Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b9viCey5jjMNTNQ7ZLK_EmK4O_0.roa
File: b9viCey5jjMNTNQ7ZLK_EmK4O_0.roa (raw, json)
Hash identifier: +qRNWYYE20HosqggAILUvC5d7OA67poSpybAt7yGPi4=
Subject key identifier: 6F:DB:E2:09:EC:B9:8E:33:0D:4C:D4:3B:64:B2:BF:12:62:B8:3B:FD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019885FA38F302E0EB5DCECC6DC55D2BF2DE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b9viCey5jjMNTNQ7ZLK_EmK4O_0.roa
Signing time: Thu 07 Aug 2025 19:20:24 +0000
ROA not before: Thu 07 Aug 2025 19:20:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 45.9.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:fa:38:f3:02:e0:eb:5d:ce:cc:6d:c5:5d:2b:f2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 7 19:20:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdbe209ecb98e330d4cd43b64b2bf1262b83bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:37:66:8a:d5:7e:53:48:24:1a:e1:7b:59:
d8:e6:a3:9e:74:0d:b0:34:06:85:bf:9c:46:42:88:
6b:e8:39:4f:bd:40:01:e8:a6:68:0f:00:50:da:7f:
4c:d2:5a:b9:bb:61:88:9b:eb:6d:d2:53:fd:27:50:
28:9b:f6:7b:bb:d3:a8:2f:3e:90:55:ac:05:f0:df:
47:9c:83:1b:9d:13:5a:ba:2c:0e:be:12:05:69:6e:
4b:19:31:d3:18:22:21:ad:e5:73:50:f0:f1:f8:26:
4e:75:31:c6:45:85:17:2e:5a:94:ed:8d:e9:aa:b9:
ff:1b:74:e5:5b:12:63:24:c3:bc:26:d2:4f:5c:cd:
3e:de:3d:a6:6f:88:d4:a5:b1:10:51:9e:34:c6:a6:
87:25:9b:c0:b1:8e:ff:2e:82:2e:11:7c:10:4a:8b:
2f:7e:e6:1e:e6:1c:71:9b:d8:d2:df:cb:32:b8:dc:
87:e2:e6:fc:fa:36:60:e6:25:97:e5:8e:6f:36:41:
e8:45:2a:11:a2:71:83:49:2d:92:83:d3:e3:91:ae:
51:23:c2:50:05:c3:ab:1c:b3:fd:ce:73:ca:c1:cc:
6b:45:17:0a:82:e6:ce:8c:a5:0c:9e:fc:84:e1:ef:
5b:d3:e3:ed:bd:3d:3c:c3:6c:12:4d:e8:62:cc:0c:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:E2:09:EC:B9:8E:33:0D:4C:D4:3B:64:B2:BF:12:62:B8:3B:FD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b9viCey5jjMNTNQ7ZLK_EmK4O_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:65:cd:64:bc:5b:59:d3:29:05:79:b8:11:b4:5f:37:69:93:
bb:b8:19:31:13:e9:ac:f4:bb:01:6a:d2:44:38:e5:3b:8c:d7:
fa:3d:47:7c:19:1f:fe:cd:68:25:b2:56:a6:0b:57:15:83:69:
eb:56:4d:c7:09:39:a1:42:7c:7c:c8:66:f5:c1:8c:42:bd:b0:
a7:24:cb:30:a8:30:28:c3:ae:dc:ca:9d:5b:e3:89:0c:33:f4:
ae:58:1f:e9:97:c1:22:c3:a1:8d:4a:16:89:04:9c:22:39:6c:
e9:01:68:77:e7:4f:59:38:27:6c:ce:79:05:88:d8:f0:65:8f:
a0:53:cd:cd:fb:b6:45:58:e7:10:4c:56:d0:d5:a8:43:9a:42:
99:6b:f0:f4:13:5d:92:56:e7:3f:21:19:83:8f:95:a1:44:f7:
d5:24:c2:97:09:20:b0:29:d6:70:53:30:df:01:7a:61:7d:0a:
d5:d1:4a:ce:01:8e:66:3e:ad:e5:70:c4:26:38:77:95:f9:7a:
d8:ad:ec:3b:72:0e:7f:28:bf:19:47:30:e5:7a:77:b2:70:77:
53:cc:ac:d0:c8:b4:a7:a0:43:00:54:e4:d3:d5:a4:77:bc:52:
67:2f:74:fe:44:ed:d7:83:c6:86:af:b7:a1:4d:24:40:fe:b6:
64:2f:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:59 2025 by rpki-client