Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9lkN08q-JQB1F20lzj49szhc5k.roa
File: g9lkN08q-JQB1F20lzj49szhc5k.roa (raw, json)
Hash identifier: Kkp3irRirsedab28H2LhP+DLb1SUY6I+9FnIOHKjS0Y=
Subject key identifier: 83:D9:64:37:4F:2A:F8:94:01:D4:5D:B4:97:38:F8:F6:CC:E1:73:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019803ACBD1EA524E1690678ADDB284647F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9lkN08q-JQB1F20lzj49szhc5k.roa
Signing time: Sun 13 Jul 2025 12:05:08 +0000
ROA not before: Sun 13 Jul 2025 12:05:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 94.183.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:03:ac:bd:1e:a5:24:e1:69:06:78:ad:db:28:46:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 13 12:05:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83d964374f2af89401d45db49738f8f6cce17399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:61:6c:5c:e2:77:ec:b8:d5:6c:5d:06:82:
8f:ef:3d:95:b1:91:79:72:8a:f9:00:20:1b:e6:64:
ac:9f:4a:63:af:85:3e:f1:48:f1:cd:de:ff:c6:b2:
c0:75:a6:40:18:50:1a:00:eb:27:0e:62:f2:f8:f7:
43:d5:8e:b3:b4:21:a8:51:fb:41:b1:c0:45:cc:32:
9a:c5:12:d1:c1:60:d5:e8:48:1c:8b:b9:f1:6d:aa:
a7:31:47:8a:86:60:65:d7:d0:96:71:70:79:79:8c:
f7:6e:9c:2c:97:15:78:d0:ca:59:19:03:50:aa:5a:
f7:5a:ea:17:1d:5c:da:9e:34:80:b8:1e:aa:86:8b:
dc:62:1e:1e:07:cf:2e:fc:25:a7:32:70:6a:d8:47:
43:7c:18:17:9c:61:1c:d4:b7:d3:c4:09:76:02:0b:
3a:3e:4a:29:5a:7d:07:21:62:e5:a8:66:21:19:eb:
d5:db:ea:8b:39:e9:70:75:e5:b5:fd:b5:44:45:97:
d6:c2:7e:08:af:60:38:56:e0:3b:d7:c7:99:bc:ac:
9c:ad:bb:fd:a3:0c:e0:f8:4b:71:b6:f2:8f:22:b7:
97:c8:86:c7:90:20:43:cb:dd:89:81:ca:aa:23:b0:
22:71:b4:b5:6e:32:e2:8a:41:e8:a6:ff:6c:17:81:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:64:37:4F:2A:F8:94:01:D4:5D:B4:97:38:F8:F6:CC:E1:73:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9lkN08q-JQB1F20lzj49szhc5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e9:bc:bd:b6:31:ca:07:1d:2c:1a:c8:fd:9c:ef:85:f2:e4:
41:3b:84:ac:00:ce:02:44:ec:e8:ab:ff:8d:7b:0b:90:a9:17:
d6:fb:86:52:87:c3:cd:34:6f:99:08:38:29:ec:e3:ca:25:cc:
8a:f7:3e:52:98:71:71:c6:9e:f8:87:40:43:f5:43:29:4a:6c:
89:80:d3:9e:05:bb:a0:7b:34:95:b4:6d:81:4c:aa:61:76:94:
b1:e4:ad:12:41:2d:44:d5:56:97:f3:62:b9:a4:5d:15:cf:44:
15:6d:c2:ac:e5:85:76:c4:e3:44:67:0d:88:fa:9c:01:45:c5:
e8:08:9c:ca:17:e4:25:f1:29:55:71:0f:b3:59:ef:d6:fd:fc:
59:d0:16:c0:cb:80:38:c5:1f:fa:42:69:6c:59:35:de:c1:13:
2d:c1:b9:c6:11:a1:41:33:93:8e:7f:08:b1:f2:78:5c:7d:a8:
e9:d9:d2:e5:43:24:91:e4:8d:7d:1b:fd:89:8d:47:17:bc:c6:
08:83:58:6a:e0:16:fa:eb:99:05:60:ab:5c:9b:20:f2:a5:a9:
f2:52:10:41:3f:59:cc:e4:21:c5:e8:08:df:f3:66:0f:8e:1d:
14:8f:94:b3:28:5a:c0:5c:a5:ad:98:97:6c:a3:01:3f:bd:66:
a1:3a:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:06:39 2025 by rpki-client