Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1z9osAltocCwYseWO2P3ADmt00.roa
File: k1z9osAltocCwYseWO2P3ADmt00.roa (raw, json)
Hash identifier: hTQ7de37wH+q4eG6IXlIOyiJ2V4FuSgXT5LcIZPV2qA=
Subject key identifier: 93:5C:FD:A2:C0:25:B6:87:02:C1:8B:1E:58:ED:8F:DC:00:E6:B7:4D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199851F46D3D3654DABB63F8697902D0168
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1z9osAltocCwYseWO2P3ADmt00.roa
Signing time: Fri 26 Sep 2025 08:24:03 +0000
ROA not before: Fri 26 Sep 2025 08:24:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 82.153.42.0/24 maxlen: 24
82.153.90.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:1f:46:d3:d3:65:4d:ab:b6:3f:86:97:90:2d:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 26 08:24:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=935cfda2c025b68702c18b1e58ed8fdc00e6b74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:c6:4e:bd:77:9e:2b:14:18:37:ff:e8:3b:
fc:9f:d7:6b:82:b0:81:09:8b:72:57:4a:79:ad:f6:
ac:92:e5:37:12:06:1e:d4:8c:02:fc:37:76:79:a6:
99:39:30:f2:61:55:1a:8a:ca:f7:2d:ee:a2:12:13:
4a:be:26:e5:4a:9f:1e:16:84:a0:0b:49:d7:f9:0d:
9d:fb:37:3f:06:58:32:ef:3e:3e:9c:7c:d1:41:e4:
a6:5c:7e:e4:0c:4f:49:03:ec:ee:4b:7c:c7:f4:4b:
86:22:54:1c:0f:8e:9d:fe:81:32:50:93:75:27:cb:
76:f3:0e:fb:23:2a:72:1d:b5:94:e5:c4:c6:6a:7b:
22:94:e0:9e:77:55:35:dd:45:c7:25:e4:b1:51:7b:
d4:0f:ad:36:54:07:b3:89:3a:59:c3:b2:98:8a:e6:
54:62:9b:88:0f:73:f0:4d:26:7f:a3:0c:93:0e:1b:
ff:df:8f:64:ac:f9:4b:dd:5a:a3:f0:9b:b6:8c:5d:
5d:4d:96:12:f9:c7:ff:95:56:02:8f:21:61:46:9f:
ce:74:03:5c:24:41:89:d5:bf:6a:33:c9:1c:85:db:
95:ec:1d:04:68:78:14:eb:6d:b6:89:3d:53:cb:4e:
0f:78:a4:d0:6c:be:d8:b0:47:25:26:99:67:e2:31:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:FD:A2:C0:25:B6:87:02:C1:8B:1E:58:ED:8F:DC:00:E6:B7:4D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/k1z9osAltocCwYseWO2P3ADmt00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.42.0/24
82.153.90.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:74:95:a6:32:5f:38:e7:31:c5:16:b0:e4:70:9d:c8:c7:a2:
ca:b2:89:01:8b:f8:0f:a1:83:b5:d3:03:4d:d8:aa:4f:89:a4:
87:d1:43:77:c8:4d:89:f9:12:4e:cc:96:ab:c1:60:47:17:db:
3b:ae:70:0b:6f:0a:dd:96:d7:35:94:db:f3:da:5b:67:ae:3c:
40:8a:31:96:87:38:8e:35:4e:93:eb:82:08:1c:45:1e:0f:73:
a4:28:d1:86:b1:0b:8c:6d:ba:7a:18:9d:61:e8:3c:fb:40:20:
9b:49:d1:5a:6e:7b:a3:38:57:7f:5d:40:34:1b:e1:c4:b0:7f:
9c:37:6f:2c:e4:8a:d9:d7:9b:0c:8e:c6:b6:c7:a8:bd:df:f7:
e4:3c:5d:b9:4b:5d:8b:b5:86:b1:fa:dc:68:48:6d:d6:58:54:
d0:d4:85:bd:92:f3:55:f2:ca:c1:c9:83:c0:c8:2a:9b:03:9c:
f9:7c:b0:b3:51:1c:75:ed:fd:43:03:c3:59:88:70:4d:61:7e:
15:9d:4e:74:d2:62:5b:6e:75:ba:92:ba:df:f3:bb:c0:33:eb:
86:d6:49:b7:8d:cd:74:50:fa:3d:c4:0f:d1:02:3b:53:eb:67:
cc:c7:11:cb:56:89:99:7b:f2:27:13:75:e4:36:af:45:ea:05:
64:8a:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:02 2025 by rpki-client