Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/n032k9FmuIzkkyRidAg8YH7w1hU.roa
File: n032k9FmuIzkkyRidAg8YH7w1hU.roa (raw, json)
Hash identifier: xlH82s++yte3uwND1ATPOo20SB9UwXzLCVAcekRQrE0=
Subject key identifier: 9F:4D:F6:93:D1:66:B8:8C:E4:93:24:62:74:08:3C:60:7E:F0:D6:15
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 01992892A84AC60FB644F806D911EA158DC7
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/n032k9FmuIzkkyRidAg8YH7w1hU.roa
Signing time: Mon 08 Sep 2025 09:05:23 +0000
ROA not before: Mon 08 Sep 2025 09:05:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31122
IP address blocks: 92.39.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:92:a8:4a:c6:0f:b6:44:f8:06:d9:11:ea:15:8d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Sep 8 09:05:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4df693d166b88ce493246274083c607ef0d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:57:e6:3f:3f:d5:cc:70:eb:da:02:dc:3d:
83:af:d3:7d:3a:65:61:ff:1e:04:9d:36:14:da:c8:
85:9e:75:d4:e7:9f:4c:f2:a2:c6:0a:b7:de:85:30:
03:82:6b:31:4c:81:b9:85:ba:f0:df:4f:88:54:0b:
4d:44:fb:70:d3:93:f6:5b:80:a1:56:9b:68:c5:4b:
68:a2:94:f4:cd:07:16:16:23:96:93:f4:d8:af:41:
17:93:77:0a:d7:22:68:6d:99:41:2e:eb:79:af:3d:
58:71:d4:a4:58:2c:fa:be:c4:49:14:e7:73:ce:71:
d9:4a:9d:5c:df:1e:1b:f4:b6:9a:0c:51:58:9f:79:
21:24:77:2c:16:33:bc:fd:24:ea:14:cc:d5:5d:a1:
92:5d:d5:36:e3:3c:89:3e:03:56:87:0e:6d:b4:7d:
84:65:95:08:f4:05:4c:03:8a:06:cf:bf:6b:81:22:
39:25:11:d9:2f:6e:45:4e:c7:9d:57:6e:b0:f8:de:
2f:96:f0:71:55:bf:55:4e:86:f6:4d:16:2b:06:0b:
36:de:3e:47:1d:13:34:8c:af:28:7a:60:8a:79:ee:
77:07:23:f5:a3:97:f7:90:1a:5b:75:0e:32:0e:40:
0c:f0:35:fa:3b:57:e4:2f:f3:5c:2e:4f:7d:1b:a1:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:F6:93:D1:66:B8:8C:E4:93:24:62:74:08:3C:60:7E:F0:D6:15
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/n032k9FmuIzkkyRidAg8YH7w1hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.176.0/20
Signature Algorithm: sha256WithRSAEncryption
09:85:65:b6:c9:09:c5:3c:cc:fd:dd:c2:b2:2a:06:93:73:2c:
19:fd:ed:cd:27:5b:51:95:43:8b:8b:da:1f:37:da:63:30:28:
b0:ec:bd:93:03:ab:8d:46:8e:76:8c:cd:90:d0:7f:5c:1a:12:
cd:de:25:a3:cb:e5:63:ec:9c:d7:e2:48:36:22:75:85:e7:f3:
2e:1e:ea:9c:c2:7d:ee:59:0d:44:13:0b:35:4e:69:47:3e:06:
e1:22:39:04:56:40:54:0e:dd:6b:3d:19:de:bc:18:53:93:26:
dc:6b:cc:45:99:c3:3c:26:eb:4c:b5:0f:02:67:99:f2:64:dd:
3c:a2:02:04:0a:1e:63:b4:b8:12:3d:c3:ed:8c:c8:13:1a:39:
be:80:16:88:e2:25:48:83:0a:77:54:e2:29:73:ea:3c:74:ae:
87:4d:db:9d:2d:3d:a3:74:09:60:ef:8d:dd:26:3c:16:7e:a0:
4a:94:4a:6a:4b:89:8f:a2:fe:91:be:e9:a6:70:21:72:1d:e8:
99:89:f3:d2:71:9c:be:d6:84:a9:48:30:54:82:c5:4c:72:c6:
8f:5b:f4:8d:78:84:c8:f2:c1:0e:f0:d8:a8:be:f0:e0:00:0b:
05:d3:a7:32:07:35:20:21:05:1f:37:f9:6a:5a:fb:7f:31:0d:
6a:d7:72:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:56:02 2025 by rpki-client