Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AYhCpt2nS9cBA96dE8n0C1zgSFU.roa
File: AYhCpt2nS9cBA96dE8n0C1zgSFU.roa (raw, json)
Hash identifier: wSzT7v09edvUnC82Ai3+xqIYyLSdIm4hcWMUZ1aSigY=
Subject key identifier: 01:88:42:A6:DD:A7:4B:D7:01:03:DE:9D:13:C9:F4:0B:5C:E0:48:55
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019937E0FF943A9D5159C06D0658A3E173CE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AYhCpt2nS9cBA96dE8n0C1zgSFU.roa
Signing time: Thu 11 Sep 2025 08:25:16 +0000
ROA not before: Thu 11 Sep 2025 08:25:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 109.176.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:e0:ff:94:3a:9d:51:59:c0:6d:06:58:a3:e1:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 11 08:25:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=018842a6dda74bd70103de9d13c9f40b5ce04855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:dd:49:8e:8f:c1:58:c7:95:fe:8a:c5:81:
73:da:5e:44:51:41:1f:9e:77:17:c5:61:5c:85:be:
72:c4:74:bd:9c:42:8c:c1:b0:53:d8:63:d5:bd:28:
b1:27:e5:3d:70:0f:49:b3:c4:11:55:58:80:3f:32:
6d:c9:58:f2:10:79:e6:75:b3:c6:b7:ed:d5:7a:32:
e3:ed:b6:74:ed:79:a9:97:c3:aa:a2:35:7c:e4:b2:
85:9f:77:f8:d5:71:76:6a:ce:df:6f:02:5f:73:e7:
9d:be:17:8b:5d:fc:e7:42:d5:93:4f:63:bf:7d:06:
b3:88:2e:d8:4a:39:d9:db:16:3e:2c:3a:52:4d:b3:
9f:f0:5e:c1:a8:42:1b:94:f4:6d:e3:ce:c1:94:c3:
7f:7a:ca:3f:8f:f0:3f:ec:8b:64:09:59:62:33:a9:
f0:5e:24:4e:5e:25:0c:5f:14:b5:74:8f:42:5b:9b:
da:c5:21:97:95:72:71:9b:52:aa:a7:ab:74:58:dc:
33:cf:18:f6:c1:fd:26:68:52:33:77:85:f5:5e:3d:
b8:2d:c0:cd:4f:9a:9a:57:63:f8:9d:19:a3:14:5f:
6a:37:54:78:93:f3:04:a5:da:70:3a:11:31:9d:79:
7b:d5:ce:8d:7a:ff:61:3f:0f:fe:65:23:5c:fa:59:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:42:A6:DD:A7:4B:D7:01:03:DE:9D:13:C9:F4:0B:5C:E0:48:55
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AYhCpt2nS9cBA96dE8n0C1zgSFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5c:d1:75:01:9f:4c:54:bc:3c:ad:0d:f9:fa:64:ac:12:2f:
8b:75:8b:5d:a4:e7:f1:58:25:f2:0d:ac:3d:e7:c4:c0:54:ee:
2b:1d:5c:26:d2:02:86:05:75:db:dc:a3:e7:b7:db:59:61:fe:
4f:b4:93:7e:95:a7:7f:0f:0b:59:13:b3:41:f1:1f:b6:87:d2:
c4:9f:e4:c2:f6:d3:29:cf:98:cb:a9:3c:7e:ee:60:60:27:31:
c7:16:3b:ab:0b:d3:01:3e:a1:19:a1:b3:cc:e8:ab:b5:82:51:
67:72:44:d4:0f:44:c0:55:24:4c:24:b8:c3:98:11:13:53:ee:
19:6b:76:6d:12:7f:ed:e7:91:d0:d2:07:8a:49:0f:7d:ce:ba:
9c:f9:e2:4b:85:ef:5d:f5:20:b6:53:c5:08:df:c2:4e:51:00:
cd:29:54:1d:89:b8:6e:96:62:34:b3:a7:3a:2a:69:d9:84:0d:
72:fa:78:8c:7c:2c:5b:ac:b5:9f:26:a6:c5:f0:37:17:ff:df:
5c:05:e6:63:67:48:7c:44:c4:b3:1b:98:b4:7e:04:3d:cb:8f:
04:68:db:b3:3f:e5:3c:d5:fd:b2:b8:00:94:35:c7:c9:99:16:
53:d0:45:4e:37:6b:ec:bb:28:8c:d0:0e:23:c5:3c:d9:7f:02:
cc:58:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:59 2025 by rpki-client