Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/9trHyRl06XVH8JK4YWuU4XRiRO8.roa
File: 9trHyRl06XVH8JK4YWuU4XRiRO8.roa (raw, json)
Hash identifier: u0LmPm1lp9CiN9GFJa3floA5EH+7KGfe1PA3DxHIjQQ=
Subject key identifier: F6:DA:C7:C9:19:74:E9:75:47:F0:92:B8:61:6B:94:E1:74:62:44:EF
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 0198180398D6E4E1CDC8B9077EF1A11B1C2F
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/9trHyRl06XVH8JK4YWuU4XRiRO8.roa
Signing time: Thu 17 Jul 2025 10:52:25 +0000
ROA not before: Thu 17 Jul 2025 10:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39647
IP address blocks: 80.85.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:03:98:d6:e4:e1:cd:c8:b9:07:7e:f1:a1:1b:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jul 17 10:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6dac7c91974e97547f092b8616b94e1746244ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:e3:cf:5a:97:07:b6:ef:b0:8f:06:37:3a:
dd:42:98:b2:66:b4:d6:22:8b:c9:f1:01:aa:1e:34:
86:b5:a6:ed:f5:37:ac:c2:e7:d8:f4:94:f1:5d:96:
01:73:b3:a1:46:29:39:22:61:9e:86:14:b4:3f:e5:
8f:40:5e:e1:c1:5b:4c:78:36:46:6d:3f:16:5d:58:
43:20:09:d5:f4:4e:ca:95:df:9b:db:4f:01:e3:e0:
0c:af:04:ed:81:82:4b:12:96:d5:f3:f4:ed:70:04:
3e:8e:e4:5c:7c:24:dc:ff:c2:32:9c:e3:80:25:fd:
a5:64:84:6a:83:3d:ba:23:53:f4:d2:f4:19:9e:0c:
e8:a0:f3:5e:30:f9:4f:af:03:40:85:19:2b:f2:7c:
52:65:8b:0d:7b:2f:ad:d1:fc:91:f9:bf:5c:25:3b:
5b:f9:16:b4:03:29:d5:e8:e4:89:84:49:35:4b:75:
30:51:d7:5b:1c:67:8a:a2:a8:d9:d9:e7:15:5d:82:
d7:71:4c:05:ab:6a:61:e3:56:78:98:55:40:88:e6:
fe:64:8d:f4:31:c4:e4:a7:55:17:4a:b4:55:ec:3c:
b6:9c:d5:93:bd:62:e7:df:d2:8c:e4:99:08:ba:55:
3e:f1:2a:2e:80:5c:41:27:7a:ba:58:64:15:8c:50:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:C7:C9:19:74:E9:75:47:F0:92:B8:61:6B:94:E1:74:62:44:EF
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/9trHyRl06XVH8JK4YWuU4XRiRO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.175.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d1:01:fd:b4:75:51:38:3b:f4:d7:e9:3a:41:b3:c3:1d:e1:
b0:5f:30:d6:aa:4c:d2:e0:9f:3b:e8:a1:85:9b:77:02:18:ab:
5a:53:3f:31:58:fa:82:d8:f2:50:fd:d4:4b:e3:46:5e:cb:9d:
e3:70:6b:ab:0e:02:49:95:93:d1:ad:b7:ca:c4:8a:47:ad:a3:
6b:94:01:55:5b:48:e1:d6:af:5f:ef:f2:9b:5a:d3:35:a4:01:
46:e7:e7:25:bf:92:0a:bf:76:74:aa:9a:e6:c0:3a:d8:94:3e:
17:6f:64:d9:d0:2f:57:de:6e:2c:4a:7e:dd:61:8d:fb:86:a4:
44:53:74:13:d8:aa:cf:25:05:b6:c3:8b:8b:9d:7a:df:26:49:
f0:64:2e:c1:b8:68:44:ca:2e:bf:c9:5b:5d:0d:38:4e:a2:3a:
d8:a9:ba:35:e4:ad:3d:4d:27:38:81:2d:4e:4a:69:db:b3:bd:
c3:84:eb:89:6d:e8:0c:6c:e0:61:18:df:04:0a:fa:39:dd:f3:
ea:8d:73:9b:c9:a3:a9:13:a8:a8:3f:b9:c9:f0:58:ae:2f:b0:
b0:9d:8c:c4:49:4e:81:0b:6a:4d:ac:a1:55:fa:c1:23:a0:72:
12:5d:3d:74:b2:5d:f2:86:29:7b:81:93:96:5d:71:51:ef:5c:
b2:ce:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:08 2025 by rpki-client