Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/l9bBsFfC3zzSetiD5kEe28rBj1w.roa
File: l9bBsFfC3zzSetiD5kEe28rBj1w.roa (raw, json)
Hash identifier: afp7psmljpdsoVJb9q1FK7ToTJSaIK0ZgxojY+T/ZMM=
Subject key identifier: 97:D6:C1:B0:57:C2:DF:3C:D2:7A:D8:83:E6:41:1E:DB:CA:C1:8F:5C
Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991
Certificate serial: 019994DD6A63062641F19937DDCD01FD459C
Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/l9bBsFfC3zzSetiD5kEe28rBj1w.roa
Signing time: Mon 29 Sep 2025 09:46:02 +0000
ROA not before: Mon 29 Sep 2025 09:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42095
IP address blocks: 195.64.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:dd:6a:63:06:26:41:f1:99:37:dd:cd:01:fd:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991
Validity
Not Before: Sep 29 09:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97d6c1b057c2df3cd27ad883e6411edbcac18f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:af:6c:c4:71:60:c2:2a:2a:62:1f:99:1e:
8f:54:6a:14:0d:86:03:be:d7:e6:53:c9:2f:69:34:
81:b6:69:ba:a3:e1:df:c8:79:ca:02:af:52:dd:ed:
fd:34:63:0c:de:c6:3b:f9:b5:66:f1:49:5f:be:53:
29:a3:bf:5c:87:81:63:09:3f:21:1d:e9:b5:dc:a6:
85:5f:8c:d0:44:96:71:81:62:8e:62:c4:c2:af:02:
5b:be:3c:81:26:60:31:98:74:9d:45:d8:47:d6:44:
86:1e:ec:6c:9e:20:b9:47:24:bc:20:b2:b7:74:b7:
e3:59:3a:2c:fc:dc:ab:cf:8c:fa:7e:b8:68:77:ca:
67:65:88:c9:68:0a:63:53:b5:29:61:5f:c2:a4:f7:
1b:d9:a3:71:81:72:b8:41:54:24:26:da:19:69:69:
00:9b:8a:ee:78:a0:b4:ba:5d:1f:99:d3:8b:25:b8:
e7:0b:ec:04:6d:47:0f:8d:82:21:50:e2:46:b9:70:
eb:7c:97:56:ef:a9:96:ea:ff:a0:7f:40:af:ad:8b:
e2:cb:2d:88:ae:fd:8e:5c:44:a2:2b:ff:7e:82:c7:
d1:1c:98:ba:8a:f0:ef:91:25:54:db:53:39:c2:f8:
7b:6b:7c:d4:fb:57:f3:36:4a:e9:bd:18:6f:cf:04:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:C1:B0:57:C2:DF:3C:D2:7A:D8:83:E6:41:1E:DB:CA:C1:8F:5C
X509v3 Authority Key Identifier:
keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/l9bBsFfC3zzSetiD5kEe28rBj1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.136.0/23
Signature Algorithm: sha256WithRSAEncryption
45:59:39:33:47:ee:9b:b6:69:6f:1e:d8:37:10:cd:59:78:6d:
0c:11:ca:52:4e:f0:78:58:73:07:68:f1:48:9a:dd:4a:82:22:
f0:f7:d4:54:c5:ea:25:c2:9f:fe:74:ce:bd:3e:9a:75:48:c9:
f2:2e:e1:b7:db:b3:bd:85:91:84:2c:33:ed:4f:f1:6d:da:07:
3f:15:cf:81:45:e4:d5:66:9c:bb:38:5e:b6:ff:d6:5a:6a:a9:
a7:f1:8f:de:2e:d4:53:f4:59:a3:8b:9b:3c:d4:c0:63:bd:f3:
56:96:2f:da:d1:59:39:51:67:26:69:7a:5e:34:78:d6:97:4f:
5b:17:f6:80:82:13:c7:70:c2:73:c7:7c:83:74:9a:7a:a5:ee:
c0:3c:ee:f1:ed:66:e2:27:fd:93:50:62:74:28:a3:8d:bc:2d:
29:2d:93:85:cb:dc:00:82:b5:c8:c5:f4:53:3e:4b:4c:08:8f:
d2:f0:b4:1e:99:93:1d:fb:70:41:71:ac:ee:48:20:1a:fc:cd:
da:60:77:0a:ba:71:85:82:60:b1:d8:62:31:57:4d:80:37:46:
17:46:a7:fb:b7:c6:fe:a1:c8:a9:7c:c5:31:be:c3:ae:d9:fd:
68:0b:cd:f2:18:cf:98:72:fa:99:f9:36:9c:03:fd:b4:22:a2:
a0:04:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:02 2025 by rpki-client