Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/D_JL9OsKWnsajKF-cPVLgLD_1wc.roa
File: D_JL9OsKWnsajKF-cPVLgLD_1wc.roa (raw, json)
Hash identifier: REalXdL8VCnc028uNWQcdp2hzuzbMKXOBDjPVpWw3KQ=
Subject key identifier: 0F:F2:4B:F4:EB:0A:5A:7B:1A:8C:A1:7E:70:F5:4B:80:B0:FF:D7:07
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019930A6CF20B51136B3D3944613705246CA
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/D_JL9OsKWnsajKF-cPVLgLD_1wc.roa
Signing time: Tue 09 Sep 2025 22:44:22 +0000
ROA not before: Tue 09 Sep 2025 22:44:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 45.93.11.0/24 maxlen: 24
188.119.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:a6:cf:20:b5:11:36:b3:d3:94:46:13:70:52:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 9 22:44:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ff24bf4eb0a5a7b1a8ca17e70f54b80b0ffd707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:a2:e6:c3:a4:ce:ae:48:93:02:15:6b:7d:
e2:6e:b5:02:18:61:08:58:23:da:a2:60:b1:8b:38:
6f:1a:cb:c0:6e:d7:94:75:68:aa:c2:cf:2e:af:ac:
60:66:e1:17:33:86:dc:45:89:b5:b8:b8:6a:44:ba:
97:77:4b:f8:09:aa:0a:8b:1b:c1:6e:ce:c6:78:58:
7b:80:56:28:f9:ff:94:92:25:ed:fc:78:dc:f6:14:
b0:54:a4:37:88:de:49:1a:b2:67:57:9d:1c:cb:ca:
88:55:9c:78:2c:a2:29:aa:a7:82:0c:cf:21:4b:c0:
0c:e5:af:23:07:21:a7:72:d8:9b:44:53:36:cb:46:
dc:fe:2d:d1:7f:06:8d:cb:4c:95:6c:9f:9b:5e:6e:
72:5b:79:d5:3c:0d:f6:a8:97:34:d4:cc:48:53:bb:
8e:c4:aa:de:0d:ae:57:19:c9:23:0b:2c:da:54:cf:
80:de:53:ed:34:22:d5:07:7e:70:ce:26:eb:7e:b1:
93:ca:81:93:f4:f6:a6:6a:c4:14:15:38:d0:36:9f:
ec:42:31:f5:5a:ed:3c:ce:14:4d:4e:00:d9:9c:f5:
a0:ce:6f:99:80:a1:ea:e2:a8:a8:4b:43:a5:b5:76:
a2:dc:cf:b2:78:38:90:e9:61:fb:f7:fe:49:99:c9:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:4B:F4:EB:0A:5A:7B:1A:8C:A1:7E:70:F5:4B:80:B0:FF:D7:07
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/D_JL9OsKWnsajKF-cPVLgLD_1wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.11.0/24
188.119.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:78:94:2d:2b:e1:bd:45:3c:7c:b5:4a:e0:14:76:02:dc:be:
d3:0a:c5:4e:84:29:6e:a1:60:80:e2:b4:86:1c:81:ac:ac:59:
6a:46:9c:33:33:54:26:1c:fb:49:5f:58:e1:53:48:57:60:a7:
a8:a8:af:a3:0b:cc:9a:06:91:8c:81:eb:bc:ff:79:23:74:96:
91:48:16:3a:8f:fa:cf:24:be:58:f7:29:fd:f8:c3:3c:32:32:
c3:b1:23:2c:b3:bc:0b:0d:7e:41:26:62:a6:cb:f3:4a:f2:b0:
80:fc:d6:5c:b5:bb:88:4b:8e:92:31:02:53:98:38:fa:40:7d:
fc:fd:e7:3e:21:97:a7:78:62:5f:d3:89:f1:69:01:7a:6d:4e:
c0:d3:ce:06:2f:e9:f5:a4:2b:3c:bd:d3:e9:c5:d8:58:3c:f0:
c1:ae:ed:6e:34:15:71:e4:c2:a7:ae:78:dd:5e:f5:00:00:2d:
94:68:50:de:e7:79:af:8d:49:11:67:e3:1d:09:06:b6:8d:e7:
31:77:60:01:ae:d3:13:65:d2:88:32:60:7b:5c:f0:38:b9:ec:
30:46:73:8f:db:47:21:57:38:c0:11:0a:92:02:69:11:8b:7b:
be:1f:b1:b2:c5:70:f8:ca:9b:d9:e9:30:47:75:33:06:e7:10:
6b:2b:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:09:04 2025 by rpki-client