Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I1RD2UUh3tyjFmuG1juwjt8r3is.roa
File: I1RD2UUh3tyjFmuG1juwjt8r3is.roa (raw, json)
Hash identifier: ZF+vaKs0I0VNwkyEUEYVbuws0Jk7R8UjwEUcU/pZcQg=
Subject key identifier: 23:54:43:D9:45:21:DE:DC:A3:16:6B:86:D6:3B:B0:8E:DF:2B:DE:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0199382CFFFB6D3B7168A3C214319EC344D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I1RD2UUh3tyjFmuG1juwjt8r3is.roa
Signing time: Thu 11 Sep 2025 09:48:17 +0000
ROA not before: Thu 11 Sep 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211275
IP address blocks: 109.206.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:2c:ff:fb:6d:3b:71:68:a3:c2:14:31:9e:c3:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 11 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=235443d94521dedca3166b86d63bb08edf2bde2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:0c:d4:82:68:f0:9a:81:fa:bb:48:fe:66:
d3:1b:dd:ce:34:37:eb:ef:72:81:1a:37:05:dc:2d:
38:6f:92:c3:b2:35:e9:1c:7d:69:b5:84:01:11:80:
da:93:52:76:b3:84:83:92:25:b0:3d:f2:16:28:8f:
ea:6b:7e:34:a8:95:c8:cc:7a:53:5e:ba:4d:26:b7:
1d:4e:ff:79:9a:c5:cd:5b:5b:93:a5:3d:44:a3:db:
97:41:2e:78:80:a2:fc:82:98:fd:1f:3b:bf:93:f3:
14:01:68:94:5a:cc:a6:8e:fa:12:ba:f0:5c:af:b2:
a1:5f:a0:ee:72:6f:86:1d:b1:fb:01:51:c6:e2:3c:
f6:c6:4c:6f:3f:a3:1c:60:74:f3:8f:1a:4e:73:62:
d4:bf:c0:22:2b:56:f1:d0:ed:8c:ba:37:d4:14:ea:
44:96:74:f1:b2:f9:76:9d:86:44:33:35:54:2e:a3:
ea:ed:97:30:18:b2:95:2d:a6:34:96:ee:11:e1:4a:
e4:3b:fb:91:e0:25:1e:6f:89:e4:d0:9d:a5:a0:f2:
93:bf:eb:39:2b:30:93:b2:cf:e1:cc:2c:01:26:ad:
6c:03:35:08:b1:58:e3:c2:af:92:b2:f1:88:bd:2d:
4f:33:91:77:df:26:72:d5:87:8c:b4:7c:9d:96:32:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:43:D9:45:21:DE:DC:A3:16:6B:86:D6:3B:B0:8E:DF:2B:DE:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I1RD2UUh3tyjFmuG1juwjt8r3is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:dc:02:ed:96:32:2a:9e:3a:b5:05:0e:a1:35:4e:56:59:80:
d3:1e:f7:ec:bc:97:59:a1:db:d7:b2:22:3f:58:d9:9e:6e:38:
cf:bc:e8:75:10:d8:89:00:c7:13:68:66:08:48:c1:44:2a:6c:
d2:17:b2:e5:a0:ee:d4:96:dc:24:1d:b9:d8:0a:65:14:82:e0:
56:3e:c5:23:49:ca:19:59:03:fa:e9:e9:5f:fb:73:f6:e3:92:
62:f6:bb:53:77:b4:71:ef:3f:4b:b2:f8:a8:8d:90:e8:22:8f:
ea:88:d0:0b:fd:09:8e:71:5a:8e:82:d7:a7:fa:85:d0:8d:5c:
cf:69:7e:cc:66:12:6b:52:82:0c:40:5e:06:27:52:8d:5e:34:
34:e5:3e:f8:2f:cc:33:aa:44:5a:96:72:be:61:ea:9c:5b:62:
c1:28:18:1e:9d:2e:bb:e3:9e:74:05:30:51:f4:2c:58:40:4c:
ca:79:b7:37:85:d3:2d:9c:81:53:f5:d9:03:af:e3:8a:aa:13:
89:b9:57:6c:f1:24:e7:c9:28:85:0c:0a:68:8a:3b:e5:f5:5e:
a3:42:40:d1:d2:ed:f8:93:a0:aa:b0:80:01:19:35:0b:49:0e:
45:76:30:a2:85:a2:07:b0:5c:be:45:00:17:4d:e5:cf:79:04:
96:66:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:55:20 2025 by rpki-client