Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa
File: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (raw, json)
Hash identifier: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=
Subject key identifier: F7:E0:AC:FB:09:52:2A:89:64:40:E6:65:1E:E6:7A:A3:7F:31:9D:6F
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 019777FC6008EEB3FCAF5EE2A9EEED24299F
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa
Signing time: Mon 16 Jun 2025 09:05:17 +0000
ROA not before: Mon 16 Jun 2025 09:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 89.45.66.0/24 maxlen: 24
185.118.4.0/22 maxlen: 24
188.212.5.0/24 maxlen: 24
188.213.1.0/24 maxlen: 24
188.214.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:fc:60:08:ee:b3:fc:af:5e:e2:a9:ee:ed:24:29:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jun 16 09:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e0acfb09522a896440e6651ee67aa37f319d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:76:40:04:62:77:c6:8a:af:6f:44:0c:0e:
a6:bf:55:15:58:e0:99:35:4c:f3:6a:6d:a1:7a:de:
4f:f1:e8:7e:1c:94:0d:f7:ad:34:eb:d9:17:6f:0d:
8c:aa:78:15:7a:cc:5f:c3:73:b2:09:23:43:05:d7:
45:f6:07:6b:2a:1a:3d:ec:57:b0:cb:10:ec:36:9a:
38:16:1e:d4:fb:7c:75:af:88:20:5e:77:bd:0b:b6:
4c:db:6b:bf:78:68:b6:01:ad:fc:9a:bc:e9:32:f6:
92:11:a6:e2:55:4b:63:00:64:ab:87:ed:77:8c:60:
5a:db:3c:77:f6:c6:1c:aa:95:62:1c:30:22:66:03:
31:39:1f:59:1b:dd:47:2e:18:76:80:dc:6f:c0:50:
06:1d:98:57:af:35:6e:b6:0a:f0:f5:8c:65:90:2e:
ef:52:ec:b5:3c:01:f9:92:79:90:1e:6d:71:5b:cf:
82:94:3d:74:59:85:4e:2b:b5:b0:d2:7c:6a:c1:1c:
57:70:6d:40:38:9b:86:7e:9d:ab:76:9d:78:1d:d0:
04:c5:3a:80:03:b1:54:7f:7e:73:06:0f:6e:bc:aa:
51:16:54:bc:87:42:9b:4c:e9:66:a8:ea:ae:57:99:
d4:d0:7f:a8:89:92:70:c2:88:fc:75:0b:2c:69:4a:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:AC:FB:09:52:2A:89:64:40:E6:65:1E:E6:7A:A3:7F:31:9D:6F
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.66.0/24
185.118.4.0/22
188.212.5.0/24
188.213.1.0/24
188.214.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:be:97:9e:95:8e:52:37:33:db:7c:df:72:35:db:a9:de:e5:
95:14:e8:43:82:ae:f6:03:65:fc:20:e8:47:8e:bc:24:11:fa:
de:bf:67:39:4e:b4:7b:e5:f1:f6:1b:0d:a5:b3:a2:c8:71:ab:
ee:45:91:f8:55:4e:f1:d7:20:53:ed:85:5f:de:96:98:c6:1b:
dd:ce:ea:01:ec:1a:3a:d2:02:f0:9e:80:09:a2:7c:a3:c8:f6:
52:33:ac:b0:f6:c9:c5:43:07:28:c9:ca:a8:d6:e7:a4:e2:7d:
29:fe:4f:6b:5c:1d:99:fe:43:22:f7:4c:21:4f:4b:08:a4:03:
9d:2c:bc:01:f0:69:f6:53:c8:f8:bd:6e:1b:b4:d9:f4:df:13:
0d:8b:7c:38:ee:da:f1:98:d4:eb:d9:99:45:92:6a:62:6d:2f:
34:b1:01:78:8e:85:fc:6b:05:08:65:9d:3d:81:72:3b:8e:d6:
a1:81:ed:42:93:c7:7e:bd:f1:3f:2a:76:9b:6c:4c:dc:79:15:
43:46:1f:ed:bb:6a:e2:64:48:ee:74:96:a1:f0:77:f0:6f:a0:
e0:5c:ae:99:01:76:0a:e8:6d:81:0f:8f:f0:7b:c5:52:a1:7b:
05:18:a1:ac:11:45:45:d7:38:bf:19:fa:99:dc:a2:93:8e:46:
e8:51:f4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:16:51 2025 by rpki-client