Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/36cneJws6HIb-_f2mS0l66nxLX4.roa
File: 36cneJws6HIb-_f2mS0l66nxLX4.roa (raw, json)
Hash identifier: cv3+x1XjkIvksuAO0LUX+L5FwL88LDLqWblnVZ+rq3Q=
Subject key identifier: DF:A7:27:78:9C:2C:E8:72:1B:FB:F7:F6:99:2D:25:EB:A9:F1:2D:7E
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01999AA7A9C7ACA23358348F03B58FF59203
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/36cneJws6HIb-_f2mS0l66nxLX4.roa
Signing time: Tue 30 Sep 2025 12:45:03 +0000
ROA not before: Tue 30 Sep 2025 12:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 87.254.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:a7:a9:c7:ac:a2:33:58:34:8f:03:b5:8f:f5:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 30 12:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa727789c2ce8721bfbf7f6992d25eba9f12d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:c1:57:34:1b:9e:ee:c4:17:0a:dd:ab:9f:
59:90:cf:77:07:23:16:83:0b:58:44:32:41:b4:b0:
b3:22:fd:21:94:e9:5d:ee:69:60:25:54:37:01:f4:
fc:a5:e7:df:5f:cf:25:69:5c:d3:57:f0:7d:d6:e6:
1a:bf:f1:c2:8c:a0:26:f2:d1:54:dc:62:c6:81:ef:
d9:3a:67:d5:e6:8e:96:5e:51:9b:24:bd:7c:22:f3:
8d:70:79:e0:de:4d:c2:47:ac:bd:23:04:11:f4:24:
e2:15:8c:c0:fd:8e:18:42:fc:f4:f0:a2:89:2d:55:
4c:67:84:38:26:c9:f2:99:5e:12:9a:3e:75:47:1c:
fa:e2:41:a2:f3:8c:2c:fd:c4:d8:74:35:c3:e1:4c:
af:40:66:07:b8:5d:27:26:ec:ab:6b:76:f4:56:cc:
0e:ad:6b:9d:ad:1c:24:41:5b:0e:9b:88:90:5c:40:
52:42:88:23:8b:3f:99:ce:f0:e0:18:e2:59:1a:b9:
a5:fe:a9:0a:fe:bf:c6:b0:4e:45:05:89:ef:5a:32:
ad:e0:ed:bb:22:92:42:b5:7d:72:76:f6:8b:4e:02:
ef:3a:ca:f6:79:55:04:45:e2:82:c2:14:0c:da:8f:
a5:9e:52:60:69:4b:84:30:45:d2:b4:c7:2a:5a:cc:
f6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:27:78:9C:2C:E8:72:1B:FB:F7:F6:99:2D:25:EB:A9:F1:2D:7E
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/36cneJws6HIb-_f2mS0l66nxLX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:56:6b:52:52:74:5f:1c:5d:25:bf:e8:a6:01:88:1c:ff:
d8:9f:56:b1:89:e5:0a:eb:2f:3f:c9:fd:ef:f6:cc:08:45:06:
71:d8:67:9a:73:41:83:c6:29:4a:3c:94:ea:97:94:d5:f0:e8:
79:2e:ae:cd:93:ba:4c:17:d9:17:4b:f2:d4:16:cc:d5:6a:dd:
0e:a5:20:0a:5b:2a:1b:91:d3:f3:46:66:f1:02:20:7a:82:5e:
54:eb:43:7c:e1:99:97:fd:6b:a2:c9:6c:75:ec:70:7b:c8:39:
04:f1:5e:2b:91:03:5d:d8:fd:f6:b5:b0:ff:04:14:9a:68:40:
21:1a:7a:f8:94:19:ce:d5:1d:d7:71:60:1c:bb:4d:be:fc:82:
bd:ac:92:19:45:fb:47:e2:56:7e:ba:7c:2d:34:1e:c6:ce:54:
ec:33:44:fb:0a:a3:13:e8:9a:3c:09:42:e6:7d:ec:9a:52:db:
01:a2:30:70:78:3e:14:0f:4b:5b:93:70:77:1b:90:2e:62:ac:
a3:23:1b:ec:5c:bd:e6:c9:b4:f4:76:51:6a:69:26:3e:f5:d4:
3a:33:7d:dd:67:2c:b4:7a:f3:7a:c6:42:3d:20:0b:85:73:40:
6f:14:05:1f:bf:b7:fc:d0:14:3c:36:01:92:52:53:f6:8c:a9:
62:f6:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:37 2025 by rpki-client