Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa
File: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (raw, json)
Hash identifier: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=
Subject key identifier: 8F:DB:83:6B:8A:AC:0C:B9:4B:EE:4D:EC:AA:8A:8E:42:A9:32:69:88
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01993EE1966E456BF82DBB76806DB89811C3
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa
Signing time: Fri 12 Sep 2025 17:03:15 +0000
ROA not before: Fri 12 Sep 2025 17:03:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215124
IP address blocks: 95.170.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:e1:96:6e:45:6b:f8:2d:bb:76:80:6d:b8:98:11:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Sep 12 17:03:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fdb836b8aac0cb94bee4decaa8a8e42a9326988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:47:61:01:99:12:fe:5f:c1:54:80:bb:18:
a3:00:0b:4b:00:5a:dd:d3:11:5c:f9:c6:39:29:c9:
da:3f:92:85:12:10:a8:0a:5e:ba:97:b6:a8:54:f3:
45:ec:32:62:9f:d2:16:2a:77:63:34:be:a4:e2:f3:
ed:97:14:6d:ee:6f:6b:87:4f:01:90:90:e4:51:38:
f4:c6:b5:87:8d:a9:d7:0d:35:d8:79:8b:60:a3:68:
a3:c5:f0:0f:9a:ea:24:2c:81:9a:1e:b6:6f:d2:bf:
b1:c0:e4:27:51:c4:4f:aa:6e:b8:3f:36:4d:50:10:
b5:ec:19:49:60:ff:c4:89:35:d9:6e:60:c0:f1:12:
8e:87:31:b6:37:e2:54:0e:f6:81:0f:29:63:77:67:
ef:60:b0:3f:a7:48:3e:bf:52:b3:91:73:ee:97:66:
95:9b:3d:5e:3f:56:35:88:4c:26:1f:9d:15:43:1a:
0c:2a:c8:a7:f1:a8:54:61:f1:ab:bd:f1:2c:4f:4c:
c5:af:31:55:98:f8:fd:6e:84:da:b2:27:b5:ef:76:
e9:c5:17:ce:e4:66:9f:cf:b7:4e:36:b7:af:c9:8e:
65:04:85:97:b1:9f:cb:32:02:0c:cc:8a:0e:bd:68:
f1:3e:de:a7:6f:e0:57:fc:46:ce:26:68:7f:75:06:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DB:83:6B:8A:AC:0C:B9:4B:EE:4D:EC:AA:8A:8E:42:A9:32:69:88
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:61:81:d5:c5:ad:e4:a0:91:3f:58:fc:62:76:da:4c:e0:0c:
e6:9a:26:b5:10:cc:b5:0c:08:90:4d:37:db:5b:c1:07:c6:c4:
ee:3d:1e:20:13:e5:b7:19:ce:45:c4:38:4d:ec:13:ef:60:1c:
e4:c0:90:e4:76:b8:aa:a5:fc:a5:c1:06:31:7c:a7:91:d7:66:
7a:db:f9:18:4b:c9:9f:d4:3f:b8:fe:52:6b:1c:8b:b6:20:07:
6c:39:56:84:cc:a2:52:fc:66:ab:62:fc:5e:d3:f2:2e:11:50:
46:44:fd:4d:e9:01:91:0a:7d:3b:02:25:a0:30:74:4c:a9:1c:
87:0e:41:e1:ec:9d:9f:83:2b:9b:a4:13:d4:f2:96:f0:64:65:
ce:08:8d:f5:ba:7a:d8:1b:b5:82:f6:28:4e:43:c7:ba:66:a0:
55:2d:7f:06:87:fc:ef:a9:5c:84:c5:70:d6:06:6d:fe:11:28:
0b:b8:bf:be:43:58:67:18:8d:5f:4a:fa:1c:5e:da:7b:9d:39:
27:d5:bc:76:c4:4b:1f:57:8a:ad:fa:71:ec:5d:bf:6d:80:e0:
bd:1e:c4:9f:e4:98:93:d8:7b:dd:8f:f7:e8:ab:35:ac:c6:a3:
80:83:3d:aa:30:50:e4:b2:65:79:07:a5:09:20:9e:7c:01:5c:
e0:4a:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:55:50 2025 by rpki-client