Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa
File: B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa (raw, json)
Hash identifier: LBtiQvM+v9zo/IiLv5JEHtXJuteP7xqw+3W3lEbcXeU=
Subject key identifier: 07:D8:B7:46:26:6E:49:81:8D:D5:18:60:0E:73:3E:D0:49:9E:F2:D8
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01995CE78FE8AA64095D9890D74B74A718E5
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa
Signing time: Thu 18 Sep 2025 12:58:23 +0000
ROA not before: Thu 18 Sep 2025 12:58:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50469
IP address blocks: 82.206.24.0/21 maxlen: 24
82.206.24.0/23 maxlen: 23
82.206.26.0/23 maxlen: 23
82.206.28.0/23 maxlen: 23
82.206.30.0/23 maxlen: 23
82.206.64.0/21 maxlen: 24
82.206.64.0/23 maxlen: 23
82.206.66.0/23 maxlen: 23
82.206.68.0/23 maxlen: 23
82.206.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:e7:8f:e8:aa:64:09:5d:98:90:d7:4b:74:a7:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 18 12:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d8b746266e49818dd518600e733ed0499ef2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:9e:01:ee:73:e9:85:21:b8:5f:52:a5:88:
55:4a:78:26:ee:8f:71:54:42:48:bf:e1:a5:6e:d9:
d8:c4:fb:7e:f4:85:93:8f:ef:d1:0d:a6:ec:60:f6:
1a:86:30:67:46:9e:7c:3e:6a:c4:f8:a1:24:be:cc:
e2:c2:5f:e4:26:54:bd:41:4c:c4:4b:1e:c0:1c:c8:
f5:74:46:f2:b7:e1:82:0a:f6:9d:16:e9:94:bd:e1:
eb:5a:43:22:7f:07:91:57:b4:c5:03:75:c9:b6:8b:
94:04:af:bb:6f:79:f1:f2:d0:bd:9e:04:01:c2:ff:
cd:7f:ab:5e:78:58:59:4e:06:51:73:5f:5c:9f:1b:
58:63:d4:61:fe:75:1e:19:fd:4c:33:17:dd:df:f5:
e3:39:c0:14:9f:7f:b0:65:ca:53:ff:c6:10:66:62:
f8:df:0e:42:c4:9c:86:05:3a:e7:a0:56:d0:10:45:
96:14:ab:7b:66:bc:be:56:38:49:b6:c4:f3:12:23:
4c:8b:2d:84:5b:b1:f6:63:83:de:dd:7f:54:29:97:
39:94:83:ae:85:d9:06:20:8b:5e:1f:ff:c4:2b:4a:
21:5f:81:fa:20:ae:8a:96:f8:9c:62:44:89:8d:a2:
71:83:f2:a4:1f:79:d1:81:2d:4f:b5:55:b5:b5:26:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:B7:46:26:6E:49:81:8D:D5:18:60:0E:73:3E:D0:49:9E:F2:D8
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.24.0/21
82.206.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:74:97:86:00:66:3a:d7:89:60:c9:31:41:fa:2c:02:5e:a2:
8a:64:0f:68:25:eb:ce:98:be:9a:57:bf:6f:c4:0e:57:4c:f6:
5e:b8:67:6f:2d:fb:02:21:0d:c4:7d:de:72:42:8b:72:36:59:
ca:f8:bb:96:7a:df:f2:1f:f8:f6:72:7f:6f:30:53:06:c9:4c:
6b:9b:a7:95:d8:67:da:b0:1f:78:cb:bf:d1:cb:05:ec:a3:90:
1f:57:72:c4:4e:f1:89:61:94:80:8d:0c:58:d9:fb:6f:cc:32:
cd:47:46:d7:fe:04:6b:eb:01:02:e0:98:82:1f:c2:1f:1a:5d:
82:a8:bf:09:af:26:3a:3c:a2:d7:98:de:21:89:e9:15:89:2e:
86:16:6c:12:bf:3c:21:2c:52:45:db:29:cb:fc:19:54:91:84:
46:83:3c:03:bb:df:09:2e:3b:ea:9e:9f:b6:ad:fc:38:0f:e7:
e6:28:18:5d:cb:95:f2:76:25:c0:ad:68:bc:e0:40:c6:8a:97:
6e:9c:29:6b:91:83:7f:b8:81:77:66:98:e7:70:2a:44:5c:57:
3d:2b:13:84:4a:68:d1:2c:26:3c:40:72:82:b5:6e:e8:08:4b:
c8:63:91:b2:b1:9b:fe:13:ed:b2:3b:37:3f:19:f0:6a:15:03:
35:e0:9d:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZlc54/oqmQJXZiQ10t0pxjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjUwOTE4MTI1ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2Q4Yjc0NjI2NmU0OTgxOGRkNTE4NjAwZTczM2VkMDQ5OWVmMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oueAe5z6YUhuF9SpYhVSngm7o9x
VEJIv+GlbtnYxPt+9IWTj+/RDabsYPYahjBnRp58PmrE+KEkvsziwl/kJlS9QUzE
Sx7AHMj1dEbyt+GCCvadFumUveHrWkMifweRV7TFA3XJtouUBK+7b3nx8tC9ngQB
wv/Nf6teeFhZTgZRc19cnxtYY9Rh/nUeGf1MMxfd3/XjOcAUn3+wZcpT/8YQZmL4
3w5CxJyGBTrnoFbQEEWWFKt7Zry+VjhJtsTzEiNMiy2EW7H2Y4Pe3X9UKZc5lIOu
hdkGIIteH//EK0ohX4H6IK6KlvicYkSJjaJxg/KkH3nRgS1PtVW1tSZASwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAfYt0YmbkmBjdUYYA5zPtBJnvLYMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvQjlpM1JpWnVTWUdOMVJoZ0RuTS0wRW1lOHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUs4YAwQD
Us5AMA0GCSqGSIb3DQEBCwUAA4IBAQA9dJeGAGY614lgyTFB+iwCXqKKZA9oJevO
mL6aV79vxA5XTPZeuGdvLfsCIQ3Efd5yQotyNlnK+LuWet/yH/j2cn9vMFMGyUxr
m6eV2GfasB94y7/RywXso5AfV3LETvGJYZSAjQxY2ftvzDLNR0bX/gRr6wEC4JiC
H8IfGl2CqL8JryY6PKLXmN4hiekViS6GFmwSvzwhLFJF2ynL/BlUkYRGgzwDu98J
Ljvqnp+2rfw4D+fmKBhdy5XydiXArWi84EDGipdunClrkYN/uIF3ZpjncCpEXFc9
KxOESmjRLCY8QHKCtW7oCEvIY5GysZv+E+2yOzc/GfBqFQM14J0u
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:13 2025 by rpki-client