Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/i61yJhWlIpiU3IaDDJOUzTLy3CI.roa
File: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (raw, json)
Hash identifier: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=
Subject key identifier: 8B:AD:72:26:15:A5:22:98:94:DC:86:83:0C:93:94:CD:32:F2:DC:22
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01991AB26A980A3F40A65C2B00CB27B19B0C
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/i61yJhWlIpiU3IaDDJOUzTLy3CI.roa
Signing time: Fri 05 Sep 2025 16:25:24 +0000
ROA not before: Fri 05 Sep 2025 16:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 213.220.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:b2:6a:98:0a:3f:40:a6:5c:2b:00:cb:27:b1:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Sep 5 16:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bad722615a5229894dc86830c9394cd32f2dc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:c8:a5:43:27:68:85:5b:16:c0:30:4f:f4:
cb:f9:22:50:6c:ac:67:93:d4:cc:6b:45:17:b6:06:
6f:92:14:3a:24:c2:78:36:41:11:d2:fe:9a:ec:95:
80:52:ed:c3:1e:c5:56:83:0e:3e:02:63:18:b3:a3:
67:a6:9a:91:30:36:6c:62:95:fb:16:14:09:54:d6:
52:4a:17:0e:4a:d2:57:84:d8:a4:1b:ca:69:5a:38:
4b:cc:7a:97:9a:00:da:17:14:42:b2:7a:49:04:fb:
88:a0:91:27:46:a0:ff:6e:e8:5b:90:8a:26:8a:a7:
4e:4d:57:29:af:fd:0d:b2:58:da:a1:bd:22:c0:df:
a3:87:5b:ac:97:c5:3f:81:03:8f:13:3c:a7:b1:e2:
f4:94:b0:86:f6:ad:7f:32:92:fa:09:cd:dc:c8:16:
dc:62:34:4a:15:83:cc:68:83:d9:38:ff:63:68:87:
73:83:9f:2c:a1:4d:43:d3:97:b1:22:18:ec:5e:9c:
84:1a:a3:05:05:7f:b5:3a:aa:60:44:5e:51:cb:d8:
eb:50:27:d9:5e:ea:80:29:18:45:fc:9d:4f:bb:7b:
66:b0:c5:42:77:39:56:9a:c5:7c:78:9d:83:a7:51:
17:1a:39:97:91:1f:7d:b4:57:77:af:e8:f4:5e:95:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AD:72:26:15:A5:22:98:94:DC:86:83:0C:93:94:CD:32:F2:DC:22
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/i61yJhWlIpiU3IaDDJOUzTLy3CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.9.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:17:a3:49:fb:47:08:47:cb:f1:ff:0b:e3:b0:dd:28:6c:ff:
d2:de:29:10:f9:00:75:75:d3:df:15:3e:27:44:33:f3:7f:03:
ee:45:ed:3b:89:7b:15:a6:38:a8:15:75:71:84:b7:f2:6b:f4:
a6:ec:c4:a6:65:63:93:88:7d:35:cf:ea:5b:47:f1:fe:3f:b4:
7d:2b:6d:1c:7d:0c:33:28:60:86:f2:42:a9:9a:fa:e0:c5:dd:
d7:0d:a0:96:c2:3c:cc:4d:70:f4:32:e3:89:35:d7:d3:9a:7d:
f4:fe:62:1f:06:63:f6:6d:87:54:bb:49:3b:a1:4e:2d:29:6a:
d5:d9:59:68:bb:b8:fc:b9:27:5e:27:61:84:0a:ed:30:f0:8e:
42:4b:66:24:1d:f8:ad:8d:f2:1e:7b:f6:60:74:ac:20:70:84:
df:75:05:f0:33:f3:5f:1b:ae:a6:d1:91:f4:2b:f3:84:0c:97:
a2:e9:ba:3c:15:2f:5a:43:a5:de:59:af:c3:3d:24:5f:f1:c2:
e6:ca:c3:d1:bd:3a:5d:55:c4:f4:9e:e7:c3:84:a3:40:a6:51:
ea:01:76:15:ff:55:2b:ef:ea:86:e2:0b:2f:2d:de:d8:29:65:
2d:bd:69:b2:8b:c8:0d:1f:0f:f6:7a:13:4a:29:16:d7:81:b3:
f8:3e:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:02 2025 by rpki-client