Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T9rhAZy-8pFA134zV_Y5wdb_-5U.roa
File: T9rhAZy-8pFA134zV_Y5wdb_-5U.roa (raw, json)
Hash identifier: tpWItJqdJmVzFJcJ+z6c1xrOnt5/iwd6erKqq3kysTc=
Subject key identifier: 4F:DA:E1:01:9C:BE:F2:91:40:D7:7E:33:57:F6:39:C1:D6:FF:FB:95
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197B09E25029E20559A3BD158F1C02C5D80
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T9rhAZy-8pFA134zV_Y5wdb_-5U.roa
Signing time: Fri 27 Jun 2025 09:00:43 +0000
ROA not before: Fri 27 Jun 2025 09:00:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:9e:25:02:9e:20:55:9a:3b:d1:58:f1:c0:2c:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 27 09:00:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fdae1019cbef29140d77e3357f639c1d6fffb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:40:d4:cb:0e:99:a8:f0:58:37:49:de:70:
40:a6:3f:5c:c8:f0:00:ae:c8:cc:76:2e:98:fe:39:
93:25:e9:13:57:3d:a6:9d:8b:f3:c2:11:32:6a:0c:
6d:a3:cc:83:4c:c5:3b:a7:83:50:95:51:a8:32:dd:
d6:c5:b5:a7:f6:00:1b:0f:85:16:d6:2f:59:41:f6:
ce:c3:b9:56:36:e0:79:5d:71:d1:34:19:ad:a3:cc:
54:a9:9c:80:13:b7:7b:5a:db:42:91:49:a9:20:95:
ac:89:0f:50:93:21:47:de:a1:bd:37:e1:37:dc:60:
c2:79:86:f4:3e:fd:9c:00:73:7f:79:cd:2a:b4:00:
2d:7b:a5:18:14:38:e0:fd:bd:19:52:f6:12:2b:cf:
a7:64:23:0b:c2:e5:3d:e5:46:6c:06:03:92:9e:d9:
99:ff:df:4e:c8:c8:d0:be:0a:4a:bb:1b:fc:c2:4c:
45:5f:fe:bb:8f:46:c2:a4:13:b8:c1:1b:9a:d1:12:
16:00:f6:d5:d5:ef:92:e1:23:07:57:9c:95:20:67:
b4:7b:a2:0b:75:83:5d:cf:b7:08:a2:a2:1f:96:c8:
8d:a9:79:60:3a:66:86:c1:76:2e:ea:f4:11:e8:ad:
e3:8c:11:94:dc:34:b7:d0:bd:a7:68:63:d6:7f:b1:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DA:E1:01:9C:BE:F2:91:40:D7:7E:33:57:F6:39:C1:D6:FF:FB:95
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T9rhAZy-8pFA134zV_Y5wdb_-5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1e:e3:f4:49:af:f1:38:52:85:b5:5a:21:ec:ae:c9:44:8f:
e3:e1:b1:d4:5b:25:d8:81:9b:2e:6d:d6:71:9f:a4:14:77:e2:
9d:ef:22:92:99:e8:92:85:8f:8a:a9:90:1f:e6:43:db:84:75:
f0:63:3f:a2:c5:eb:75:94:f2:04:f4:a8:55:23:96:58:ea:15:
63:9c:3a:76:88:f0:14:10:cf:1b:45:73:cb:b7:e2:31:80:e9:
b4:d3:ab:38:b8:f7:4b:55:d5:a3:01:f7:11:be:3d:30:03:fd:
f4:21:b4:ed:02:9b:d6:32:6b:b8:94:ec:46:8b:78:0c:75:d7:
88:7c:12:f0:a6:e4:40:6a:a6:95:e2:1c:4e:ac:a3:ca:c2:30:
32:67:06:c6:18:d3:d9:a7:cb:f6:b7:16:a1:61:0e:38:ea:c9:
f7:2b:7c:d6:1b:9b:1e:71:bf:69:c7:75:c4:eb:0c:69:6a:f3:
77:5a:74:ff:53:b4:17:10:7b:f6:4d:e3:3f:de:c9:30:3a:2b:
7a:50:83:ac:c6:f6:9f:8f:41:60:3b:f6:1e:a8:3f:3d:f9:69:
fe:b6:6e:4e:77:4f:cd:dc:db:06:dc:df:ef:b2:b8:e4:34:a5:
de:0a:b6:8f:e0:ea:8b:21:ad:4b:47:aa:13:a2:f3:1f:8a:b8:
d2:c3:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:13:34 2025 by rpki-client