Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/eRSJtfbbVKcNm7CUQE2kFLC41Mo.roa
File: eRSJtfbbVKcNm7CUQE2kFLC41Mo.roa (raw, json)
Hash identifier: adiHF1RgCBC5CqK/0Oc9QEd3jgDuZtItjpc/ozijHb8=
Subject key identifier: 79:14:89:B5:F6:DB:54:A7:0D:9B:B0:94:40:4D:A4:14:B0:B8:D4:CA
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019A018E12CA494E9815261061045AF24253
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/eRSJtfbbVKcNm7CUQE2kFLC41Mo.roa
Signing time: Mon 20 Oct 2025 12:17:59 +0000
ROA not before: Mon 20 Oct 2025 12:17:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 82.206.9.0/24 maxlen: 24
82.206.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:8e:12:ca:49:4e:98:15:26:10:61:04:5a:f2:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Oct 20 12:17:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=791489b5f6db54a70d9bb094404da414b0b8d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:55:30:41:9f:72:5f:4c:82:4f:12:1b:db:
fd:81:63:93:13:1d:ee:c2:3e:d8:07:4c:07:23:f2:
24:a7:be:fc:f9:e3:ec:99:00:b4:d3:86:e3:ac:86:
e7:8f:a2:79:a1:9c:7d:d8:99:ed:7a:8f:bb:ca:42:
bc:a2:8f:a4:be:12:14:6f:85:ea:6d:f7:8e:7f:ef:
e9:02:0a:46:75:58:cc:17:2a:c0:1a:8e:ff:31:3e:
b5:67:7c:00:0b:e0:74:9b:45:57:7e:45:cd:5c:97:
e1:62:0e:96:56:85:5c:3f:d6:4c:da:fa:da:df:a3:
d3:5d:3c:03:10:64:b3:88:35:19:f6:a9:e0:74:d1:
99:d3:92:ba:38:c7:e4:62:3d:e4:16:5e:16:12:7f:
d2:d7:0b:59:fa:ad:ef:38:74:cf:69:2d:ca:95:1b:
d9:e7:5b:35:b4:29:57:b6:2a:7b:b6:f3:10:b7:8e:
f8:f3:a7:0a:a6:46:61:1b:b3:a5:72:8a:08:cd:11:
3b:f9:00:a4:69:16:fd:7e:7c:61:62:df:97:cc:aa:
16:a0:61:00:08:13:e6:b4:93:81:84:64:31:aa:3e:
83:90:a7:1f:7d:29:85:fa:3d:8a:1e:bd:ad:6f:18:
65:e4:9e:d9:5f:aa:aa:3a:b0:d3:e3:a9:14:ae:58:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:89:B5:F6:DB:54:A7:0D:9B:B0:94:40:4D:A4:14:B0:B8:D4:CA
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/eRSJtfbbVKcNm7CUQE2kFLC41Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.9.0/24
82.206.109.0/24
Signature Algorithm: sha256WithRSAEncryption
32:50:2e:1b:29:ef:24:61:3b:63:8b:19:5f:ab:04:02:6f:92:
73:f7:7c:8b:47:21:06:1b:29:1b:00:b8:7d:2f:36:7f:d4:85:
86:ec:fe:28:85:d9:7d:39:43:7f:db:f0:94:7b:a8:8d:3a:a3:
00:8c:ff:9b:ff:fa:6b:b0:2d:92:36:7f:5e:f9:2c:12:2a:86:
ae:31:65:39:7f:d2:fc:43:16:70:25:96:60:d9:66:60:b9:f7:
24:7c:23:2a:b0:67:ee:7e:55:48:ee:47:91:b5:11:58:98:76:
89:31:51:2d:12:b5:1d:05:b4:2e:d0:57:40:d4:58:f8:c2:a7:
a7:93:25:21:96:81:39:eb:5d:2d:ea:ae:da:fa:01:61:9d:f9:
4f:e9:e8:6b:f7:c3:41:96:4e:82:06:6d:a5:e7:21:24:e1:d4:
38:99:bc:f5:b4:87:ef:35:a2:d6:23:a4:a8:7b:19:c8:2d:aa:
90:b4:e4:16:e4:24:99:ac:2a:92:2d:31:48:9c:b1:bc:fa:f4:
2a:f9:6b:a2:47:43:43:f1:46:7c:e0:5b:21:10:c1:f8:e6:b7:
1a:7b:64:4b:cf:d6:38:12:2c:9a:cb:d2:6d:bf:f0:3d:70:7e:
a3:40:87:c4:fe:fc:08:3d:11:28:d4:11:cc:9a:0e:98:59:72:
c3:72:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:14:38 2025 by rpki-client