Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9p3Ngawt7oYN8xgjb9pukaeblew.roa
File: 9p3Ngawt7oYN8xgjb9pukaeblew.roa (raw, json)
Hash identifier: js8MPUaN+Fw/9R2kbT+tzGvBJUVYipIfkzVfUhIp+SE=
Subject key identifier: F6:9D:CD:81:AC:2D:EE:86:0D:F3:18:23:6F:DA:6E:91:A7:9B:95:EC
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B62D6C041C466A0A523A7FB7EAF070
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9p3Ngawt7oYN8xgjb9pukaeblew.roa
Signing time: Mon 14 Jul 2025 16:13:10 +0000
ROA not before: Mon 14 Jul 2025 16:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:2d:6c:04:1c:46:6a:0a:52:3a:7f:b7:ea:f0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69dcd81ac2dee860df318236fda6e91a79b95ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:d2:ca:7c:0f:61:7b:c1:84:19:43:ea:31:
37:2d:fa:91:9d:03:34:c3:91:7c:3c:bb:42:ee:cb:
10:7b:31:32:ad:c3:5a:13:5d:89:f8:62:98:8a:28:
24:93:a6:5c:4c:35:87:55:78:5f:41:a4:af:3e:e3:
f0:db:27:25:45:c2:1d:9b:fa:de:83:7e:e1:a6:6c:
08:91:23:a8:c7:35:44:96:a9:ae:25:14:a9:1f:7a:
20:44:f3:41:f1:97:c9:da:a4:d4:35:ae:e7:f9:54:
ea:a2:e0:0f:81:d3:2e:1c:75:a9:fa:c5:a0:28:f1:
a9:ba:2c:2e:77:9c:13:fe:81:c3:f2:74:a3:a4:6d:
7e:75:c0:0d:fb:ad:e9:03:f5:68:b9:ac:a4:58:3b:
6d:3d:0c:cf:bb:7a:a7:52:88:b6:a8:f6:5f:d2:e1:
4d:ee:66:71:9f:32:7a:fe:43:7d:81:9e:98:93:28:
10:59:95:92:66:52:32:d3:35:cd:a7:bc:95:a6:7a:
04:23:5f:1f:61:80:73:93:37:74:d8:35:1f:65:0e:
fd:dc:3f:a5:81:1b:f7:b1:fc:c4:c6:e4:19:04:2f:
99:83:3a:59:3c:3c:9a:b5:ad:89:cc:35:55:62:c6:
7c:cf:69:b2:85:1f:88:e5:f6:51:60:c7:a4:67:23:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:CD:81:AC:2D:EE:86:0D:F3:18:23:6F:DA:6E:91:A7:9B:95:EC
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9p3Ngawt7oYN8xgjb9pukaeblew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:84:04:4f:45:06:16:2a:e2:c6:4e:c5:39:55:1c:05:21:1e:
dd:f3:61:90:cd:2f:4b:c6:ef:83:f7:30:5c:39:18:41:ac:a4:
9a:76:30:ff:eb:09:8f:ed:8b:5f:a7:83:b8:3a:69:c5:b4:08:
57:28:ab:04:55:38:05:76:7f:18:e3:49:72:80:6c:79:dd:d5:
b1:7d:94:63:a5:08:05:70:54:44:91:9e:d8:4f:20:53:e9:e9:
cc:0c:58:4b:38:89:13:9f:c4:5e:b4:a9:2c:1e:23:b6:30:fb:
40:ff:67:d8:b4:26:20:72:b6:11:09:dd:c4:ab:04:13:36:06:
10:fd:e6:08:17:71:0c:a0:3a:81:13:e0:d2:06:65:af:15:e4:
b1:13:0a:ec:2d:f6:60:f6:ff:e1:d2:cb:e3:16:2d:c6:62:8b:
3c:1b:44:6c:ad:f8:8f:5a:4b:c3:d7:04:06:da:cf:e7:5a:4c:
56:33:29:b5:31:d6:4e:cb:ee:da:7e:17:90:86:ca:fd:43:e1:
04:fe:85:b8:72:f3:4a:4a:ab:33:5d:34:2f:eb:d7:60:26:ae:
32:f6:89:c6:7d:b8:3f:71:4f:c9:c5:59:29:80:7f:e9:d4:c6:
51:23:28:69:22:9c:fc:c2:00:94:66:f7:fc:08:57:0b:7f:ad:
00:3e:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:29:33 2025 by rpki-client