Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I68gpBxABm8r6ofjL7ypiBVbZWM.roa
File: I68gpBxABm8r6ofjL7ypiBVbZWM.roa (raw, json)
Hash identifier: Hgp3q0ShbEcltS1f6yWmhwDyc6XGt9YZ/BMBF3uBBUw=
Subject key identifier: 23:AF:20:A4:1C:40:06:6F:2B:EA:87:E3:2F:BC:A9:88:15:5B:65:63
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199E73820DDC9F11E6FB73E72C82288DB48
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I68gpBxABm8r6ofjL7ypiBVbZWM.roa
Signing time: Wed 15 Oct 2025 09:33:59 +0000
ROA not before: Wed 15 Oct 2025 09:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26141
IP address blocks: 82.153.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:38:20:dd:c9:f1:1e:6f:b7:3e:72:c8:22:88:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 15 09:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23af20a41c40066f2bea87e32fbca988155b6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:f2:4a:24:16:c0:6a:5c:75:17:d5:2f:f8:
fb:45:b0:c8:e0:65:a3:a0:01:a5:fc:cb:27:f9:8b:
13:7f:d5:45:58:d9:2f:d3:e2:8c:4c:b3:3d:fe:75:
ba:36:d6:87:39:d9:c6:5d:87:bd:2e:2e:47:59:ee:
ca:84:a0:07:fb:b1:5c:45:9c:0a:40:75:21:ac:f5:
f6:6f:7a:0c:70:c0:b4:58:6a:bc:10:d4:c3:29:27:
ab:63:80:55:3e:56:3e:db:52:76:93:e2:b4:be:20:
bf:29:25:a0:50:7a:ad:aa:24:99:02:bf:3a:2b:cc:
1f:54:17:f1:ec:6d:0e:ca:e5:5a:e8:02:81:68:16:
a8:5c:73:d8:fc:54:2a:dc:60:d0:b9:aa:73:db:19:
7d:ed:75:cb:85:ca:59:e1:c7:d9:0e:83:83:07:e9:
fc:81:ee:bc:f1:da:85:7f:18:f4:ea:69:b3:32:c5:
c7:d7:69:59:df:58:8c:0d:5b:00:df:be:26:89:4a:
ad:de:ff:cd:bc:35:1c:a2:39:50:0e:83:76:50:0b:
47:ba:0b:8e:0d:32:af:6d:57:36:59:a6:37:80:cf:
be:a9:59:73:7f:51:73:7d:ea:e2:cc:31:ce:35:33:
03:d2:f5:f1:fc:95:f7:4c:ea:54:58:79:da:79:7a:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:20:A4:1C:40:06:6F:2B:EA:87:E3:2F:BC:A9:88:15:5B:65:63
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I68gpBxABm8r6ofjL7ypiBVbZWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
80:5d:6a:cc:95:8f:40:69:b7:9f:34:91:2e:bb:3d:c9:8d:24:
54:69:f0:65:d1:5b:1d:70:3e:3a:19:af:31:90:8d:e0:b0:f7:
7c:75:4f:b0:5b:a8:ad:92:92:29:69:dd:4e:4c:10:5f:12:ba:
c3:12:e6:7a:18:27:3f:e1:17:b9:29:b1:3c:34:51:57:ca:8e:
6e:b1:a8:d6:d4:d2:10:da:d9:10:cf:f9:50:e5:68:75:17:1e:
2d:70:bb:eb:a5:ca:88:94:de:0c:e0:f9:f2:54:87:9d:a6:63:
39:e3:54:6a:ad:be:90:d5:1d:79:18:eb:8c:4e:ca:b0:51:f3:
49:e9:2f:68:1d:a5:70:74:6c:15:87:4c:82:5f:f9:62:bc:31:
a0:02:5b:86:36:ed:c7:4e:1e:28:6b:29:80:c1:11:80:a2:f0:
49:f6:2d:fa:50:a6:8d:ae:9c:af:d1:9b:8c:51:cd:bc:a9:ab:
fe:28:46:89:1d:d5:cc:10:23:a0:cf:b8:76:34:0f:06:9f:b0:
59:11:0c:86:25:ad:8e:a3:e0:a2:00:7e:99:89:7d:fb:c6:00:
be:46:f9:57:29:c8:6a:dd:8c:b5:e1:64:b1:2d:47:b7:dc:cd:
ee:40:91:83:60:24:e5:8d:9f:d1:5b:46:f8:85:da:08:15:62:
09:4c:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:16 2025 by rpki-client