Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3KiiuTmtSL0XadHjHoQhTxAjH4.roa
File: F3KiiuTmtSL0XadHjHoQhTxAjH4.roa (raw, json)
Hash identifier: DWttmKkJnsIWb4tK0mLgOer/tZtQK2/fxxZHdJXXFak=
Subject key identifier: 17:72:A2:8A:E4:E6:B5:22:F4:5D:A7:47:8C:7A:10:85:3C:40:8C:7E
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0199B71F38C03025FA87CAAC192439F55BBE
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3KiiuTmtSL0XadHjHoQhTxAjH4.roa
Signing time: Mon 06 Oct 2025 01:25:00 +0000
ROA not before: Mon 06 Oct 2025 01:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 9.142.80.0/20 maxlen: 20
9.142.160.0/19 maxlen: 19
9.142.240.0/20 maxlen: 20
151.145.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b7:1f:38:c0:30:25:fa:87:ca:ac:19:24:39:f5:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 6 01:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1772a28ae4e6b522f45da7478c7a10853c408c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:50:ad:ed:7d:14:4e:28:47:c0:2d:43:37:
02:2d:28:90:14:5e:bd:e9:04:48:1e:0b:a9:5d:58:
a9:07:40:0b:53:05:d3:6f:f5:0d:75:73:4b:00:b6:
7d:d8:b1:d2:23:cc:28:58:ac:89:cc:a3:f7:5b:0c:
59:25:24:d3:d7:a0:15:a8:87:fe:8a:4d:59:93:dd:
48:d7:2c:9d:ff:31:97:cf:8c:47:b4:31:92:cc:dd:
a3:b7:80:9a:e8:db:95:31:25:e3:ae:e7:d5:df:94:
58:03:89:57:0d:5c:8c:a7:79:cb:e2:e7:0b:2c:89:
c1:4e:5b:16:6d:40:58:da:35:05:f8:d0:38:66:67:
47:56:df:32:ed:fa:54:f1:73:22:1a:91:21:70:d0:
81:64:d0:99:52:71:1b:91:31:a1:98:e1:76:e9:2a:
f3:f7:12:54:39:97:d8:84:8f:ee:f0:19:93:c6:9a:
8a:c2:51:95:2f:ff:5b:9b:ec:e5:aa:53:4f:c4:3a:
27:89:09:9d:75:c3:14:b6:96:45:b0:8b:30:16:70:
57:37:34:36:bf:6c:67:5f:b9:b8:82:00:2e:e9:be:
a9:33:85:28:c1:ae:d0:45:27:5c:1e:ac:78:a7:34:
ca:10:a4:3c:5b:d3:2a:8c:33:f5:c0:e7:a9:cb:57:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:72:A2:8A:E4:E6:B5:22:F4:5D:A7:47:8C:7A:10:85:3C:40:8C:7E
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3KiiuTmtSL0XadHjHoQhTxAjH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.80.0/20
9.142.160.0/19
9.142.240.0/20
151.145.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:0b:d4:2e:75:0b:61:92:2d:74:a9:0f:9d:2c:a2:a9:b0:1e:
be:3a:27:b0:52:ef:71:3b:7c:44:c1:bd:14:ac:93:06:06:1c:
d0:be:d5:0f:9e:f9:9a:e0:19:ec:ce:dd:35:5b:bf:7f:ea:78:
c1:69:d0:65:bf:0b:42:a0:5f:82:82:ca:aa:b8:11:1e:b0:b9:
99:71:97:b9:f6:c3:5e:9c:16:22:f8:18:02:44:dd:4c:d7:a9:
c8:6e:33:fe:3c:05:b1:1d:fc:bb:c9:e7:e2:c4:af:43:e1:f9:
ec:66:85:ee:0e:b5:fa:76:7a:f1:18:2e:fe:d1:f3:56:03:35:
f0:ae:0c:63:46:29:5d:75:e3:1b:a0:30:c6:0a:8c:ac:4a:a5:
7a:57:9b:e5:f9:ec:cb:50:e0:c3:69:51:3c:0f:30:79:9b:42:
16:ec:dc:24:f4:18:25:dc:2f:1a:11:ea:08:69:01:e4:de:33:
59:4d:ad:01:23:44:65:e3:b8:4d:b4:df:51:5e:9b:45:69:04:
42:f2:b7:8b:48:8f:d3:6d:36:74:0a:85:76:45:b6:df:39:74:
f8:c2:51:f4:ef:4c:fa:a0:cf:da:71:ae:43:28:ba:9f:8c:bc:
b2:7d:ec:b3:7f:55:3a:e1:d9:dd:6d:60:3b:16:87:a0:1f:0b:
8d:34:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:21 2025 by rpki-client