Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/9Z8ukRTnHwxerDAtA0qnDlPQEbU.roa
File: 9Z8ukRTnHwxerDAtA0qnDlPQEbU.roa (raw, json)
Hash identifier: 4obqNmEm+V3REFFE1EbEGvUeSn00rn6jf5Iod6y+GCY=
Subject key identifier: F5:9F:2E:91:14:E7:1F:0C:5E:AC:30:2D:03:4A:A7:0E:53:D0:11:B5
Certificate issuer: /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Certificate serial: 01999EEA0C1B158658EADF84E5A4C08BEB32
Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/9Z8ukRTnHwxerDAtA0qnDlPQEbU.roa
Signing time: Wed 01 Oct 2025 08:36:02 +0000
ROA not before: Wed 01 Oct 2025 08:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201098
IP address blocks: 185.174.84.0/22 maxlen: 22
2a0b:9100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:ea:0c:1b:15:86:58:ea:df:84:e5:a4:c0:8b:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Validity
Not Before: Oct 1 08:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f59f2e9114e71f0c5eac302d034aa70e53d011b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:0b:7f:37:c9:df:bc:18:09:4c:d0:a3:20:
21:57:45:68:77:a5:3a:e0:e7:f5:31:e9:bb:39:ee:
6e:45:d2:3d:95:5d:57:b6:d7:49:27:51:2c:b7:d1:
0a:29:4e:7d:d9:8b:81:73:32:d6:51:09:92:a4:45:
37:b4:20:1e:08:5b:27:66:5f:bb:74:05:96:0d:7a:
c8:08:40:f4:cc:88:b4:d4:74:32:c5:f7:cb:12:56:
43:0b:33:47:45:f6:5e:c0:2d:63:3d:51:b5:46:2a:
e5:52:e2:86:5d:0a:6e:7e:cb:df:d4:cc:2d:d9:e0:
3d:93:a0:00:c4:8c:0f:85:8f:80:b6:f8:0b:2f:99:
07:74:5e:ed:c5:10:37:d9:b5:9c:46:3b:6c:22:77:
e3:94:f5:3f:33:5c:57:fa:f5:44:fd:53:02:59:c1:
8d:c2:9a:21:90:65:04:7f:7a:e5:ee:3f:a0:01:41:
2e:1a:93:ee:99:34:9e:2f:12:95:52:4a:b8:ae:5c:
f7:f4:c4:e9:d6:cd:a6:36:ca:3d:d4:16:de:7a:81:
f0:9c:47:9c:8e:11:ba:cd:58:87:c7:9e:1c:75:84:
10:77:4e:fc:34:0c:7b:28:65:fa:47:b7:42:57:5a:
6a:6a:72:f8:78:6a:25:3f:f3:13:ed:da:11:5b:9a:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9F:2E:91:14:E7:1F:0C:5E:AC:30:2D:03:4A:A7:0E:53:D0:11:B5
X509v3 Authority Key Identifier:
keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/9Z8ukRTnHwxerDAtA0qnDlPQEbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.84.0/22
IPv6:
2a0b:9100::/32
Signature Algorithm: sha256WithRSAEncryption
1e:60:dc:cf:3c:18:88:21:c2:ff:d0:77:b5:e4:01:ba:92:13:
0f:e0:e0:7a:2c:84:c1:92:61:a8:65:c3:fc:e5:3d:da:24:c2:
22:8b:6f:be:40:e1:c5:30:00:83:49:a5:27:c5:0c:26:7e:68:
d3:62:18:59:5a:0d:95:51:7d:1c:fc:3c:01:f2:93:13:37:71:
73:b6:3b:8c:3b:3d:f0:cf:e1:e2:46:81:f1:de:d2:b6:0e:e3:
14:2c:39:af:33:77:5a:f8:e6:64:88:44:80:0c:fb:1c:df:e3:
d1:a0:71:eb:f3:7e:7c:b8:2b:95:28:a4:b4:e3:fa:9b:75:6f:
c6:60:11:92:2c:30:b5:2b:4a:a4:94:08:62:b7:31:46:3d:2a:
fc:87:d8:1c:0f:61:a3:76:0a:fc:ca:06:cd:fe:08:bc:e8:50:
94:35:2d:09:7b:10:0f:ae:2c:2e:ac:7f:c2:b1:ed:28:bd:39:
c7:5e:8a:43:46:57:5c:4b:6e:47:0f:e5:33:e6:0e:8e:fb:71:
30:1d:18:7e:e0:25:a4:9b:95:bb:80:ec:df:36:a9:8f:97:78:
be:0f:c8:59:ab:37:06:64:07:09:1d:c6:ac:d3:b9:61:a2:c9:
c0:78:f9:cd:aa:ea:a0:2b:8c:6e:0a:d7:fa:98:04:82:a6:e5:
7e:74:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:22 2025 by rpki-client