Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa
File: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (raw, json)
Hash identifier: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=
Subject key identifier: FB:52:62:19:29:D1:7C:99:06:21:D0:98:E8:84:C0:65:12:80:F0:B2
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 0199FBDBA2B82840C792C17BA075A2CB3542
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa
Signing time: Sun 19 Oct 2025 09:44:59 +0000
ROA not before: Sun 19 Oct 2025 09:44:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 62.193.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:db:a2:b8:28:40:c7:92:c1:7b:a0:75:a2:cb:35:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Oct 19 09:44:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb52621929d17c990621d098e884c0651280f0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:e3:c1:35:88:b4:a2:8c:b1:29:39:ee:c6:
19:73:7b:0c:70:f4:90:99:91:d6:62:9a:c5:45:08:
17:41:fd:98:a2:ed:fe:5d:3e:12:57:e2:fc:28:43:
a6:ab:6a:f1:d6:51:3e:4f:83:d8:c9:7a:da:57:c2:
67:6c:e5:fc:b0:c2:9d:81:3c:b6:6d:e1:91:83:10:
6e:f5:08:4b:3a:d8:46:8d:85:92:0f:44:37:83:40:
05:d2:a5:07:0f:02:1c:cb:a3:3e:17:47:56:a3:1c:
6f:04:d8:2e:2a:9e:5f:43:aa:71:af:7d:c6:48:28:
eb:9e:30:94:c2:0a:5d:d7:d8:1e:4c:3a:71:3b:d8:
c7:26:0f:18:2e:81:18:68:81:66:12:f3:3b:ab:f4:
08:33:b8:df:42:7e:1c:73:95:f0:80:b9:fd:eb:e2:
e4:29:ec:99:11:88:cf:15:31:e0:e3:3b:08:94:49:
7e:63:a2:48:1c:b7:37:99:fd:05:8b:09:10:d0:0b:
5d:ce:34:36:55:15:d8:34:c2:b5:9d:e9:ea:3f:ed:
7a:ca:11:ce:8a:8c:5d:02:2f:1a:49:73:d8:d6:63:
d0:7a:cc:ce:61:d0:d8:f5:0a:b6:92:bb:ea:b5:79:
5a:20:ef:fc:ec:e6:6b:84:39:30:83:f6:5a:90:f0:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:62:19:29:D1:7C:99:06:21:D0:98:E8:84:C0:65:12:80:F0:B2
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.193.192.0/20
Signature Algorithm: sha256WithRSAEncryption
13:7b:c4:d4:36:f2:d9:60:f5:31:4b:ce:e3:d5:48:e5:01:7a:
70:e0:ce:25:7a:9d:85:cb:16:c9:d6:cf:ac:40:cc:b1:b3:cf:
1b:c6:86:cf:15:42:ae:66:cd:4c:c8:ac:96:c4:28:1a:3b:c5:
f7:a3:35:5e:0f:03:2a:ab:cc:ac:e8:aa:1c:a6:2b:1c:e7:f2:
a1:7a:0a:a1:f3:ec:32:b4:28:3a:be:ae:f0:48:ed:d4:c6:09:
d6:b3:66:96:6b:af:91:a9:e4:01:d4:f9:53:e7:92:57:a1:6d:
9c:c0:53:4d:6a:df:64:2e:82:5e:78:ce:40:62:ab:d9:00:cf:
9a:30:3f:28:60:c5:93:19:07:99:42:cb:d9:01:af:b2:54:fc:
e3:ff:b4:e1:f4:98:87:c7:c1:59:27:d6:4b:87:b0:93:e6:4d:
ca:2a:33:c0:b3:e7:ca:13:a3:a0:0c:fe:06:0f:20:ee:b7:15:
02:66:73:c4:37:a6:64:2c:a3:63:43:84:0d:de:6a:d6:c5:d4:
1f:a3:30:9a:67:79:a6:23:0b:4a:50:31:70:8c:18:f0:21:85:
ee:5b:5c:7a:07:6c:bd:46:d8:44:a6:02:ad:51:50:5a:d7:90:
cf:40:de:fb:1d:02:89:01:0c:f4:04:7f:04:06:ed:a5:f8:8c:
f6:87:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:27 2025 by rpki-client