gdVztusG8bYFN96YRva4Ai4a58o/Mc=
Subject key identifier: F4:D6:26:DE:D1:BD:79:9F:BB:09:42:F5:2F:BD:72:09:F6:1F:F2:87
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019753941CFB971D8239155F720134B8512D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9NYm3tG9eZ-7CUL1L71yCfYf8oc.roa
Signing time: Mon 09 Jun 2025 07:25:05 +0000
ROA not before: Mon 09 Jun 2025 07:25:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:94:1c:fb:97:1d:82:39:15:5f:72:01:34:b8:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 9 07:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d626ded1bd799fbb0942f52fbd7209f61ff287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:9e:da:02:6f:4c:75:1e:a1:b4:8a:44:6b:
ca:12:0a:cb:a2:70:2f:ae:cd:97:b7:fa:ee:52:e0:
44:60:4f:a2:2f:04:59:75:c3:cb:4e:b9:a8:55:64:
81:3d:80:c5:46:82:60:e7:e3:b8:a7:c1:ed:b6:4c:
48:af:ce:ca:5e:9f:08:b5:98:b8:94:91:f5:25:6d:
a2:ba:95:ef:50:64:e0:3c:ed:be:80:61:b2:e9:12:
7e:42:75:bd:ad:d1:4d:dd:83:be:f4:e7:57:f0:64:
6b:7a:4f:48:62:2b:4c:63:7e:1d:29:f1:64:2e:ed:
d7:59:f6:ae:75:b8:d0:d1:03:a2:49:9a:74:22:62:
56:f9:b8:17:e9:0b:33:e7:48:9b:38:2a:f1:f3:9f:
89:cd:79:2f:0f:84:a0:8a:b5:c8:39:02:6e:68:e5:
07:6a:83:fd:3f:3d:98:fa:57:d8:e9:78:e1:61:04:
e4:8d:fa:65:d6:00:8e:f0:d9:60:67:6c:6b:80:fa:
4e:30:0a:f8:7c:93:af:db:d3:4a:a4:f6:9f:77:7d:
c0:7e:e0:58:25:6d:d4:ef:18:05:08:66:ca:2e:9f:
65:e1:8f:1c:44:d7:f3:40:a6:56:78:e3:71:73:16:
a4:3f:75:9f:3a:ed:d9:b9:fa:2b:d8:aa:82:7e:fa:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D6:26:DE:D1:BD:79:9F:BB:09:42:F5:2F:BD:72:09:F6:1F:F2:87
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9NYm3tG9eZ-7CUL1L71yCfYf8oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.222.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ac:51:18:a2:82:5e:34:fe:2c:26:b3:0d:c4:b0:58:5c:33:
83:41:09:5c:27:c4:34:ed:08:64:13:e7:f6:c6:e2:a7:c8:ed:
3d:c9:6f:fa:f2:21:c5:1d:0a:e7:dc:d2:57:7a:d2:6c:af:d0:
be:1a:bd:a4:2d:74:e3:6e:ad:f4:08:40:8f:5c:b6:e1:ce:dc:
2a:dd:45:96:c2:0a:12:f1:85:9b:4b:e6:60:21:03:78:f0:f1:
41:9c:44:95:f4:0c:b5:21:95:3d:91:44:c5:44:0b:91:bc:71:
e1:5b:ff:58:b0:d8:0c:24:a9:75:e6:d2:f8:3a:d7:18:2f:60:
6b:4c:af:10:4f:63:ed:64:bb:33:7e:b2:c8:18:ed:0d:ba:24:
f1:3d:e9:b0:8f:49:cd:2f:7c:2d:0e:8a:46:1c:b0:63:e6:99:
35:98:5b:ce:4e:4c:12:79:d2:b7:c9:7b:21:e4:3b:91:e5:f3:
b0:3e:19:e4:bb:17:f8:99:37:83:2a:67:30:db:9d:fd:c5:16:
44:f7:51:1a:1f:e6:81:c9:65:87:b8:67:37:60:b3:06:b4:d3:
77:22:cd:1a:10:d7:59:3e:f2:37:eb:0e:41:00:fb:f0:0c:31:
79:fb:9c:4a:d0:57:0a:c5:6f:95:c2:67:aa:80:ad:6b:f7:61:
83:e0:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:57:16 2025 by rpki-client