Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/t9cMUxvikbT-puwHblOe9z97QHQ.roa
File: t9cMUxvikbT-puwHblOe9z97QHQ.roa (raw, json)
Hash identifier: r/s40Ua5KoUJDVObSaE57ggRULCLKWYn/PjeYW7Wd/k=
Subject key identifier: B7:D7:0C:53:1B:E2:91:B4:FE:A6:EC:07:6E:53:9E:F7:3F:7B:40:74
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0199A9FF44CB6E14F4CE41579195FA6DF0BA
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/t9cMUxvikbT-puwHblOe9z97QHQ.roa
Signing time: Fri 03 Oct 2025 12:15:02 +0000
ROA not before: Fri 03 Oct 2025 12:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.213.22.0/24 maxlen: 24
2a11:840:1::/48 maxlen: 48
2a11:840:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:ff:44:cb:6e:14:f4:ce:41:57:91:95:fa:6d:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Oct 3 12:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7d70c531be291b4fea6ec076e539ef73f7b4074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:ca:34:24:fc:97:38:fb:57:34:c3:28:75:
28:4f:47:63:64:c7:95:da:ed:4e:27:12:a9:48:1f:
33:9f:10:94:0a:f1:92:e6:e4:77:52:cf:c7:2a:f1:
c4:69:5f:dc:f8:d4:7e:f1:99:33:fa:d1:3b:29:f8:
f3:ba:0a:88:9f:60:0d:77:d7:43:a5:77:00:1f:11:
a5:7c:b0:08:ee:e8:43:77:b9:93:60:89:37:98:0d:
66:89:25:34:0a:0b:6d:8b:55:88:9e:23:8b:25:51:
84:58:f7:18:a1:b0:00:bb:60:ed:b1:4a:73:86:e1:
44:38:17:d7:c3:3e:e0:29:1e:59:a4:d7:8b:45:eb:
e1:79:c9:96:76:82:0d:72:b6:b8:b4:73:45:5c:ae:
d6:ca:e4:06:d1:f7:be:a3:88:6a:84:89:27:4e:46:
18:da:30:77:6a:b5:b1:4b:7c:29:86:47:0e:87:2c:
2b:f0:11:d5:7a:83:b8:5d:e1:e4:c4:6c:f2:33:2a:
d4:e2:ae:c1:7c:0a:4b:16:a5:1b:cd:7f:54:1f:51:
e9:fe:95:e7:2b:25:88:c8:95:1a:3e:68:7f:c1:67:
28:a1:e0:87:73:0d:34:28:1f:4b:9f:e7:8a:b6:97:
2b:36:80:a7:50:0e:f8:db:b2:33:6c:22:d3:d8:3b:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:0C:53:1B:E2:91:B4:FE:A6:EC:07:6E:53:9E:F7:3F:7B:40:74
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/t9cMUxvikbT-puwHblOe9z97QHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.22.0/24
IPv6:
2a11:840:1::-2a11:840:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:bd:25:d4:78:bc:29:6d:cd:10:9a:c9:4b:19:d8:e0:fe:4a:
87:21:f5:6b:d7:78:e8:64:29:75:5b:a5:7b:61:8b:ab:1c:dc:
33:ca:0b:7d:91:e1:83:ae:65:af:5a:19:73:b8:6f:ff:56:85:
98:d3:71:ab:34:26:c5:ef:65:20:4a:18:02:34:f6:05:47:84:
f2:af:f7:cb:d4:eb:b1:8c:96:3f:01:0f:4c:6a:9b:9e:9c:a9:
0b:d7:4b:86:bb:fe:87:1e:9d:01:8f:7f:99:22:d0:f7:8b:bc:
d0:b0:4f:cf:30:85:2a:a0:29:fe:8d:d5:d8:37:6c:9a:a7:46:
73:64:aa:0e:58:ae:0c:d4:e5:39:01:c1:f6:31:eb:68:73:6e:
0b:b4:97:d2:d9:3c:8f:f4:38:36:4a:34:e3:8c:95:3b:db:3d:
51:c2:68:33:0f:c0:e1:3f:9c:e6:27:43:ee:05:62:c7:d1:95:
4f:b7:f8:75:f0:3d:20:fa:6a:09:9a:6a:5a:fe:b6:b8:30:2f:
dc:a4:88:2d:62:f5:e2:cc:c5:9d:bb:64:58:43:c9:c8:50:97:
48:2c:8e:22:9f:d3:40:c3:a0:06:6d:45:a7:ef:b4:74:6d:b1:
8d:b1:22:47:31:b3:c5:f5:f7:21:9e:9b:6f:2b:11:fa:af:24:
4e:aa:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:43 2025 by rpki-client