Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-AHYEE4bOKtK-TjH-4qRjm_1Yvw.roa
File: 1-AHYEE4bOKtK-TjH-4qRjm_1Yvw.roa (raw, json)
Hash identifier: rzRae/p8wOf3emIndBqavOJ3yH/PXi/I17si7ecZ6h8=
Subject key identifier: F8:01:D8:10:4E:1B:38:AB:4A:F9:38:C7:FB:8A:91:8E:6F:F5:62:FC
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01997A7CCE867C56457BAF5669E71AD070FC
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-AHYEE4bOKtK-TjH-4qRjm_1Yvw.roa
Signing time: Wed 24 Sep 2025 06:50:23 +0000
ROA not before: Wed 24 Sep 2025 06:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 109.122.0.0/24 maxlen: 24
109.122.2.0/24 maxlen: 24
109.122.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:7c:ce:86:7c:56:45:7b:af:56:69:e7:1a:d0:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 24 06:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f801d8104e1b38ab4af938c7fb8a918e6ff562fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:fb:11:76:71:fb:f8:2d:f1:e8:5e:af:c3:
4a:7c:14:c0:91:74:e1:c0:04:a8:12:93:c9:76:6e:
21:6a:af:90:65:5e:6d:20:f8:0f:0d:7e:fa:8a:97:
21:a9:9e:bb:54:4e:f6:9a:b7:17:41:e0:ec:19:72:
6c:25:7e:0b:2f:38:55:e0:82:da:88:22:7f:dc:ef:
66:45:9a:3d:bb:06:e8:2a:fa:dc:d4:76:40:a4:e8:
58:c0:fa:01:c7:42:58:84:45:4f:34:cf:ca:60:06:
f2:c0:53:0f:33:f4:d8:10:2b:3f:49:db:89:61:05:
26:f9:8b:54:37:65:17:96:33:c9:59:2e:d7:3a:8c:
04:b8:4c:0e:ce:37:12:4f:0d:2a:96:37:f8:00:23:
9b:9f:a3:82:7a:ec:2c:31:75:a5:0b:68:51:a3:98:
11:79:14:0c:2e:fb:eb:c7:f2:21:48:8e:88:c9:eb:
33:26:49:02:49:63:41:60:60:06:45:fd:fd:9d:41:
ed:ea:09:05:9c:21:da:9f:af:e5:87:6e:cd:d1:49:
92:51:8e:a6:6b:13:93:4a:63:00:6d:59:08:bb:c8:
88:ed:e0:31:ae:b2:79:a8:ba:17:10:70:f0:e7:7c:
1a:ba:9b:1a:99:1a:70:c6:d2:ac:c0:75:db:b3:77:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:D8:10:4E:1B:38:AB:4A:F9:38:C7:FB:8A:91:8E:6F:F5:62:FC
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1-AHYEE4bOKtK-TjH-4qRjm_1Yvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.0.0/24
109.122.2.0/24
109.122.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:11:03:26:bb:48:2f:e5:05:4f:ef:99:42:66:6e:ed:35:f5:
0a:ca:fe:cc:e1:aa:a4:07:5d:77:20:05:1d:0c:14:15:9c:ee:
72:6c:0a:a5:99:11:cc:72:27:cb:14:b1:8b:36:43:b8:3a:7f:
68:df:02:3d:95:6a:b9:8e:3d:a9:3d:cb:c1:31:6e:ff:43:8a:
31:9d:7a:40:8c:6e:3e:f9:9b:9c:43:cf:7d:16:af:6d:1a:63:
f4:0b:0b:72:3b:75:c2:94:31:b6:a0:89:af:53:e8:86:0a:6c:
f3:69:6e:91:46:5d:c3:74:d3:fa:c6:55:98:7c:b0:34:35:f9:
e0:22:07:14:48:c3:fa:fb:cc:9e:82:cd:42:a6:f7:ed:ed:3c:
7e:3d:d9:09:fc:8f:b6:ea:83:31:9c:ca:16:20:cc:54:4c:82:
ba:1e:0f:94:4a:c3:ee:c7:3c:8c:f0:98:33:07:39:98:9c:e3:
29:4e:b7:0f:f4:a5:3f:08:2f:30:8b:39:a6:2a:a9:31:22:d6:
c5:38:a9:20:89:e4:eb:d9:c7:e9:c9:04:a9:77:b7:68:f7:5c:
50:b5:93:b7:f2:08:83:c8:43:48:88:70:56:79:7e:76:06:1c:
11:7c:f9:19:de:43:eb:9e:e6:b3:d0:c5:3d:55:c5:38:bd:e3:
c8:73:ed:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:31 2025 by rpki-client