Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/9jtMsl3JltjVJ2iWbygEgtlOIjE.roa
File: 9jtMsl3JltjVJ2iWbygEgtlOIjE.roa (raw, json)
Hash identifier: d3kGZMntcOshfd8KoTQLknOP7isvXZV3iZ9HeXxwfAc=
Subject key identifier: F6:3B:4C:B2:5D:C9:96:D8:D5:27:68:96:6F:28:04:82:D9:4E:22:31
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019909EDB1CC0B4204703FEC0D37D4CF3119
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/9jtMsl3JltjVJ2iWbygEgtlOIjE.roa
Signing time: Tue 02 Sep 2025 10:16:36 +0000
ROA not before: Tue 02 Sep 2025 10:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34450
IP address blocks: 213.190.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:ed:b1:cc:0b:42:04:70:3f:ec:0d:37:d4:cf:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Sep 2 10:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f63b4cb25dc996d8d52768966f280482d94e2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:0e:a4:5c:95:83:6d:ff:f8:b2:3d:14:77:
8d:af:5e:aa:b8:d4:1c:2a:9c:10:94:5c:6d:a7:5b:
0c:ef:4a:dc:a2:e4:4d:2f:a1:74:fd:3b:0e:5b:b6:
4c:7b:5b:4d:e1:f9:41:bf:be:2b:3b:89:b9:1b:f3:
e3:f2:fe:2b:1a:40:1d:f5:e4:e4:67:d6:cd:73:cd:
2e:ce:f4:0e:95:10:13:79:e1:6c:a5:ed:37:32:c4:
93:c4:86:b2:78:e4:6d:b5:d8:97:aa:2a:13:31:0e:
d6:dd:c8:22:8f:cd:a8:39:b8:ea:38:0f:45:bd:5a:
47:e8:52:1e:f0:ea:03:b8:b1:09:18:e8:b3:d2:50:
6a:55:05:b0:cd:e4:ef:11:a2:f1:65:e4:49:bb:18:
a9:52:9f:46:d7:00:6a:62:34:85:94:27:0e:a2:18:
bc:3a:8c:ce:48:30:ba:c7:ec:97:71:e5:a9:ee:fb:
2b:91:12:c4:50:bb:91:93:42:f2:d3:ba:e7:0c:4a:
d8:e0:46:a3:37:5a:bc:ba:e4:a9:75:45:22:ae:2d:
b8:d0:68:11:cb:71:f7:d2:ca:cc:c4:c3:0c:d2:94:
22:0f:93:63:fa:51:83:83:e4:46:84:32:14:68:8d:
65:99:bc:49:d1:8d:06:97:4a:f6:60:dd:3a:19:1d:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:4C:B2:5D:C9:96:D8:D5:27:68:96:6F:28:04:82:D9:4E:22:31
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/9jtMsl3JltjVJ2iWbygEgtlOIjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7d:91:bc:7f:50:77:f2:37:16:12:40:24:84:1c:ea:cb:2d:
c2:c8:e2:5c:1e:b2:36:b4:70:05:aa:9e:8d:fc:f3:72:fa:6f:
95:b9:11:2e:9a:f1:88:3c:d9:5b:7f:56:01:58:54:2c:6f:20:
81:b5:15:b4:c7:17:2c:1f:e3:82:e1:41:bf:b2:12:bf:49:cf:
64:9b:a3:e1:b7:cb:d7:27:c7:ec:c6:21:76:9b:fa:2e:b6:e1:
65:69:78:3e:ca:07:a8:20:ca:63:78:9e:a1:4b:2b:04:8d:68:
87:15:d7:75:dc:bb:f5:9e:d8:f8:73:62:d3:2c:df:71:54:ff:
2b:c5:44:0f:81:ab:ae:00:9c:7d:06:2b:f7:42:20:79:9d:84:
b0:05:b4:10:38:6a:93:15:45:ee:04:36:0d:e6:3f:10:9d:0f:
31:a1:77:02:3a:a5:1d:82:d8:d7:46:ec:b8:26:bf:69:c4:2d:
1c:73:79:b9:bf:f8:bd:b1:c0:0f:c6:a7:47:83:de:11:c3:a2:
53:78:cf:85:2f:3f:e0:33:6b:8f:c9:cc:30:28:b8:b4:60:3a:
ea:14:3c:18:94:e5:ac:a0:cc:66:73:d4:34:6e:b0:a2:69:eb:
c2:10:1d:96:da:be:4e:55:ad:31:5f:67:6a:20:ea:5c:3a:fd:
28:b6:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:43:23 2025 by rpki-client