Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/9_3AMOZnpM6z-fi5v8uDFndWNJg.roa
File: 9_3AMOZnpM6z-fi5v8uDFndWNJg.roa (raw, json)
Hash identifier: W3uq1C+bH3S0gEZOoKLsSIrs9sVbwnRIm2HD8kmqAGc=
Subject key identifier: F7:FD:C0:30:E6:67:A4:CE:B3:F9:F8:B9:BF:CB:83:16:77:56:34:98
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019A60B358740AFAE6BCB1887AE8D54A3D04
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/9_3AMOZnpM6z-fi5v8uDFndWNJg.roa
Signing time: Fri 07 Nov 2025 23:42:37 +0000
ROA not before: Fri 07 Nov 2025 23:42:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42330
IP address blocks: 185.250.8.0/24 maxlen: 24
185.250.9.0/24 maxlen: 24
185.250.10.0/23 maxlen: 23
2a0b:9400::/30 maxlen: 30
2a0b:9400:1000::/48 maxlen: 48
2a0b:9400:1001::/48 maxlen: 48
2a0b:9401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:b3:58:74:0a:fa:e6:bc:b1:88:7a:e8:d5:4a:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Nov 7 23:42:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7fdc030e667a4ceb3f9f8b9bfcb831677563498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:0d:b2:61:0a:c2:fd:fc:ec:51:eb:83:98:
75:05:2c:d6:ab:63:72:80:f2:fc:c1:35:4a:e5:d6:
08:4b:09:4d:64:6f:23:93:d5:73:06:ec:08:62:bc:
94:1b:3d:80:bc:0b:ca:ac:32:06:5c:f2:05:56:74:
e0:4f:6e:87:1d:eb:56:31:d8:28:01:4d:67:c3:09:
bf:6a:70:90:73:21:be:0c:3c:8a:69:71:a2:0d:1f:
4b:c3:5c:13:b0:9f:42:14:01:ff:06:26:81:47:6a:
51:5e:02:60:dd:d6:ad:b1:9b:2f:53:6f:d5:26:aa:
4a:34:3d:44:d4:dc:32:42:2b:e6:75:31:ae:66:4f:
72:cc:09:a2:c5:7d:28:ce:6d:e7:82:ff:eb:00:28:
30:9d:08:f0:71:60:a5:04:06:52:8e:d0:8a:79:7e:
74:36:cc:5e:93:d3:c5:99:55:df:0c:79:e9:46:03:
44:fe:3f:00:8c:d1:0a:94:cc:8f:dd:eb:8b:c6:8f:
f0:e1:4b:ef:70:fa:43:87:eb:60:8e:ba:dd:8d:b4:
74:74:36:32:ed:67:27:f6:e1:a0:07:1d:13:cf:c9:
84:66:f1:41:92:da:7d:ef:4d:53:d7:4f:d2:f0:35:
d3:70:80:65:b4:d5:cc:49:8b:72:5a:b0:f4:3b:ea:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:C0:30:E6:67:A4:CE:B3:F9:F8:B9:BF:CB:83:16:77:56:34:98
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/9_3AMOZnpM6z-fi5v8uDFndWNJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.8.0/22
IPv6:
2a0b:9400::/30
Signature Algorithm: sha256WithRSAEncryption
98:13:ef:80:8c:36:82:d4:e8:d0:7b:71:e9:01:1e:ff:e2:94:
8c:4a:c4:70:e7:09:1a:8c:f6:be:f0:81:8b:c9:c4:9f:5d:36:
6b:c6:ae:8d:a5:31:72:23:3c:74:b5:c6:f9:7a:8c:eb:0b:8c:
5f:64:e1:2b:67:09:c1:94:9f:3a:b7:9a:7f:53:dd:8d:06:90:
10:ad:a6:98:9b:8e:ce:fb:dc:ac:91:17:08:48:4d:4b:e0:70:
f5:d5:4c:2f:b4:56:80:db:c7:32:b4:e1:e5:f0:ce:5f:d6:2c:
f4:58:9a:47:99:8d:45:8e:cf:85:da:12:26:c7:ec:2d:bb:c1:
57:62:ef:c2:e1:eb:d9:a5:5a:a0:ca:04:1d:ea:7e:b0:c9:f2:
76:69:00:b6:71:f8:f6:39:47:f6:f1:b0:eb:7a:b3:c8:52:98:
34:c9:be:7b:7e:5f:9a:b3:eb:4b:61:42:25:d7:01:e3:d5:15:
06:15:b0:3b:e8:d4:74:48:81:c7:11:7c:58:f2:b6:56:89:8a:
ad:be:54:ea:25:db:5d:79:a9:43:f3:7e:fc:d1:80:1c:2c:7a:
78:94:ed:83:3d:dc:53:bb:87:fa:40:46:74:0f:b5:a8:95:4f:
07:ee:e6:90:be:08:0f:28:98:07:82:39:48:7c:9b:3c:60:d4:
f5:dd:fe:db
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZpgs1h0CvrmvLGIeujVSj0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjUxMTA3MjM0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZkYzAzMGU2NjdhNGNlYjNmOWY4YjliZmNiODMxNjc3NTYzNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW4NsmEKwv387FHrg5h1BSzWq2Ny
gPL8wTVK5dYISwlNZG8jk9VzBuwIYryUGz2AvAvKrDIGXPIFVnTgT26HHetWMdgo
AU1nwwm/anCQcyG+DDyKaXGiDR9Lw1wTsJ9CFAH/BiaBR2pRXgJg3datsZsvU2/V
JqpKND1E1NwyQivmdTGuZk9yzAmixX0ozm3ngv/rACgwnQjwcWClBAZSjtCKeX50
Nsxek9PFmVXfDHnpRgNE/j8AjNEKlMyP3euLxo/w4UvvcPpDh+tgjrrdjbR0dDYy
7Wcn9uGgBx0Tz8mEZvFBktp9701T10/S8DXTcIBltNXMSYtyWrD0O+oeCwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPf9wDDmZ6TOs/n4ub/LgxZ3VjSYMB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvOV8zQU1PWm5wTTZ6LWZpNXY4dURGbmRXTkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufoIMA0E
AgACMAcDBQIqC5QAMA0GCSqGSIb3DQEBCwUAA4IBAQCYE++AjDaC1OjQe3HpAR7/
4pSMSsRw5wkajPa+8IGLycSfXTZrxq6NpTFyIzx0tcb5eozrC4xfZOErZwnBlJ86
t5p/U92NBpAQraaYm47O+9yskRcISE1L4HD11UwvtFaA28cytOHl8M5f1iz0WJpH
mY1Fjs+F2hImx+wtu8FXYu/C4evZpVqgygQd6n6wyfJ2aQC2cfj2OUf28bDrerPI
Upg0yb57fl+as+tLYUIl1wHj1RUGFbA76NR0SIHHEXxY8rZWiYqtvlTqJdtdealD
83780YAcLHp4lO2DPdxTu4f6QEZ0D7WolU8H7uaQvggPKJgHgjlIfJs8YNT13f7b
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:48 2025 by rpki-client