Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9IwsOOnXbAxrAyXvDN0h5o-ngzU.roa
File: 9IwsOOnXbAxrAyXvDN0h5o-ngzU.roa (raw, json)
Hash identifier: tE1ioXDqHNwyKXK/OiWe0GDPgJQkfxjHBKda8Pi2UtE=
Subject key identifier: F4:8C:2C:38:E9:D7:6C:0C:6B:03:25:EF:0C:DD:21:E6:8F:A7:83:35
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0198E56F2C347C860F801C24FD10CB78E90B
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9IwsOOnXbAxrAyXvDN0h5o-ngzU.roa
Signing time: Tue 26 Aug 2025 08:12:04 +0000
ROA not before: Tue 26 Aug 2025 08:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216383
IP address blocks: 93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:6f:2c:34:7c:86:0f:80:1c:24:fd:10:cb:78:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Aug 26 08:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f48c2c38e9d76c0c6b0325ef0cdd21e68fa78335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:ae:88:9d:6f:25:f1:d9:3f:7c:86:0e:a9:
8d:53:51:80:45:3a:13:55:2f:64:89:4d:82:8e:b5:
d1:27:a7:31:f3:f3:10:0e:10:f6:ad:27:ca:3a:39:
e0:c6:a0:a2:0e:6e:4b:15:a3:13:00:0d:9f:ed:22:
87:84:f1:08:f4:2f:df:b4:8e:c5:0c:54:e4:84:54:
89:ab:db:c7:f7:d1:db:25:56:d8:01:af:b4:a8:7c:
a3:11:5b:40:7e:37:4e:fd:18:ec:89:51:0d:5d:fa:
78:ba:71:31:e5:80:27:a4:00:7f:f3:44:f6:4a:eb:
3e:a6:44:2f:e4:09:dd:dc:99:22:65:5d:4a:e1:15:
1a:34:69:7c:4a:34:e8:fe:ae:79:22:b8:6f:f3:1b:
23:16:49:b6:c2:ba:72:b7:b6:39:29:e3:8a:7f:bd:
a9:73:29:4e:bb:8a:82:7c:5d:fa:92:40:e3:97:3b:
be:16:ac:7c:90:e0:57:0b:ef:22:04:c6:fd:8f:34:
e2:e6:8c:4c:e8:7f:ce:93:87:6b:04:c6:e4:27:b9:
7c:d7:85:46:dd:20:0b:40:ca:da:2d:80:ab:d1:90:
64:74:56:00:f0:0a:a8:4b:04:51:19:ce:43:8c:2a:
1d:65:7f:3a:64:9b:c0:6e:21:5d:1e:80:3b:e1:bf:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:2C:38:E9:D7:6C:0C:6B:03:25:EF:0C:DD:21:E6:8F:A7:83:35
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/9IwsOOnXbAxrAyXvDN0h5o-ngzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:12:14:d1:65:aa:46:f4:02:04:3c:db:e0:fb:d0:14:48:74:
2d:09:d5:b6:05:22:3b:a8:4a:f4:f7:0b:55:f1:0d:26:4c:e8:
8b:8d:64:7d:ef:60:7f:94:2c:6b:3d:14:1d:d1:43:64:3e:12:
d8:77:3d:68:d4:32:b0:92:29:a5:75:b6:fc:41:cc:d3:12:19:
37:d7:51:1d:07:aa:e5:05:24:0d:e9:70:9b:bb:be:fb:5f:3b:
47:4b:02:ca:44:76:40:43:a6:bf:50:f6:a8:49:57:ad:ad:2a:
70:d4:9c:f3:a8:a9:00:07:69:52:f4:96:b3:d0:e6:e6:a6:95:
58:20:43:20:80:98:5a:06:19:a1:5f:8c:89:2f:fd:7f:72:b9:
b2:db:61:24:48:cb:c8:72:a0:56:ea:a6:04:ee:6c:cd:01:ad:
1e:bf:64:b8:dd:c4:0e:41:7f:83:96:5a:c7:68:03:df:9f:94:
22:f0:3c:00:5a:5f:72:16:36:b3:d4:83:33:32:22:93:d6:d9:
44:2f:1b:64:4e:74:db:4a:3a:27:ba:cf:3a:4e:2c:cb:c0:aa:
54:42:f6:ca:d5:7a:66:70:c5:98:d5:f1:95:05:cd:0e:99:fd:
a8:5e:44:f9:96:2c:62:1d:9b:82:98:65:da:48:39:b2:30:81:
ac:7b:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:24 2025 by rpki-client