Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa
File: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (raw, json)
Hash identifier: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=
Subject key identifier: 2F:D3:F9:8D:C7:B5:08:55:10:7F:C9:03:71:19:D2:28:C3:51:83:A6
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019874C6994943DED33B77F2A522D2C49B52
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa
Signing time: Mon 04 Aug 2025 11:10:28 +0000
ROA not before: Mon 04 Aug 2025 11:10:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212036
IP address blocks: 194.26.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:c6:99:49:43:de:d3:3b:77:f2:a5:22:d2:c4:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Aug 4 11:10:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd3f98dc7b50855107fc9037119d228c35183a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:62:b4:58:ac:7a:48:fd:9d:10:3e:d2:ac:
1a:ac:fa:60:30:7e:cd:7a:0b:46:04:24:5d:e7:35:
f1:c9:6e:11:b4:d3:88:60:bf:d0:f8:1d:cf:ba:c9:
f9:02:95:3a:b3:41:56:ad:14:4b:be:a7:c0:d7:e8:
d5:50:b1:a1:20:07:e5:21:8d:05:eb:66:8c:19:e9:
04:a4:6b:4e:01:2b:90:e8:94:1f:4f:cb:71:18:9b:
9a:c0:59:9a:7a:5f:5c:eb:89:fb:94:79:ac:4e:b3:
6c:31:20:00:60:d1:97:6a:71:12:77:2f:1a:59:ad:
f7:5c:2a:22:07:38:9a:36:25:08:57:d9:4b:13:38:
45:79:3a:15:0c:53:27:1c:e4:50:25:2f:bc:de:34:
d7:35:04:70:9a:69:33:c6:0d:f2:87:25:e0:93:f4:
32:fa:98:b1:ad:70:c0:5a:a3:da:94:df:8e:d7:93:
65:b2:79:c8:46:17:51:37:1f:18:21:ce:31:40:0a:
4b:50:c4:89:f8:2f:50:28:fa:ce:b9:bd:ec:d2:ad:
94:ae:df:79:50:f4:dc:99:cd:c6:c3:99:7a:ea:ab:
a0:c6:0b:89:28:bb:e4:b3:38:d4:0b:54:1a:48:8a:
75:a1:e4:79:91:ed:60:c3:a9:6a:07:e0:18:ea:fd:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:F9:8D:C7:B5:08:55:10:7F:C9:03:71:19:D2:28:C3:51:83:A6
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.99.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a6:fa:7f:3a:70:a4:7c:9c:4e:8f:28:8d:49:cb:ec:4f:5d:
ce:3e:47:08:e9:d4:32:00:b6:ff:79:61:0d:8a:b2:e2:d7:3e:
4a:a5:92:a9:e4:8b:7a:ae:cb:dc:24:8d:2f:3b:08:ee:ac:8c:
ee:d9:73:8c:22:bf:42:3a:cd:c5:a2:88:b6:17:c1:97:e2:b5:
e1:49:7d:96:1c:ed:d9:a7:c7:b6:32:4b:f4:61:7e:6d:cf:40:
60:fa:19:85:88:5b:36:69:87:e5:6d:f8:0c:6b:aa:e6:d4:60:
de:ab:95:67:6a:6a:1d:b1:65:f5:c0:16:55:ec:5f:88:67:20:
03:72:02:a4:ff:e8:81:4d:7a:4c:c9:a9:f8:73:9e:60:77:98:
77:c1:b0:6d:7e:16:14:41:dc:47:bc:bf:c6:18:00:8d:2e:24:
83:3a:13:ba:7e:0c:4a:14:41:f3:cf:44:aa:6c:20:db:bb:22:
98:90:45:5e:91:96:78:38:29:67:fe:38:9b:7c:5d:96:22:4f:
0c:bd:80:1b:34:72:c9:bd:2a:04:7d:0d:36:70:40:f5:11:ea:
b8:2f:5e:ff:8e:56:d4:f7:d5:98:be:bb:2e:88:72:6c:ef:48:
31:48:b5:f4:31:3c:7a:77:e2:41:72:3c:68:7f:b9:06:e2:00:
7a:a0:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:17 2025 by rpki-client