Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fOlFwEIjv2lZxp9Vkr5aCM5kx-Y.roa
File: fOlFwEIjv2lZxp9Vkr5aCM5kx-Y.roa (raw, json)
Hash identifier: e35r9DbJDEe6xd2Ia9QNpiqyuyI84DNrcAtbfQJ+buw=
Subject key identifier: 7C:E9:45:C0:42:23:BF:69:59:C6:9F:55:92:BE:5A:08:CE:64:C7:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01993974C0342DD7FCC99AEB4B53C96977DD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fOlFwEIjv2lZxp9Vkr5aCM5kx-Y.roa
Signing time: Thu 11 Sep 2025 15:46:16 +0000
ROA not before: Thu 11 Sep 2025 15:46:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 82.153.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:74:c0:34:2d:d7:fc:c9:9a:eb:4b:53:c9:69:77:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 11 15:46:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce945c04223bf6959c69f5592be5a08ce64c7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:3c:d7:12:8b:bc:cd:f1:fb:01:ba:f5:8c:
2d:1b:f3:ce:18:2c:2d:67:43:c9:ae:82:6b:ee:c0:
56:d2:dc:f3:82:25:ac:7c:ad:ab:24:88:ca:36:c7:
fd:20:1a:61:0f:c1:37:c0:35:f0:09:0e:86:16:a7:
bb:68:9e:b2:03:2e:1e:a3:99:8e:2c:96:8a:08:08:
fc:6e:49:03:10:dd:2f:b8:64:88:09:51:4c:65:28:
6c:bd:ec:1d:b1:b8:12:26:24:4e:cf:3b:ed:f5:49:
d5:ea:aa:3b:bd:b2:40:8b:d1:f9:d8:4e:75:69:0f:
3c:3b:e9:28:88:cb:d4:af:81:01:4c:79:39:83:78:
c7:0a:21:45:e1:db:7d:cd:45:2e:aa:bd:8e:3d:bd:
4c:3f:de:ed:e5:30:a4:33:00:74:ee:16:ff:a4:e0:
06:48:c7:2e:cb:e7:88:c2:34:e7:5e:5f:83:af:32:
bc:df:26:b6:c6:23:67:9a:5a:79:35:7b:9d:bd:10:
f7:3c:8b:65:c9:b7:42:5b:9a:cf:38:bc:f2:a9:6a:
43:49:77:2d:5a:6e:db:89:a1:73:4a:75:f7:1a:3c:
6d:a4:12:f3:77:d9:96:6b:d7:fd:dd:5b:75:a5:7a:
0f:d1:b1:96:12:61:03:06:0d:a2:38:1f:50:5b:68:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:45:C0:42:23:BF:69:59:C6:9F:55:92:BE:5A:08:CE:64:C7:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fOlFwEIjv2lZxp9Vkr5aCM5kx-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.90.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a1:10:10:e7:38:67:b8:ca:71:3f:b5:78:8b:e5:c3:ed:a9:
d9:28:24:4e:5d:6a:83:60:f4:16:29:7e:eb:44:5c:81:46:1a:
6b:40:f7:cc:2e:80:f9:93:64:47:b1:79:2a:fa:e3:85:cc:8a:
f6:a7:4c:21:6a:a9:df:30:1b:df:0e:f9:c2:30:85:66:12:10:
5e:3c:65:ac:f2:7d:34:9b:47:ea:b2:44:88:4b:fb:2b:81:94:
44:a9:18:0d:6f:ea:02:03:14:fd:a1:97:5b:09:1a:8c:d5:a5:
d5:68:e1:5e:df:f4:e3:1f:7e:6d:bf:d8:d3:8b:0e:45:38:9e:
a6:41:c4:ad:0d:5b:1b:6a:86:55:16:14:5c:df:9d:17:dc:9b:
de:53:7d:cb:97:64:10:83:a1:d9:6d:c9:50:c2:30:14:a1:ee:
c6:da:06:e7:05:22:03:69:78:56:34:3a:f3:6a:e8:77:f0:9e:
50:d4:f0:a3:53:ea:76:c7:5d:a4:6f:b2:9f:b3:6f:01:3b:a3:
6f:aa:d1:6e:da:e0:01:78:66:7a:e1:1c:4d:59:19:f2:f1:53:
c8:e9:8c:6e:9c:5a:a7:df:b9:21:70:00:c4:fe:78:28:88:45:
aa:29:7f:54:bc:df:de:e6:de:63:75:33:f0:00:a4:5c:36:66:
1b:bc:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:50:59 2025 by rpki-client