Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XGbMNQ0s_8Kn2nw-mFTvy8auKk0.roa
File: XGbMNQ0s_8Kn2nw-mFTvy8auKk0.roa (raw, json)
Hash identifier: RJgGygOblGxDxper+mcN5cFH+nRtlE+OMAWr0MbkOr4=
Subject key identifier: 5C:66:CC:35:0D:2C:FF:C2:A7:DA:7C:3E:98:54:EF:CB:C6:AE:2A:4D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199F1B90A0EB76D563C6B3FF71C233FDC5A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XGbMNQ0s_8Kn2nw-mFTvy8auKk0.roa
Signing time: Fri 17 Oct 2025 10:30:59 +0000
ROA not before: Fri 17 Oct 2025 10:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 109.176.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:b9:0a:0e:b7:6d:56:3c:6b:3f:f7:1c:23:3f:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 10:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c66cc350d2cffc2a7da7c3e9854efcbc6ae2a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:ea:8e:8b:17:b4:83:f1:ec:f5:f2:2c:5c:
f3:48:8e:7c:fb:fb:3d:f6:cd:04:0e:95:a5:e8:bd:
0b:ed:d3:64:86:36:14:63:5a:ac:07:3d:c7:fb:bd:
9e:ff:c8:bc:75:7f:8b:74:63:2c:9a:08:4b:2c:b1:
a1:ba:18:5f:5b:b9:17:d2:31:b7:d0:b4:23:5b:fa:
fc:3e:a7:12:e9:e9:14:2d:d5:ed:56:07:5c:6c:14:
52:97:67:d2:ff:14:8b:f5:7a:46:3e:e0:8f:29:c5:
90:74:7c:d2:cb:c9:a1:f5:12:57:7a:24:e7:1b:92:
1f:09:85:90:ac:52:7a:14:f9:3f:43:de:2e:1b:2f:
a2:d6:3b:1b:15:0b:b1:bc:d4:6e:b4:02:a8:0e:fa:
66:fe:bd:67:1d:19:af:49:9c:52:41:d6:bf:68:ed:
9b:f8:58:5c:b5:62:78:25:47:f4:cf:c3:40:4b:e8:
f4:67:65:91:9c:e4:65:00:de:22:a4:64:00:64:41:
9b:69:7e:4e:4d:71:88:17:5e:e4:67:9d:ad:9a:26:
5c:50:e4:2e:d0:39:6c:6d:80:9c:19:aa:79:f7:ea:
a6:63:29:ce:08:b3:37:2e:6d:87:7f:12:84:a2:31:
14:ba:49:3f:bb:15:49:f0:66:dc:7e:9b:94:b6:da:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:CC:35:0D:2C:FF:C2:A7:DA:7C:3E:98:54:EF:CB:C6:AE:2A:4D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/XGbMNQ0s_8Kn2nw-mFTvy8auKk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.254.0/23
Signature Algorithm: sha256WithRSAEncryption
42:0c:b3:fe:fe:5c:b4:9d:5a:e3:44:8c:91:63:9e:25:19:93:
03:d7:a7:da:72:89:c6:2c:be:0c:05:e3:48:b3:39:89:e7:3e:
a4:b6:6c:61:08:8a:48:a3:72:14:28:36:1c:74:f6:2a:80:74:
a6:69:22:f5:73:87:96:77:ba:45:e7:08:ea:c8:f2:03:55:b9:
a0:45:81:6d:79:84:bf:1c:97:d3:60:a7:f1:11:dd:49:13:54:
fe:bc:d2:02:22:5a:dc:6f:e7:50:4c:07:ba:46:31:ce:d7:37:
ed:2e:82:5d:99:02:f9:8c:43:d8:74:cb:3a:18:10:5f:ba:d8:
55:cb:0d:bd:56:85:65:7b:72:ec:af:f2:e3:d4:20:61:62:e2:
ee:a6:87:3e:51:ac:cb:aa:9a:85:26:ff:14:a6:0e:a5:bb:10:
ac:9b:6a:a4:64:d7:a5:e4:24:cb:58:4e:1d:70:ce:b3:17:f2:
d9:b7:61:47:98:ed:4b:70:7e:d1:3b:7d:6d:55:83:0b:50:0e:
d4:b5:d7:c6:f6:35:22:a1:50:d1:5f:5e:93:22:39:f2:32:cb:
ae:e9:18:62:d6:c4:a2:fe:40:34:b7:b7:1e:60:92:99:df:92:
f9:9e:b5:94:c3:73:82:9c:84:b0:2f:1a:61:ba:46:46:e5:0f:
b3:b5:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:36 2025 by rpki-client