Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leQKqQ6Te8T8Z9fYd3E0BFi4DMo.roa
File: leQKqQ6Te8T8Z9fYd3E0BFi4DMo.roa (raw, json)
Hash identifier: zNTq/8oBCUcgNmC3FXTQfXUyf/4tX4WO3+rq6/o9/dc=
Subject key identifier: 95:E4:0A:A9:0E:93:7B:C4:FC:67:D7:D8:77:71:34:04:58:B8:0C:CA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199949C6B21A8017E1586953BC4A2DF9B65
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leQKqQ6Te8T8Z9fYd3E0BFi4DMo.roa
Signing time: Mon 29 Sep 2025 08:35:02 +0000
ROA not before: Mon 29 Sep 2025 08:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 109.176.10.0/24 maxlen: 24
109.176.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:9c:6b:21:a8:01:7e:15:86:95:3b:c4:a2:df:9b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 29 08:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e40aa90e937bc4fc67d7d87771340458b80cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:c3:f0:42:6a:be:70:62:7d:5a:db:14:01:
cb:56:c2:75:a0:a2:21:41:67:82:03:a2:c4:8b:c4:
2d:8d:f8:e5:6b:81:75:63:44:7e:2e:4e:3e:eb:20:
f6:0f:f2:3f:1a:e6:44:f5:97:3e:05:b9:29:f1:a4:
16:64:fc:d0:0c:d3:ec:d3:1b:a7:a0:58:3f:3f:bc:
27:b5:2a:55:28:17:8f:9e:d7:87:69:64:b1:2d:15:
70:07:1e:83:85:5c:3f:da:ec:19:85:9d:41:03:67:
16:75:3b:ff:c4:48:e0:7f:fa:d4:3e:9c:0b:2d:54:
05:ba:0c:aa:b6:76:5a:a2:6b:0d:bd:45:d0:3b:4a:
42:6a:e0:56:a4:83:0d:1b:86:30:fd:43:a7:b7:7d:
e3:43:82:51:09:4d:cf:09:7c:a3:45:f9:74:a5:fe:
11:71:b7:ff:0c:9a:d6:81:8d:c6:0c:6d:c9:c8:80:
49:a6:24:0c:3c:e7:e5:29:4d:0f:1e:dd:2a:69:94:
bd:71:ae:92:50:79:96:84:8a:16:cf:21:a8:08:10:
b6:fc:cb:f1:41:2f:a9:5d:ff:c9:4c:7d:62:c5:ef:
b2:f4:44:4b:3e:30:db:e5:2e:05:b3:0c:a8:5d:69:
f8:7e:71:7b:d2:9f:29:45:08:55:5d:23:22:fb:db:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:0A:A9:0E:93:7B:C4:FC:67:D7:D8:77:71:34:04:58:B8:0C:CA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/leQKqQ6Te8T8Z9fYd3E0BFi4DMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.10.0/24
109.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
64:de:68:d9:e9:72:51:2a:71:f9:43:9e:10:3f:ca:a6:37:39:
ea:d8:2d:1e:0e:cf:ce:73:69:d8:ba:64:b9:1c:9b:98:4b:d2:
94:98:48:1e:ca:6e:ba:c2:9c:7a:73:86:db:e7:88:4c:ce:94:
52:37:21:79:53:f0:18:bc:cb:90:d4:3e:23:3a:69:e8:09:75:
e4:a6:0b:38:08:19:04:78:b2:88:64:bb:15:fa:36:5f:a7:87:
1d:b1:1e:9f:16:96:3f:c9:b0:da:dd:2e:f5:72:f6:23:01:96:
12:a8:30:3e:ee:d6:d1:1e:e1:2b:07:23:92:73:d3:1a:8c:b8:
4a:b5:6d:bd:49:4a:46:fb:1a:00:c1:46:47:39:32:0f:09:17:
36:35:4e:38:4f:0b:ff:cb:92:b2:63:e5:27:a8:ef:ac:4b:22:
fa:17:b2:ee:c1:28:c3:64:d4:a4:69:45:88:89:38:f4:64:a6:
c4:ff:59:94:59:85:e5:b9:17:13:79:7b:73:ec:63:02:d0:5f:
b8:ad:a8:3e:b6:e1:a0:46:56:46:7c:a0:ff:aa:6d:ee:98:e4:
42:1a:a0:48:47:57:54:14:36:4b:24:e5:dc:e0:ff:5d:65:1b:
8c:3f:83:d8:f1:1c:30:62:65:3b:33:dc:68:fc:a1:19:53:76:
c3:bc:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client