Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/aTbpQVeF3qhdjwAef1H9xAeFlDY.roa
File: aTbpQVeF3qhdjwAef1H9xAeFlDY.roa (raw, json)
Hash identifier: xS42P2/TkS38R4InDxszyPR683sYKaN1Asg6o2Jnimc=
Subject key identifier: 69:36:E9:41:57:85:DE:A8:5D:8F:00:1E:7F:51:FD:C4:07:85:94:36
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 0199A4E3E4F2B637D94FC1DFD71200588A31
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/aTbpQVeF3qhdjwAef1H9xAeFlDY.roa
Signing time: Thu 02 Oct 2025 12:27:02 +0000
ROA not before: Thu 02 Oct 2025 12:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 159.197.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:e3:e4:f2:b6:37:d9:4f:c1:df:d7:12:00:58:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Oct 2 12:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6936e9415785dea85d8f001e7f51fdc407859436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:2c:99:26:a8:37:e4:74:61:54:e4:55:e2:
d0:a5:2d:2a:01:59:f9:17:91:b3:c0:0f:bb:10:b3:
2f:f3:59:d9:39:0e:cb:57:f4:b8:36:71:c3:04:aa:
cb:ec:73:f0:d3:07:06:15:29:1a:20:c1:d1:86:c2:
d7:aa:64:ae:39:69:7d:29:28:7a:5f:23:b7:bb:e1:
f1:a3:d7:8b:e6:c8:3d:53:7d:37:a5:8f:24:1c:4d:
52:1f:c0:01:d1:a2:39:36:53:86:5f:0d:93:1c:a7:
67:25:72:94:61:bf:b1:25:4f:00:30:a7:0e:9e:36:
eb:01:0f:39:89:20:1f:09:05:b1:8f:23:9f:f9:d5:
e6:b4:c8:61:e6:63:77:d2:be:79:57:8b:74:f9:8b:
a1:bd:86:e6:15:cd:95:e2:2e:09:b5:3c:78:5f:dc:
1b:9c:bf:b5:70:dc:73:e7:30:36:a0:e9:0b:25:71:
77:12:ef:d7:33:50:21:95:c6:ae:d8:08:e3:1b:be:
82:95:52:79:76:84:8b:fc:d2:28:e0:13:f3:5e:d9:
3b:27:71:50:3d:f6:71:89:be:7a:30:1e:f0:e7:86:
1b:d4:5c:1b:c0:1e:8b:07:d3:57:27:68:73:46:27:
ab:91:20:72:f1:d1:d0:d7:72:45:a7:a7:ad:84:f0:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:E9:41:57:85:DE:A8:5D:8F:00:1E:7F:51:FD:C4:07:85:94:36
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/aTbpQVeF3qhdjwAef1H9xAeFlDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:b7:36:5e:bb:51:17:c4:ed:39:23:e6:f9:e1:b1:b3:c7:d9:
f3:63:2f:f3:88:21:9a:e1:d5:77:b0:3d:16:e7:71:d0:f4:6c:
0a:3f:21:a7:6c:99:06:50:1e:cf:36:43:6a:e1:34:93:7a:b8:
65:54:52:ff:e0:bc:a9:80:42:ed:97:2d:3d:f1:41:c6:f6:17:
22:43:9e:2b:44:8c:50:60:3d:09:6e:22:d2:a0:ad:85:26:b6:
31:10:4c:6f:3c:49:4b:0c:7f:51:8c:9f:ff:58:fd:0d:95:f8:
c8:d2:c4:d9:45:27:f5:af:da:8c:1f:48:cb:ed:28:ec:e2:57:
75:46:f6:d6:ed:91:ff:c4:5a:71:c8:b7:e2:d9:11:7a:7e:aa:
1c:09:bc:21:aa:1a:97:e5:7f:d4:9f:3a:e9:f6:2b:62:3c:b6:
40:d7:29:9b:b2:21:5f:59:8c:a3:97:e3:bc:ed:a9:41:e2:32:
12:a2:30:35:a1:f6:62:4b:37:2d:e8:87:0d:f4:7d:30:2a:2d:
e4:9f:34:c0:1a:f2:e8:a4:ff:a3:bb:53:00:47:a3:64:79:ae:
13:1c:13:ea:37:32:77:ab:ce:8f:9f:dd:13:e4:46:6e:f9:99:
6e:88:a3:ee:c2:28:94:89:3b:2a:fb:07:15:65:b5:14:a0:15:
f8:61:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 11:54:33 2025 by rpki-client