Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/9tEl5jFrNSXsCYofc7NSx1FP1cI.roa
File: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (raw, json)
Hash identifier: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=
Subject key identifier: F6:D1:25:E6:31:6B:35:25:EC:09:8A:1F:73:B3:52:C7:51:4F:D5:C2
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019999789D921AE36E718B4F2F7991989F03
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/9tEl5jFrNSXsCYofc7NSx1FP1cI.roa
Signing time: Tue 30 Sep 2025 07:14:02 +0000
ROA not before: Tue 30 Sep 2025 07:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15682
IP address blocks: 91.236.171.0/24 maxlen: 24
212.74.232.0/24 maxlen: 24
212.74.234.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:78:9d:92:1a:e3:6e:71:8b:4f:2f:79:91:98:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Sep 30 07:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d125e6316b3525ec098a1f73b352c7514fd5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:3b:bf:56:ad:ab:35:3d:8d:3a:fe:41:a6:
3a:61:70:a6:8b:c2:e0:f9:8c:73:2c:7a:f0:ef:3f:
c8:47:80:93:29:6f:0d:89:17:53:d2:14:e4:ee:64:
7f:52:ea:4e:22:e1:0b:71:93:2d:c1:f3:a0:29:0e:
fe:45:ed:38:85:29:6c:e3:94:dd:43:98:58:77:1d:
73:cf:4e:11:1c:c9:a3:9e:0f:1c:70:af:95:f3:00:
27:3a:6c:b2:56:22:1c:da:61:a6:11:0f:55:05:96:
e2:32:32:e3:62:82:83:1c:93:f8:6e:68:94:07:17:
a8:87:32:0e:cc:c4:3b:e8:64:a3:01:19:d8:af:68:
8f:b6:a7:15:af:a9:8b:34:a8:65:ca:d4:fa:a7:6f:
e5:df:70:9b:e2:6a:f0:7b:27:93:b4:54:11:af:29:
74:71:3a:fe:d2:d9:f3:9b:3b:10:f7:45:d4:e5:0c:
c0:b5:59:5d:af:e1:ea:38:c6:bc:8c:d8:08:18:d6:
04:06:ed:45:8d:14:99:20:4a:29:f8:68:52:53:1f:
e2:80:88:93:66:57:3e:11:c6:73:65:27:42:3f:71:
56:6a:9b:9d:14:68:01:03:d8:f8:f5:6b:86:a2:20:
c8:87:22:ef:de:29:0a:ac:3e:bb:f0:33:bc:c6:d3:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:25:E6:31:6B:35:25:EC:09:8A:1F:73:B3:52:C7:51:4F:D5:C2
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/9tEl5jFrNSXsCYofc7NSx1FP1cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.171.0/24
212.74.232.0/24
212.74.234.0-212.74.236.255
Signature Algorithm: sha256WithRSAEncryption
16:0e:17:a4:a3:92:d4:fc:0b:03:61:bc:14:48:06:44:34:a0:
04:8c:34:18:69:0a:4f:25:6f:f7:2d:31:ec:a8:a8:fb:dd:d4:
f4:00:75:a3:13:22:0e:3e:21:c5:f2:34:16:5e:f8:95:d1:b0:
4e:e8:4c:35:75:48:b5:ce:55:00:4f:fa:f6:88:21:aa:2d:b7:
a0:99:4d:ac:54:c5:e7:d2:36:9b:9a:a8:10:b6:56:4c:b4:7c:
52:1f:d9:73:a2:12:84:81:28:36:4f:3a:38:36:1e:42:83:af:
53:d7:5b:eb:9e:9f:d1:05:12:a2:0f:48:8f:80:00:e0:aa:fa:
86:e4:3f:46:44:53:6f:7d:cd:ae:5d:66:e7:6b:6d:f3:f9:d3:
ef:9f:c8:7f:e8:b3:5e:d0:90:73:98:27:f1:4a:21:cb:65:e4:
ca:49:2d:ca:36:8a:c1:f1:6d:7c:75:e7:a0:d6:c9:0b:54:21:
f5:a8:59:0c:37:6f:3f:b4:07:8d:1a:d1:45:8d:6c:d1:74:e4:
15:0d:86:0a:72:af:85:08:2b:90:bc:4e:17:91:a6:72:09:ad:
4c:fa:16:3d:f2:72:ba:ec:74:12:ca:b6:c6:70:8b:d4:9a:07:
25:92:16:ba:6f:ae:01:df:46:f2:c3:c8:21:cf:78:b5:31:95:
f7:3d:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:09 2025 by rpki-client