Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/tnM9DnrSRmOo18qNgvvkTy18Wls.roa
File: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (raw, json)
Hash identifier: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=
Subject key identifier: B6:73:3D:0E:7A:D2:46:63:A8:D7:CA:8D:82:FB:E4:4F:2D:7C:5A:5B
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 0199BE1131DA6ED710DA6AFF44EA4EA5752F
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/tnM9DnrSRmOo18qNgvvkTy18Wls.roa
Signing time: Tue 07 Oct 2025 09:47:01 +0000
ROA not before: Tue 07 Oct 2025 09:47:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211568
IP address blocks: 185.224.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:be:11:31:da:6e:d7:10:da:6a:ff:44:ea:4e:a5:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Oct 7 09:47:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6733d0e7ad24663a8d7ca8d82fbe44f2d7c5a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:1f:58:63:e2:80:46:38:96:6e:d2:3f:4b:
13:1d:ae:8b:61:a8:14:cb:4e:12:f3:9e:f1:7b:65:
37:d1:2c:15:3d:fa:bd:47:e1:ba:bb:8d:bf:24:51:
d1:d0:af:ff:1d:b2:37:68:de:22:d9:9f:d4:4c:6b:
a0:e0:a1:61:50:34:7e:05:33:48:69:50:db:1e:24:
a8:f8:e5:86:54:0e:7e:5f:f3:89:40:48:aa:79:e2:
12:db:e5:6b:71:a0:b8:34:1b:ab:d8:c3:17:a0:00:
fa:52:b0:6a:12:1e:bd:50:c2:4c:9a:8f:87:e9:3d:
a7:6f:14:05:2f:4d:06:f4:83:63:13:8d:72:48:19:
bb:93:4e:89:d2:2c:b1:10:29:57:53:c4:e7:70:2a:
16:38:33:a0:3d:21:45:a9:8c:61:56:6f:eb:7d:db:
05:18:b1:7a:d7:97:82:ba:bf:0c:5d:19:ec:1f:46:
5d:fd:87:64:25:db:6f:14:eb:e8:3e:8a:5c:c3:bd:
5b:70:09:5d:05:8e:cf:64:c1:1b:70:86:b3:e0:4b:
66:bd:c9:d6:aa:bd:81:d7:8a:16:f3:56:a9:2d:eb:
cd:c6:d2:b6:44:84:62:db:d5:81:6e:7d:b1:00:11:
1f:b0:05:df:cb:a9:f2:d9:45:a9:08:9a:6c:20:f7:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:3D:0E:7A:D2:46:63:A8:D7:CA:8D:82:FB:E4:4F:2D:7C:5A:5B
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/tnM9DnrSRmOo18qNgvvkTy18Wls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:19:00:c0:e4:cb:a6:db:47:31:aa:8a:89:cb:d4:16:dd:df:
9b:f1:5f:01:8c:0c:2a:ca:aa:b7:87:e0:87:b8:45:00:b2:1f:
3f:ab:e8:dd:21:b7:9a:d0:ba:fc:50:6c:88:0a:d5:b5:e0:52:
d3:ab:b8:b6:66:4a:57:e3:b1:8b:1e:06:88:d7:a1:be:ce:16:
59:e9:6d:ea:8b:d5:92:76:5c:30:cb:58:c0:e3:8d:6c:dc:02:
3a:8c:fb:2a:4a:f2:63:88:51:41:51:f4:85:9a:69:d6:87:c1:
dc:f8:d1:c4:34:df:03:d6:ec:0f:17:7b:57:4c:0e:93:f3:d7:
9a:1a:4c:32:35:46:5d:71:4a:2e:d8:64:cc:cc:91:c5:50:d8:
aa:ec:f6:5a:12:f3:7e:0e:6b:ef:3d:85:6e:0c:33:b3:45:db:
4b:c8:61:b9:35:cb:21:4e:89:36:b5:57:fc:f2:b7:6b:e7:5a:
34:7e:b1:cc:b1:a5:8f:58:cf:2b:b5:db:d2:34:ef:1e:94:4a:
f6:49:cb:d4:c8:e4:10:cd:62:7f:4c:08:b5:84:16:05:8c:6d:
cf:ab:e0:7a:a9:9c:a8:a6:4f:e6:1e:d4:5d:d1:1d:75:b1:fe:
cd:54:44:6c:ff:6d:9a:08:b9:64:b1:8f:45:f4:95:92:ea:9e:
a5:3e:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:10 2025 by rpki-client