Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9X2bVs01Q2tfw1vRsiEx9bwgnng.roa
File: 9X2bVs01Q2tfw1vRsiEx9bwgnng.roa (raw, json)
Hash identifier: xUZPkg/6d28gZt22/LQ5MI3h9zeoZfSZKL8cddD08VU=
Subject key identifier: F5:7D:9B:56:CD:35:43:6B:5F:C3:5B:D1:B2:21:31:F5:BC:20:9E:78
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0199A920CB2A28100B637F4A70A431B76046
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9X2bVs01Q2tfw1vRsiEx9bwgnng.roa
Signing time: Fri 03 Oct 2025 08:12:02 +0000
ROA not before: Fri 03 Oct 2025 08:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 193.68.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:20:cb:2a:28:10:0b:63:7f:4a:70:a4:31:b7:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 3 08:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f57d9b56cd35436b5fc35bd1b22131f5bc209e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:fe:7f:e5:0c:0c:e8:56:57:72:be:12:51:
d8:60:76:3e:0c:58:1b:dc:4e:0e:b6:4f:67:bd:64:
02:25:3a:fc:60:32:46:96:0c:b0:99:d5:30:12:42:
7d:f0:12:87:8f:0f:a7:78:46:1f:87:55:4e:c7:14:
26:0d:10:9f:43:07:85:d2:80:01:53:f5:f7:2a:96:
a1:f5:cd:b4:4d:28:fe:36:f4:26:bd:38:4d:00:c7:
bb:b6:64:3f:8b:77:8b:39:e5:f3:93:68:64:50:5d:
4c:31:7b:96:86:91:c9:83:5f:40:80:36:41:0c:ef:
4f:1f:92:52:f2:10:8c:8c:79:07:21:95:4d:86:95:
42:46:0a:d6:e5:22:7c:2f:02:33:0d:e3:c0:6b:59:
8b:45:d8:9f:f9:c4:fc:b8:00:16:61:a2:ea:56:b5:
48:22:8e:6d:31:3e:d3:a4:f0:40:54:bb:9f:b2:50:
20:cf:65:22:85:cb:af:9c:39:02:b1:e7:82:d2:ec:
8f:6a:ea:a3:c4:64:ba:3b:9c:19:06:48:bb:3d:f0:
d3:7e:cc:df:84:c2:b7:8b:49:6c:25:f8:b0:01:d9:
01:c1:73:8f:2e:22:ad:f6:99:1c:a3:bc:72:f6:ee:
fa:d0:fd:d5:29:12:9a:73:2e:86:de:e3:d6:ad:76:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:9B:56:CD:35:43:6B:5F:C3:5B:D1:B2:21:31:F5:BC:20:9E:78
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/9X2bVs01Q2tfw1vRsiEx9bwgnng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5c:32:e5:1e:42:31:33:b3:8c:ad:c0:e4:d5:7f:d0:be:2c:
9a:7d:19:37:39:91:c9:9c:57:49:1a:3a:ff:5a:47:fb:db:2f:
86:c8:13:4f:44:87:e9:e8:b5:ea:d9:51:3f:8a:bd:f6:2c:e0:
5d:74:34:74:0a:ab:cf:f4:aa:cc:8d:db:7b:3a:fa:0f:bc:d8:
55:77:ad:98:fa:0e:17:8e:7a:73:11:78:c8:8e:3e:3e:8b:ee:
8b:93:cc:8d:fb:13:24:c2:f0:47:48:d4:02:6c:b9:a4:06:ea:
25:29:12:fa:f4:df:cb:06:b3:d4:b1:af:30:6e:6e:89:c4:ed:
bb:ea:29:ff:e4:70:a0:d7:c6:4b:5c:ee:b5:a6:ea:4f:cb:79:
2a:31:56:bb:57:9f:c0:81:58:eb:4f:e2:a0:22:45:61:6e:82:
01:25:b5:47:69:5e:a3:ce:84:7c:02:7e:60:b3:5f:14:22:07:
ee:9b:53:54:9f:c3:23:cb:aa:13:fd:59:d0:1f:c4:bc:5c:8e:
45:a6:42:01:db:68:2d:ff:b3:56:5a:4b:fe:db:dd:33:be:30:
35:d4:9f:95:40:80:9f:09:b7:04:ca:57:7b:85:6e:96:76:bc:
09:c5:0e:d4:a9:15:67:c8:7d:ad:54:84:66:48:08:45:5a:b0:
27:19:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:32 2025 by rpki-client