Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/9_T4ve3Vthf_sxVX-bvK-FDdcPI.roa
File: 9_T4ve3Vthf_sxVX-bvK-FDdcPI.roa (raw, json)
Hash identifier: +9BxG2A7BButqI99ltuN1SNEGGXD/TwLV+TVparU+Bs=
Subject key identifier: F7:F4:F8:BD:ED:D5:B6:17:FF:B3:15:57:F9:BB:CA:F8:50:DD:70:F2
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019812E6801602B17DEDCFD7909EF7DD7BA1
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/9_T4ve3Vthf_sxVX-bvK-FDdcPI.roa
Signing time: Wed 16 Jul 2025 11:02:32 +0000
ROA not before: Wed 16 Jul 2025 11:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.236.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:e6:80:16:02:b1:7d:ed:cf:d7:90:9e:f7:dd:7b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 16 11:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7f4f8bdedd5b617ffb31557f9bbcaf850dd70f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:79:a9:71:0e:9d:26:2a:22:b1:d1:94:33:
3f:eb:b8:f8:5d:e8:87:9d:21:cb:3c:c9:39:85:2f:
72:d6:45:a7:51:d7:5d:3c:ae:6e:9c:b9:1f:69:83:
e7:9d:5d:72:eb:00:ab:30:41:4b:41:0d:82:68:44:
52:5f:a5:80:97:e7:23:4f:dd:49:db:4d:c7:7f:6f:
18:ce:38:02:d7:d1:41:e0:01:70:93:91:68:f0:c1:
2b:e4:d4:b8:a8:3f:66:fd:9f:2c:03:d3:38:c7:7d:
28:9d:4f:98:3b:9d:d2:2c:f1:90:a6:a7:86:d9:71:
89:55:db:c3:97:88:b5:94:c8:bd:3d:08:52:0f:17:
d9:0f:de:90:27:11:42:68:5c:5d:72:57:90:11:39:
57:3a:58:56:e6:a3:e9:23:ed:3b:6f:c9:a9:cd:62:
db:68:a9:30:b9:9b:33:04:aa:a0:c8:66:43:5b:cf:
de:dc:c3:09:1e:f5:65:df:e5:68:0c:32:51:e6:3e:
6a:d0:22:0d:87:a1:ad:f3:10:e7:52:e8:78:ac:48:
50:a9:d4:26:06:4c:c4:0b:9b:f2:60:5d:5d:72:f3:
91:e4:dc:2b:7b:c6:c5:7a:43:75:f9:dc:2c:0a:a1:
9f:fb:b5:1e:d1:8c:f6:62:57:fe:6c:f2:75:38:87:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:F8:BD:ED:D5:B6:17:FF:B3:15:57:F9:BB:CA:F8:50:DD:70:F2
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/9_T4ve3Vthf_sxVX-bvK-FDdcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.254.0/23
Signature Algorithm: sha256WithRSAEncryption
60:5a:77:71:5f:c9:0f:df:22:23:d5:22:e3:c6:1e:5b:13:19:
71:b4:94:97:85:2e:21:52:ad:b7:37:38:d7:00:58:fd:79:50:
5b:fa:1d:50:7f:e3:fd:fa:0f:56:d5:77:b7:a7:a6:f8:1a:78:
35:10:8d:d2:82:2a:ec:78:2b:4e:b3:eb:4d:7e:01:b3:09:b6:
e4:03:74:fe:98:77:9b:92:8e:96:c1:ea:f6:ca:c2:bf:0f:aa:
12:19:4a:41:2d:39:68:80:bc:18:34:92:f5:1e:7f:fd:24:6c:
51:5b:a9:b0:34:fb:5f:92:e9:98:74:4d:8f:ac:ae:1f:43:84:
15:3b:78:45:ce:9f:ba:6d:a7:61:87:53:9e:92:76:2c:57:67:
7c:f6:91:7c:0c:0a:e2:c4:58:a2:da:ec:a2:5f:42:ee:ef:15:
ab:d0:07:21:f1:29:43:f4:e7:9b:f8:a4:6c:64:ea:0e:cb:ea:
b1:b4:b1:04:4d:eb:4c:f6:af:65:a9:c5:00:b2:1b:eb:61:59:
26:ef:80:f0:cb:69:a6:21:62:44:3e:b2:0a:42:18:b6:38:66:
83:be:fd:7e:6e:92:1f:bc:75:59:b1:b9:39:b0:86:07:87:3d:
6a:df:f6:8b:b5:a3:4d:86:ff:3e:e5:bc:18:29:6c:6c:5a:99:
3d:00:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:58:31 2025 by rpki-client