Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9X4NbzOONT_zL9f7V32Lk3r2UPc.roa
File: 9X4NbzOONT_zL9f7V32Lk3r2UPc.roa (raw, json)
Hash identifier: ePj/TJrlBihPQ55mW/QDsw9mwXJbpJXSQABPJ3xbBZw=
Subject key identifier: F5:7E:0D:6F:33:8E:35:3F:F3:2F:D7:FB:57:7D:8B:93:7A:F6:50:F7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0199711D35D1E2A782D5E489CDFBF4AC6789
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9X4NbzOONT_zL9f7V32Lk3r2UPc.roa
Signing time: Mon 22 Sep 2025 11:09:23 +0000
ROA not before: Mon 22 Sep 2025 11:09:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 88.209.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:1d:35:d1:e2:a7:82:d5:e4:89:cd:fb:f4:ac:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 22 11:09:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f57e0d6f338e353ff32fd7fb577d8b937af650f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:8d:cc:ee:48:9d:76:8e:a5:bb:ea:cc:e6:
ae:d1:03:3b:60:77:9f:e9:03:1f:e3:55:69:af:ec:
43:84:22:fa:38:49:2a:b9:f1:e7:a8:20:43:2f:36:
8a:f4:8e:60:22:0d:45:89:4a:6e:e3:1c:3a:33:54:
08:bd:49:5a:05:83:94:f3:f6:c6:5a:f5:64:51:de:
9e:e7:a5:ee:38:d5:2c:35:25:d1:db:8a:7a:94:c8:
25:10:f7:c8:4d:74:46:24:38:f4:2b:85:35:1e:fa:
c4:1b:64:f3:9b:6c:f7:8b:59:bc:49:fa:ec:41:3d:
ce:46:67:21:91:89:9a:62:18:26:c0:61:99:ce:4a:
a0:92:fd:80:f0:77:66:00:c2:56:83:5e:85:44:62:
a1:d5:3c:6c:11:90:a9:24:c9:ea:92:a7:49:f8:1c:
56:64:d9:2f:ec:e2:37:e2:69:60:1d:af:03:63:94:
63:4a:42:6e:e4:25:e5:3b:ac:62:0b:ae:54:84:78:
70:5e:aa:b6:df:7c:63:51:2d:17:91:51:9f:91:a7:
fd:d3:08:58:85:85:01:19:ec:3a:cb:61:f5:db:2b:
71:90:98:37:0b:46:c3:8e:9c:ec:7c:2f:8a:9d:5a:
6b:e7:4d:6d:54:92:e8:81:90:9c:c7:0d:56:0b:23:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:0D:6F:33:8E:35:3F:F3:2F:D7:FB:57:7D:8B:93:7A:F6:50:F7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/9X4NbzOONT_zL9f7V32Lk3r2UPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.206.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c8:15:43:88:9a:d8:2d:f7:2c:70:6e:04:5f:58:bc:ab:47:
cf:e2:37:cb:65:c5:c7:28:8d:b3:47:d8:17:3c:f5:e4:c6:5e:
a0:b3:3a:2f:b7:63:f1:5d:14:04:0a:3a:97:68:1d:9e:49:1f:
57:fb:81:b9:2a:3b:55:d6:d2:31:21:72:85:b9:e2:e9:d1:3d:
4f:a2:17:1a:38:3a:de:fe:d7:e0:1d:1b:cb:ed:32:7f:b1:b9:
72:89:23:54:3a:df:9c:23:ff:f4:dd:9f:df:4e:f2:e9:ee:bb:
ec:ce:78:53:21:d2:e7:8c:f9:83:1b:82:e4:ce:3c:12:8c:3d:
70:60:ab:6d:d6:13:4a:b4:7d:54:ba:9e:5a:0d:73:92:a1:b0:
16:10:0b:af:05:28:a3:ad:fe:04:63:60:5d:be:e1:ba:f3:5c:
83:d6:0c:cc:72:f6:40:5a:f8:e0:3a:ae:de:02:2b:42:68:ab:
75:3c:c9:2c:f6:5d:f2:60:27:e7:ea:d3:1e:c6:57:7d:69:7c:
20:2b:36:e8:01:ae:51:3a:64:cc:8d:8a:c7:6e:0a:4a:dd:f0:
d6:82:28:c2:75:a9:eb:e7:19:a7:fc:a7:44:a4:b7:31:68:21:
c0:bd:a3:2c:a5:59:53:94:37:dc:5b:52:bb:5c:22:f7:48:02:
79:ad:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:33 2025 by rpki-client