Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/_M_h1-9zAN0bMB1vg7c8ROF5VAs.roa
File: _M_h1-9zAN0bMB1vg7c8ROF5VAs.roa (raw, json)
Hash identifier: 8R7gKy3wzWC7YJoDHki/Obg/Smy+MMmINl0mUe/Kcmo=
Subject key identifier: FC:CF:E1:D7:EF:73:00:DD:1B:30:1D:6F:83:B7:3C:44:E1:79:54:0B
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0199CE8700EC62232246DF2F92DBAF806E0F
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/_M_h1-9zAN0bMB1vg7c8ROF5VAs.roa
Signing time: Fri 10 Oct 2025 14:29:38 +0000
ROA not before: Fri 10 Oct 2025 14:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 37.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:87:00:ec:62:23:22:46:df:2f:92:db:af:80:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Oct 10 14:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fccfe1d7ef7300dd1b301d6f83b73c44e179540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:ad:c2:e6:71:8e:d4:38:a8:36:d2:b7:98:
39:e1:ec:ee:1b:0a:f1:12:c8:a4:fc:1d:e5:87:d0:
af:6a:bf:5e:44:e3:18:1b:83:22:0b:cf:2a:b7:50:
21:48:e8:9c:65:6b:b4:1b:65:de:4d:54:8a:f0:62:
d1:56:44:de:87:f3:b7:c0:4d:2d:4d:52:78:4e:44:
8d:e0:8f:03:66:7e:19:74:33:25:04:ee:a1:5f:7a:
3f:2e:20:45:dd:43:d0:c0:0c:15:79:8e:12:8e:4e:
c3:8b:e4:6f:82:57:ca:8b:55:5b:b8:74:f1:74:42:
92:e5:d6:2c:d6:67:b6:34:37:d0:e6:bb:a1:36:cf:
99:5a:0c:06:6b:fa:59:13:31:7c:1a:92:e2:3f:88:
30:33:af:d8:36:46:a6:6b:2c:d9:93:6a:05:26:93:
ad:17:ae:31:d4:7f:24:6c:3b:6f:26:df:19:29:7a:
ac:2d:03:4c:09:c0:14:e2:5e:ea:eb:81:c7:02:54:
7b:de:37:5e:26:af:d6:6c:1b:5e:a3:41:32:e9:ef:
1c:53:85:49:a7:85:17:9d:d0:97:9d:65:e8:16:fc:
fe:02:db:74:46:f0:e3:be:35:ed:67:a9:ab:1d:99:
22:9f:09:bc:e4:75:f2:1f:7c:3b:5b:32:bc:08:81:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:E1:D7:EF:73:00:DD:1B:30:1D:6F:83:B7:3C:44:E1:79:54:0B
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/_M_h1-9zAN0bMB1vg7c8ROF5VAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b2:f3:77:7f:3b:23:88:55:0f:a4:3b:38:08:ae:83:9a:2b:
b5:c9:49:96:d4:49:9e:af:db:4d:53:6a:54:9a:d7:cd:e7:93:
f9:f6:06:08:8f:e2:15:51:34:0e:cc:ec:1c:75:5d:75:79:ea:
dd:7e:71:12:7c:37:39:6d:37:75:01:fc:96:cd:5c:50:e0:8c:
d4:04:25:5f:33:c1:5f:47:b0:83:91:76:1b:f8:ff:3b:b8:fb:
5b:12:5f:38:e3:ac:be:88:be:0e:1d:f5:aa:3a:d7:78:2f:a3:
7e:19:a3:62:1d:c9:f5:fd:a2:63:16:0f:81:45:5e:1c:50:bc:
88:c3:16:75:8c:15:86:99:4d:b0:17:46:b5:95:fa:d6:5b:c0:
bf:50:3d:19:e6:55:c8:bc:e5:ad:e4:f0:34:2c:bb:59:b4:05:
32:82:41:f8:30:7b:0f:a8:c4:e1:79:f0:06:66:cb:9c:5f:d9:
fd:e5:cd:2f:65:42:e2:87:a0:7b:d9:36:f0:3b:d3:64:df:a0:
84:eb:16:0f:cb:06:d8:e6:65:ae:96:a6:f0:68:b4:b6:a2:c6:
a1:bb:46:dd:43:eb:45:10:28:8b:8d:91:71:71:45:fe:00:f3:
a7:0e:6d:c9:bb:4f:ef:a9:0b:7a:e5:b5:1e:9e:3d:3b:01:a5:
01:b9:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:27 2025 by rpki-client