Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/xFSc9eumG2-IIg_Vg_sRl2DeVI8.roa
File: xFSc9eumG2-IIg_Vg_sRl2DeVI8.roa (raw, json)
Hash identifier: 9z1/aWLIVyXrZPmU5XbcoDAb83WgcRq4rt5jAfhhjBM=
Subject key identifier: C4:54:9C:F5:EB:A6:1B:6F:88:22:0F:D5:83:FB:11:97:60:DE:54:8F
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199F9412043E18CCEDC72B6EB57E4796A41
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/xFSc9eumG2-IIg_Vg_sRl2DeVI8.roa
Signing time: Sat 18 Oct 2025 21:36:58 +0000
ROA not before: Sat 18 Oct 2025 21:36:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 109.175.210.0/24 maxlen: 24
109.205.193.0/24 maxlen: 24
2a01:fb00::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:41:20:43:e1:8c:ce:dc:72:b6:eb:57:e4:79:6a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 18 21:36:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4549cf5eba61b6f88220fd583fb119760de548f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:08:de:f4:f1:85:35:45:a2:93:f9:7d:16:
f4:f0:e2:18:41:1f:48:d1:2a:f8:4f:47:74:05:c9:
94:07:ba:a4:dc:44:b8:4d:ae:3f:aa:bf:9d:0b:67:
9d:35:3e:55:e9:d7:3b:d0:4e:47:14:93:14:b6:d4:
3c:44:fe:39:0c:a5:5f:a7:26:36:0a:34:03:2e:19:
b2:6d:ae:d9:4e:00:b1:8c:b6:9b:f8:f2:b8:e4:58:
9d:bf:71:58:c3:03:8f:b3:3a:96:dd:f5:d4:6e:02:
9f:a1:31:13:64:69:9a:b0:26:42:2b:99:c1:68:6f:
e9:e0:06:a4:4e:90:16:89:28:9d:2b:2f:f3:5e:fa:
2b:b8:31:a2:20:db:45:55:9c:20:eb:d7:bb:fd:ad:
f9:38:68:86:e3:7b:e9:84:5a:06:96:42:52:72:5c:
1f:6a:42:9b:ba:05:22:cc:25:af:79:71:9d:0a:42:
2c:23:36:ab:7d:1d:de:66:98:5c:b5:21:cd:d6:7b:
30:b8:59:30:0b:00:a6:ce:cc:b1:a0:e9:d0:3f:3e:
7c:da:32:cd:5c:1f:63:9f:02:27:a2:a3:21:bb:ff:
22:b8:16:12:92:1e:45:46:02:73:74:73:9b:cd:cc:
3a:8d:a6:83:98:77:79:d8:54:4a:9f:36:8e:f9:48:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:9C:F5:EB:A6:1B:6F:88:22:0F:D5:83:FB:11:97:60:DE:54:8F
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/xFSc9eumG2-IIg_Vg_sRl2DeVI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.210.0/24
109.205.193.0/24
IPv6:
2a01:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
5d:8c:5d:80:ca:40:ee:73:8f:e0:4b:d3:ed:0c:9b:35:b7:e9:
e9:9c:33:1d:84:f2:42:a1:da:f8:ed:2b:db:da:7a:99:6a:52:
2f:e6:f8:26:30:9a:95:58:ad:b6:29:a8:16:6e:22:e6:e1:d3:
c2:0a:ad:e8:9e:b1:b7:af:e2:49:6c:be:37:dc:e6:b8:1c:5d:
3c:7c:86:7d:e6:85:20:0e:c4:d3:e7:ca:03:06:0e:47:0c:9b:
5e:31:c8:dc:90:49:58:72:e4:8e:e7:73:c1:a3:7f:a8:0a:94:
08:0d:9b:fa:11:e3:84:7d:82:1a:b5:37:e9:00:67:f2:f7:bc:
3c:b9:00:b9:0e:45:06:6a:3e:07:4e:c4:1e:d6:9c:84:a8:5d:
00:39:a3:b2:79:04:8b:ad:59:f1:b9:5d:97:df:bf:bc:99:06:
a6:46:b8:cf:2a:61:a2:62:17:8f:df:f0:cc:89:12:36:9b:6a:
c3:3b:1a:93:8d:13:3a:ab:f3:4c:28:d8:4f:fb:9b:d6:4d:5a:
8f:84:f1:84:f8:41:d1:4a:b0:60:c9:ea:dd:97:af:ad:e1:92:
6a:06:2a:29:57:eb:bc:0a:e2:9d:b2:2d:9f:be:1c:7d:99:5a:
99:0a:e5:f6:e9:0b:11:f4:11:df:9d:7b:11:78:82:77:93:e4:
1c:fd:ba:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:38 2025 by rpki-client