Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/9JwtlsVNx4_up1QMmZlfBeyOaK4.roa
File: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (raw, json)
Hash identifier: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=
Subject key identifier: F4:9C:2D:96:C5:4D:C7:8F:EE:A7:54:0C:99:99:5F:05:EC:8E:68:AE
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 0197E54F82D538FF97DED26140BADF29CC45
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/9JwtlsVNx4_up1QMmZlfBeyOaK4.roa
Signing time: Mon 07 Jul 2025 14:34:42 +0000
ROA not before: Mon 07 Jul 2025 14:34:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.29.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:4f:82:d5:38:ff:97:de:d2:61:40:ba:df:29:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jul 7 14:34:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f49c2d96c54dc78feea7540c99995f05ec8e68ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:51:1f:2b:4a:4e:fd:00:79:0e:cb:74:c3:
14:44:e3:fc:42:a8:a6:97:fd:77:ff:a9:d7:5f:9f:
46:98:59:a4:a6:bd:90:a3:0f:7d:29:f3:fa:3c:0c:
20:72:3a:6d:fc:a9:5d:f6:60:2e:03:a7:ec:81:e6:
57:2b:b8:a3:86:9e:e7:08:06:2d:2e:3e:ec:30:50:
86:2a:48:1b:ce:8a:11:60:e1:2b:f6:dc:2f:e6:69:
10:28:61:48:21:73:d6:73:8a:5a:b1:78:90:c2:4b:
96:f4:33:cc:cc:58:d1:62:fe:dc:a1:c1:8c:27:31:
a9:ef:89:09:36:0a:76:0f:36:22:b1:ab:b9:f3:09:
88:e4:57:06:0a:5c:a1:57:72:27:d1:54:54:a7:4c:
80:fb:08:b2:ed:54:1f:72:54:5f:9c:8a:97:1a:97:
47:bf:59:68:62:4b:dd:34:37:c6:fd:e6:47:da:dc:
35:1b:2e:1d:54:15:4f:3e:10:32:eb:b5:b5:37:0c:
ff:cb:72:0f:39:ef:62:76:e9:45:fe:24:28:fb:d2:
40:21:af:a3:9b:9c:b2:ac:c3:48:7f:8e:77:2d:fd:
c6:19:35:06:fd:89:23:58:16:19:3b:8c:94:7e:b2:
45:fa:3e:ac:1a:64:0a:59:4a:2e:c5:c8:7a:71:9f:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:2D:96:C5:4D:C7:8F:EE:A7:54:0C:99:99:5F:05:EC:8E:68:AE
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/9JwtlsVNx4_up1QMmZlfBeyOaK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5b:37:63:30:45:40:a3:42:37:de:6d:da:3a:8b:ee:92:80:
96:c2:03:35:46:8f:78:05:36:7b:c3:15:18:68:32:79:21:71:
ae:0a:0a:84:22:a3:ad:0d:a7:80:e2:9a:f6:47:aa:96:76:dd:
7a:b9:28:db:41:37:52:b0:ea:5b:59:31:65:ad:d9:5a:b3:01:
7c:c6:14:08:27:50:a4:f9:33:99:50:c5:11:23:5e:57:53:cd:
5c:27:cb:d8:aa:3c:ec:7f:52:71:aa:56:22:ce:ae:e6:d0:f5:
34:7c:36:23:78:96:ad:a5:7f:70:c3:f9:ef:dd:58:63:53:26:
c7:d2:93:f9:d8:e0:fe:a1:61:4e:d4:58:26:fd:fd:85:bf:6a:
7d:a2:1e:f0:01:70:30:b1:b1:8f:8f:4d:a8:31:20:fc:58:3d:
bc:34:91:e9:5b:fc:24:e1:8f:92:1b:07:d1:f4:fc:d2:6d:66:
0f:88:6f:9a:1d:e0:26:8e:06:bb:4a:59:48:0b:43:f7:a1:6d:
6a:4c:93:16:c0:d6:73:50:b6:59:05:4d:f9:cf:2d:f9:e9:c3:
e4:f9:0b:86:d4:a0:9e:c5:e8:e4:b0:66:a1:27:7d:ac:b4:56:
fb:41:f9:04:28:23:82:75:bc:c0:50:6c:3c:d0:5e:92:79:7c:
8a:70:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:23:18 2025 by rpki-client