Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/9s50Q9-1ULqilThpHU79jiFEiIA.roa
File: 9s50Q9-1ULqilThpHU79jiFEiIA.roa (raw, json)
Hash identifier: 5aJJUqP+R3fj8M4AoRNns1YealoNvLa9oSKi6PcBG8E=
Subject key identifier: F6:CE:74:43:DF:B5:50:BA:A2:95:38:69:1D:4E:FD:8E:21:44:88:80
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019A126AD7CBE8C8362B3EF4E6C0B57A3324
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/9s50Q9-1ULqilThpHU79jiFEiIA.roa
Signing time: Thu 23 Oct 2025 18:53:03 +0000
ROA not before: Thu 23 Oct 2025 18:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22351
IP address blocks: 83.170.128.0/19 maxlen: 19
83.170.160.0/21 maxlen: 21
83.170.160.0/24 maxlen: 24
83.170.161.0/24 maxlen: 24
83.170.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:6a:d7:cb:e8:c8:36:2b:3e:f4:e6:c0:b5:7a:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Oct 23 18:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ce7443dfb550baa29538691d4efd8e21448880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:1f:92:13:58:96:22:01:06:89:55:d7:fd:
fa:4e:cb:8a:b1:91:aa:b2:08:cb:e7:c3:40:18:7c:
5b:3e:d6:b8:27:e9:f5:a9:a8:c0:28:13:db:37:ba:
2e:a3:51:61:a0:3b:8f:b5:a0:b5:2f:a7:04:f0:63:
57:95:26:9d:5b:74:c9:9a:13:5a:7d:ec:a9:42:6e:
d4:42:45:8d:74:53:89:c5:d5:3c:5d:26:0c:3e:b4:
af:07:09:6b:fc:75:47:31:f1:c1:65:44:ce:98:43:
4e:f0:9a:2e:d4:b3:c1:c5:dd:86:94:a3:e8:5e:ff:
c6:fe:65:1c:27:f2:61:7d:06:5c:57:f8:49:ec:1e:
88:16:c2:7b:44:42:95:ca:cc:17:48:4f:4d:dd:bd:
29:f8:6d:84:39:7b:44:d8:a4:26:6c:87:f2:04:9a:
4c:5c:ed:9e:cd:2c:83:59:45:d4:4b:d9:21:ec:d7:
03:a7:80:c8:9a:40:58:b6:cd:a8:23:39:05:f3:75:
17:a8:a9:c8:d0:ee:b7:f7:63:ee:26:29:af:0c:9d:
17:1a:cd:5e:d1:da:54:3c:db:8d:66:b6:dc:25:00:
b5:ff:37:43:09:98:f8:7e:57:fe:14:4f:a5:53:b0:
4c:15:6d:55:bc:53:e2:b5:5b:26:ba:cf:68:69:2a:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:74:43:DF:B5:50:BA:A2:95:38:69:1D:4E:FD:8E:21:44:88:80
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/9s50Q9-1ULqilThpHU79jiFEiIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.170.128.0-83.170.167.255
83.170.176.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:d2:0a:73:29:3c:4e:c7:50:b8:0d:14:7a:7d:8a:b0:ab:67:
fc:d6:cb:11:fd:98:2f:ef:a2:6a:7a:4c:74:d0:a3:8c:15:66:
a9:4a:0e:ae:b4:06:8e:e9:2d:34:fb:c3:c5:53:ca:7f:13:85:
27:e0:32:25:ae:24:95:a7:52:51:2b:06:6b:d1:49:a4:0c:61:
29:98:12:23:b1:8d:1b:29:a0:a9:81:68:f8:bb:68:4e:6f:ce:
fc:ec:ab:f0:b3:fe:ff:70:5a:d6:bc:ed:ff:21:93:eb:53:67:
19:f3:9b:5c:68:53:0b:17:9c:3d:0f:7e:49:ee:31:90:d7:ef:
0a:9e:0f:f2:e7:f2:de:3a:b9:1c:3c:a6:91:56:c4:4a:25:e4:
d2:0f:79:10:6f:7d:26:39:50:17:06:c3:67:4f:20:1b:8e:bc:
fb:30:00:d2:ff:aa:40:45:a1:29:a3:d1:ad:65:1c:5a:fe:ae:
35:ce:2f:13:22:5b:3f:e3:8e:81:2e:c9:f0:3d:e9:68:f8:61:
51:7d:61:30:16:c6:53:86:79:60:9a:6a:46:b0:49:6a:f5:1c:
82:ee:83:de:05:2c:16:9b:3a:57:72:af:38:d2:dc:11:cf:31:
ab:7d:3c:87:28:f6:19:57:61:cf:48:05:43:0b:ca:f0:b0:44:
4a:62:28:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 28 07:13:52 2025 by rpki-client