Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/m96scIfxZMSco2yPWhjNX1cZlYc.roa
File: m96scIfxZMSco2yPWhjNX1cZlYc.roa (raw, json)
Hash identifier: D+8dY/xSxjGbWfcbkK3VmbaqQKaGEqWtcYMtYrn+I1w=
Subject key identifier: 9B:DE:AC:70:87:F1:64:C4:9C:A3:6C:8F:5A:18:CD:5F:57:19:95:87
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0199DCC4588AE9D4DFD4EE13E65ED90EDCEB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/m96scIfxZMSco2yPWhjNX1cZlYc.roa
Signing time: Mon 13 Oct 2025 08:51:19 +0000
ROA not before: Mon 13 Oct 2025 08:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 80.71.233.0/24 maxlen: 24
80.71.235.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:c4:58:8a:e9:d4:df:d4:ee:13:e6:5e:d9:0e:dc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 13 08:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bdeac7087f164c49ca36c8f5a18cd5f57199587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:d4:a3:5a:29:6d:a5:f1:6b:91:4a:53:e2:
fb:32:e7:a8:c2:dc:30:ad:96:49:99:3c:ca:5d:27:
32:1e:a6:7a:f2:d3:f0:ba:a3:d9:88:20:86:a1:9c:
48:e4:e6:1c:78:4b:96:90:1b:c8:78:d9:1b:fb:96:
1b:bd:5d:af:09:b4:7f:40:a0:a1:2d:7c:f3:e0:24:
2a:cd:cb:80:9d:c3:42:6a:76:38:be:5b:f9:75:bb:
17:2c:20:9a:5f:8a:56:76:62:ea:8e:c2:40:9d:97:
39:2e:18:af:66:aa:52:6b:77:32:31:d7:ed:34:9c:
44:94:08:d0:5d:72:1b:14:8c:2a:3e:b6:8a:0a:6c:
fb:70:53:87:92:c3:3a:c9:7f:d6:82:db:67:c7:dc:
c9:05:49:42:18:b4:bb:b7:e9:4e:7e:10:c8:24:8b:
34:96:6b:f2:a8:40:b0:27:e4:a3:db:5f:b3:77:31:
5f:3b:38:1f:b7:3b:5f:2b:88:a5:ec:74:48:bf:5f:
e9:70:f5:12:93:51:3d:64:1f:f3:0f:30:50:2c:de:
36:96:e1:31:a3:17:94:3d:d1:28:d9:cb:6e:55:0c:
70:5b:ac:d3:9d:11:00:4b:35:65:65:cb:4c:5d:b4:
12:28:11:c6:24:f0:78:b4:74:e9:d1:eb:f6:1b:43:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:AC:70:87:F1:64:C4:9C:A3:6C:8F:5A:18:CD:5F:57:19:95:87
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/m96scIfxZMSco2yPWhjNX1cZlYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.233.0/24
80.71.235.0-80.71.236.255
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
36:74:de:3e:92:b7:0f:63:ea:12:62:f2:d6:46:1c:a3:61:f2:
63:57:a5:49:7d:8c:07:a7:85:f7:db:b8:c7:e5:11:2b:a1:0d:
9a:c3:0d:6c:2c:37:85:e6:e1:b9:16:2a:03:b6:b8:7d:f1:1a:
35:a7:3a:05:a4:f1:07:f4:0a:1e:1e:0e:93:d8:55:38:4a:41:
39:49:fa:23:f0:d4:75:ab:66:81:8f:ce:6e:41:85:0a:bc:21:
4c:cc:41:91:7a:58:2e:38:a4:2e:b6:3f:9c:2b:9d:d7:02:0e:
c7:ba:63:ba:18:fe:6a:27:f6:20:12:aa:39:a6:75:7a:39:1b:
67:1a:c2:71:17:82:49:cd:55:77:dc:51:d7:5e:e0:b2:53:73:
f2:e2:6f:5d:b8:fa:79:20:e6:08:97:37:6d:a2:05:3c:ca:76:
93:0d:b4:99:ff:35:b1:d8:f7:20:a2:ed:48:0d:9b:6b:b8:1f:
2d:9a:34:08:1c:62:51:c2:8b:06:40:6b:14:ca:f4:5e:87:3d:
8a:ae:3b:86:cf:9e:1b:2e:dc:41:cd:e3:5d:5b:b5:26:73:52:
07:e7:11:41:4c:86:e2:08:88:8c:fe:d1:bf:fa:84:c8:ce:c9:
58:14:d2:28:11:99:c9:06:63:e3:46:9b:bf:2b:a7:3c:01:6e:
0f:be:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:26 2025 by rpki-client