Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-euSbK9NfJuv5l4unlHxSzwJAKg.roa
File: 1-euSbK9NfJuv5l4unlHxSzwJAKg.roa (raw, json)
Hash identifier: 3VzIFZEGUaDr5knhpbSePjaCvKHjamBTy8dRhJahC18=
Subject key identifier: F9:EB:92:6C:AF:4D:7C:9B:AF:E6:5E:2E:9E:51:F1:4B:3C:09:00:A8
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01993DBBB4DDDC9B7E4B9B199DA0E8C04660
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-euSbK9NfJuv5l4unlHxSzwJAKg.roa
Signing time: Fri 12 Sep 2025 11:42:15 +0000
ROA not before: Fri 12 Sep 2025 11:42:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.109.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:bb:b4:dd:dc:9b:7e:4b:9b:19:9d:a0:e8:c0:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 12 11:42:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9eb926caf4d7c9bafe65e2e9e51f14b3c0900a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:f5:5a:bc:4e:96:48:05:2a:ee:99:c7:78:
cd:bf:cf:27:3e:11:35:b3:af:69:ef:ba:d9:f7:9e:
f0:8b:b7:81:55:63:d3:7c:53:66:a6:fc:bd:52:de:
f1:0e:78:64:95:92:24:fc:98:bd:f2:5a:98:3a:32:
d9:6b:c3:56:f3:c3:90:87:2f:19:85:0b:48:35:12:
da:80:4a:a3:14:a6:82:6b:99:6b:ff:a5:75:8d:fd:
f7:fe:29:41:5a:1a:bd:05:d8:2c:3e:54:6e:09:b0:
d3:cb:c7:50:8f:2a:4d:08:89:c9:58:92:27:87:a2:
97:9c:dd:85:08:02:af:5b:1d:fd:db:68:4c:da:b4:
ff:d3:5d:c2:08:28:f7:08:8f:cd:76:52:9a:43:65:
e2:c9:0a:06:d1:18:de:a7:64:8c:3a:d2:01:96:68:
ec:67:53:d8:5c:95:27:01:4a:a5:77:47:42:7a:2c:
5f:08:d7:10:4e:3d:49:02:dd:2f:81:3b:74:79:9a:
9f:a1:48:ba:f3:3b:d9:bd:aa:25:4e:82:d1:f5:aa:
d6:0b:69:3d:02:d1:05:6e:46:fc:d6:71:2d:99:4d:
90:f1:d4:70:d8:df:78:b4:80:2d:8d:9d:c1:cb:7b:
65:f6:be:a2:d5:27:dc:03:b8:db:8f:a7:69:1c:46:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:92:6C:AF:4D:7C:9B:AF:E6:5E:2E:9E:51:F1:4B:3C:09:00:A8
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-euSbK9NfJuv5l4unlHxSzwJAKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.46.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:78:b5:9c:ce:18:9f:53:5a:29:c7:06:10:e1:b3:b0:19:
55:46:5e:03:8a:f7:39:e3:ca:42:15:b7:d6:0d:38:af:85:4e:
f8:9e:d6:3f:50:4b:54:68:87:59:62:ce:34:c7:7c:19:b8:3c:
67:fc:90:1d:6c:b5:52:53:48:73:8a:79:06:e9:52:03:d4:cd:
df:91:49:bf:50:78:55:12:46:29:19:5b:91:ee:c4:fe:79:da:
38:55:26:4d:89:f8:ec:2a:d8:02:80:6d:94:8b:3d:b2:1c:71:
92:7e:85:20:52:32:ef:72:91:e6:05:f0:b9:ee:7a:ea:c6:68:
09:0e:4c:22:0a:af:e9:1d:3c:73:7e:1c:a0:2e:f5:68:c7:13:
1c:4e:35:f6:0b:bc:b8:d3:5f:f6:8a:6b:68:07:2a:28:14:ab:
17:80:0b:1a:05:c8:47:21:9e:84:63:a9:0a:18:ba:31:a1:9a:
5a:26:27:f0:77:0b:38:a6:e9:19:4c:ea:a6:ce:61:11:d2:e2:
cc:e1:70:cc:7f:b7:38:60:9a:91:99:5c:41:17:a9:9f:d7:91:
6e:62:3e:60:2a:a2:0b:07:09:8d:5d:4a:52:3f:54:d7:23:ff:
d0:17:ea:57:04:ad:1d:32:78:c9:77:1a:d5:fd:18:b7:62:69:
06:0a:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:39:17 2025 by rpki-client