Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oOT9SuaLITiT9yJjX-JgwWY9HPM.roa
File: oOT9SuaLITiT9yJjX-JgwWY9HPM.roa (raw, json)
Hash identifier: OpJ4yzxjDPiPOM8ouQb+cc2NpGcYnvK6FxOyqJh1gUI=
Subject key identifier: A0:E4:FD:4A:E6:8B:21:38:93:F7:22:63:5F:E2:60:C1:66:3D:1C:F3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199F1B908DBBC4B39F7A8844C8D0521E6C4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oOT9SuaLITiT9yJjX-JgwWY9HPM.roa
Signing time: Fri 17 Oct 2025 10:30:59 +0000
ROA not before: Fri 17 Oct 2025 10:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 82.153.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:b9:08:db:bc:4b:39:f7:a8:84:4c:8d:05:21:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 10:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0e4fd4ae68b213893f722635fe260c1663d1cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:29:e0:fb:8c:3a:1a:7f:ea:7f:02:ee:f3:
e0:71:9e:44:08:e7:97:63:7d:4c:85:c4:c5:59:12:
c2:b6:01:c1:66:14:4d:45:32:89:e5:6e:12:76:2c:
5d:8b:4d:54:15:c3:7e:17:19:44:32:f3:6f:bd:4f:
63:fe:eb:a8:5c:dc:3f:be:f3:36:d0:7e:58:fa:06:
db:62:0e:89:be:e6:db:6a:51:c1:e9:0d:6c:fb:41:
5d:63:7d:10:79:b7:3f:5e:21:13:68:75:5f:df:85:
59:82:be:ee:aa:85:38:e2:0f:dd:9a:82:c9:ec:eb:
3a:a4:07:82:2d:d7:24:3c:f9:86:b7:00:04:ba:c0:
65:41:dd:19:38:df:68:65:0e:91:2a:75:a3:97:b7:
1f:47:8d:a7:b3:48:cc:40:c5:dd:22:75:8a:00:ef:
f1:14:8a:2d:37:ac:18:a6:3b:a1:b8:e4:13:08:04:
5a:5c:78:dd:85:af:d8:56:21:a4:d3:ed:73:f4:2e:
99:5c:a1:29:1d:43:e2:2e:01:77:a1:f9:16:11:55:
4c:34:a4:e1:94:9e:1f:3d:f8:98:bb:56:69:8e:30:
d9:2f:36:53:66:93:cb:a6:c2:34:39:43:6d:78:a6:
b6:b7:b3:3f:0b:1b:e2:d6:3c:69:70:7a:ef:1c:24:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E4:FD:4A:E6:8B:21:38:93:F7:22:63:5F:E2:60:C1:66:3D:1C:F3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oOT9SuaLITiT9yJjX-JgwWY9HPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.212.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bf:8e:60:75:28:89:64:c9:e3:21:47:79:ac:98:41:72:83:
a8:c4:78:98:a1:98:b7:6c:34:27:2e:47:28:af:23:28:fd:2b:
d6:b7:48:ae:0c:9f:f6:22:c7:6b:2a:0d:3b:b8:10:69:cb:6a:
1a:9b:2f:e1:61:05:8a:09:b7:d0:9b:27:07:bb:6a:bc:3b:59:
2d:af:73:b3:05:d3:bc:fe:c9:e9:72:87:7f:ea:21:c7:4f:7b:
26:76:1a:d6:77:73:3a:f7:93:4d:57:39:06:70:cc:d7:1e:72:
98:c8:16:f1:f9:15:6f:ad:50:d6:12:60:e1:fe:b2:a7:7b:4c:
e1:1e:d4:fd:63:e7:b8:5e:9b:fe:14:e4:f3:ce:4e:39:05:66:
29:e8:da:5b:24:95:b9:93:fb:f7:ed:1d:00:38:d6:32:d4:d0:
38:da:3b:18:28:85:39:b1:aa:13:bc:13:b6:b8:3a:4a:8a:6e:
ea:bb:b7:b9:65:40:28:11:d8:c8:15:d5:2c:8f:6d:c1:61:84:
bb:f9:5d:b5:f3:95:46:7f:93:15:ae:11:59:d3:ee:00:57:26:
91:d4:5f:bc:29:c5:f5:ad:c2:b8:d5:b4:df:7f:4e:81:26:4a:
09:c3:5c:e6:09:3f:99:9a:33:2f:ae:e8:bc:b7:5d:7d:d6:5c:
eb:7f:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:55 2025 by rpki-client