Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9QYKvwt0n_kWzP-YfytR2EHFv_s.roa
File: 9QYKvwt0n_kWzP-YfytR2EHFv_s.roa (raw, json)
Hash identifier: uH6q6z4IK4iPBftzb3X/ahDxFpm0ceqkDNyCqotPMbU=
Subject key identifier: F5:06:0A:BF:0B:74:9F:F9:16:CC:FF:98:7F:2B:51:D8:41:C5:BF:FB
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01972F859C595C1F801B1F1A7006B696BA5C
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9QYKvwt0n_kWzP-YfytR2EHFv_s.roa
Signing time: Mon 02 Jun 2025 07:22:54 +0000
ROA not before: Mon 02 Jun 2025 07:22:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8891
IP address blocks: 80.12.245.0/24 maxlen: 24
80.12.246.0/24 maxlen: 24
81.52.142.0/23 maxlen: 24
193.252.133.0/24 maxlen: 24
193.252.148.0/24 maxlen: 24
193.252.149.0/24 maxlen: 24
2a01:c9c0:a0::/44 maxlen: 48
2a01:c9c0:c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:85:9c:59:5c:1f:80:1b:1f:1a:70:06:b6:96:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jun 2 07:22:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5060abf0b749ff916ccff987f2b51d841c5bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:f7:58:41:c2:19:8c:d6:01:bc:b2:b3:0e:
1e:1b:3f:4c:0c:a3:55:b5:6c:2d:57:84:a6:36:53:
49:04:e5:8c:7d:61:ae:41:21:1b:91:f0:58:e3:e1:
9d:4b:f8:73:3f:73:1c:4d:58:3e:3b:8b:08:43:b2:
0d:0b:40:4f:17:82:71:7e:3a:8c:da:71:53:dc:38:
95:19:10:e0:b1:4f:b0:4a:cb:5a:c7:36:36:7e:c1:
2d:d9:a1:3d:dc:c7:2c:60:73:a2:20:f4:ed:3e:20:
99:0f:6c:04:88:67:df:f1:98:b9:fa:4a:2c:14:f2:
72:7d:d5:e2:11:a5:ad:a0:01:7f:6c:75:fc:3b:7b:
af:8a:d3:1c:00:7d:2a:a6:de:d2:e9:22:b2:21:63:
87:6a:2f:53:d4:38:65:68:9c:a8:9d:35:f5:a0:dd:
1e:54:31:37:b4:f0:d8:91:e2:b2:fb:54:19:d7:a3:
8a:88:52:02:aa:11:40:0b:a8:ed:62:3d:3a:2f:6f:
9d:b7:00:d9:4c:60:af:8c:9e:82:ee:c8:ca:4a:09:
13:21:f5:dc:cb:47:3a:aa:b4:cd:fa:e3:11:f2:8b:
bf:04:f7:16:9f:db:b9:40:89:c0:37:84:dd:86:77:
10:5e:aa:61:58:dc:1a:32:8a:35:41:7a:dc:d7:76:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:06:0A:BF:0B:74:9F:F9:16:CC:FF:98:7F:2B:51:D8:41:C5:BF:FB
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9QYKvwt0n_kWzP-YfytR2EHFv_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.245.0-80.12.246.255
81.52.142.0/23
193.252.133.0/24
193.252.148.0/23
IPv6:
2a01:c9c0:a0::/44
2a01:c9c0:c0::/44
Signature Algorithm: sha256WithRSAEncryption
16:18:e0:00:80:f5:6d:bd:27:3c:c3:1a:9b:17:85:e2:d9:38:
b9:2b:76:36:48:3c:d4:2d:00:c4:d2:15:ac:f1:82:5f:aa:b8:
21:6f:61:b2:d0:db:63:fe:db:7d:46:e7:27:47:43:1e:dc:59:
57:f3:86:ae:bc:2e:fd:40:fa:a6:15:b6:8d:28:58:c1:91:1f:
54:6c:91:96:59:dc:12:39:87:9d:f2:22:51:84:28:ea:83:50:
6b:b9:ca:4f:3c:6a:b3:85:91:30:66:e7:cd:f4:00:73:f0:0a:
ed:da:9d:1f:c1:8b:bc:a0:a4:68:68:94:6c:15:f6:9e:56:7b:
39:9a:4c:e7:53:9d:2e:86:16:c8:d5:64:b1:f2:2f:13:ae:ac:
6c:05:55:57:32:3a:5b:26:d3:c0:04:d0:ba:7f:94:22:a0:b4:
5c:ca:a4:bb:66:8c:5a:82:ff:a0:33:32:72:0a:e3:ec:89:43:
9c:cc:c6:7b:54:58:af:b9:23:53:d3:2b:a7:e9:34:e8:cf:b2:
a8:5b:35:db:57:a6:4a:65:25:07:d5:8e:22:fe:be:b0:6c:75:
06:60:f5:fc:58:d5:64:db:b7:52:7c:28:6a:ec:d9:5b:2b:c3:
77:ac:8b:e9:19:f4:c7:b2:fc:12:9f:ef:6a:6b:a1:15:1a:ec:
e5:87:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:47:57 2025 by rpki-client