Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/n_bUUF63fJyO6RE2_6rFYsd7xOk.roa
File: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (raw, json)
Hash identifier: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=
Subject key identifier: 9F:F6:D4:50:5E:B7:7C:9C:8E:E9:11:36:FF:AA:C5:62:C7:7B:C4:E9
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 019F23684539F8D84BCB4D85EE8745BA6439
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/n_bUUF63fJyO6RE2_6rFYsd7xOk.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48728
IP address blocks: 185.25.12.0/23 maxlen: 23
185.25.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:39:f8:d8:4b:cb:4d:85:ee:87:45:ba:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ff6d4505eb77c9c8ee91136ffaac562c77bc4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:c1:11:15:94:52:7f:9d:e3:d3:4d:39:65:
e5:f7:ce:99:12:d4:e8:a7:5e:0d:e6:15:a3:39:81:
5c:25:99:4c:e6:de:09:97:e5:0a:49:ba:93:2a:6e:
2b:3d:a7:39:e2:8c:41:b0:c1:d9:3c:db:a4:cd:69:
ce:e9:63:e2:72:d5:b3:4c:3b:a7:06:c7:49:81:87:
e8:de:e5:4b:69:c0:35:70:ae:dc:1c:0c:38:39:0f:
37:e4:83:f5:01:d8:0c:b1:80:95:28:cc:9e:81:79:
ce:8b:27:5e:60:c5:ed:ae:eb:df:0c:b4:64:c5:23:
2c:35:1f:01:01:59:20:c7:ad:82:9c:17:22:59:7c:
94:0e:bb:da:85:b7:b6:41:6b:5b:5c:30:1f:16:ad:
0a:06:c4:47:03:3d:96:0f:47:ea:55:b3:ee:04:7d:
dd:65:41:89:13:62:48:4e:50:d8:db:52:91:8c:5e:
0e:09:2b:21:db:f8:c8:55:af:06:01:5c:c4:10:f9:
c7:82:c1:cf:6a:43:90:32:8f:6f:6a:3c:4c:f2:94:
6e:78:59:fb:16:e0:8f:5d:32:07:d8:23:00:5d:22:
cd:fc:b9:40:9b:ad:36:85:ad:64:0f:cd:94:66:17:
9e:79:59:5c:c1:30:17:21:95:92:0e:2e:71:ad:bb:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:D4:50:5E:B7:7C:9C:8E:E9:11:36:FF:AA:C5:62:C7:7B:C4:E9
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/n_bUUF63fJyO6RE2_6rFYsd7xOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:1d:57:6a:c6:39:b4:40:92:b7:dc:fc:60:52:f4:55:03:b9:
46:54:c9:62:5d:d0:b7:fd:bc:60:7f:ae:26:5b:a2:17:b2:8c:
d9:98:98:dd:19:2a:c5:17:25:7e:46:2c:09:2b:2a:e2:6b:dc:
6e:ee:5f:10:c9:55:1f:79:23:ea:f7:3f:e7:27:9c:e7:52:68:
27:59:c8:a3:ff:c4:36:d3:ed:ca:9a:18:7d:8a:1d:a6:2d:e9:
8e:79:eb:7d:e8:ee:d6:ed:c2:4e:12:1b:40:d3:b6:e5:04:2f:
d7:40:a7:17:5e:e3:9f:58:1f:f4:31:c8:ae:b9:59:27:3c:35:
d5:db:74:cb:f9:c9:3a:45:bc:a4:7e:c9:d2:a6:0f:9d:fe:6f:
a6:03:de:e9:06:96:c6:2f:a8:b5:d1:d0:7f:c6:b9:af:cb:97:
20:5b:14:e0:90:a5:33:37:74:dc:04:5d:e7:c0:5c:a6:d0:67:
6f:3f:a3:6c:13:2e:ea:e7:69:cf:64:9f:4a:2a:26:3f:14:6e:
12:1a:19:82:b2:20:7c:4e:06:09:a2:ca:ea:22:f7:fe:23:6f:
e1:39:d8:65:d4:16:2f:1e:8e:2c:9c:61:43:e8:7c:e1:04:72:
14:90:24:96:53:77:e9:d9:41:c1:2b:e8:e5:31:a2:24:b2:bb:
4f:f3:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:16 2026 by rpki-client