Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/rCpV33sYtGVJt5YUfEHIV76lYwM.roa
File: rCpV33sYtGVJt5YUfEHIV76lYwM.roa (raw, json)
Hash identifier: WOOfDrHmClUASPz1AvvDv7s8UiSaGZ142B0UsKi/kcM=
Subject key identifier: AC:2A:55:DF:7B:18:B4:65:49:B7:96:14:7C:41:C8:57:BE:A5:63:03
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 0199324EB2B13B9683706A3A79C446EDDD1D
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/rCpV33sYtGVJt5YUfEHIV76lYwM.roa
Signing time: Wed 10 Sep 2025 06:27:22 +0000
ROA not before: Wed 10 Sep 2025 06:27:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 193.56.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:4e:b2:b1:3b:96:83:70:6a:3a:79:c4:46:ed:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Sep 10 06:27:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac2a55df7b18b46549b796147c41c857bea56303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:43:c4:c2:b8:a8:24:c2:b9:8b:00:9c:a6:
7b:f3:d2:7a:ba:1f:14:59:33:e0:68:94:78:4c:60:
c8:90:da:16:46:b3:7c:79:58:2b:63:d6:a9:28:7d:
e7:18:31:69:e9:ee:0d:07:17:1a:5b:5e:ea:20:2a:
ac:5d:1e:32:da:e6:17:37:be:4b:56:9d:e7:10:70:
3d:5b:53:57:c6:9c:fe:91:d4:9c:28:3e:fd:9c:2e:
6e:ff:3f:db:ec:e8:bf:4c:d3:fd:2d:84:00:ee:74:
e1:96:c9:39:8a:1f:57:6d:96:1d:b2:b1:d7:28:d5:
b9:ea:40:b9:06:51:cd:fc:ac:15:7c:54:39:fe:67:
de:e3:92:e1:6a:d2:ed:fe:5f:34:31:3b:5b:e2:24:
a6:97:c0:2f:b9:a9:ac:18:98:ac:f4:0f:52:a6:f2:
fc:ce:31:8d:e5:ba:6a:fb:07:3d:39:0e:cd:e0:7e:
34:d4:0e:88:31:09:51:3c:01:48:49:2b:54:04:36:
1c:6c:2e:6b:05:3d:80:6c:f7:14:45:c7:64:89:f9:
c3:87:36:23:32:d1:9a:7e:3f:8e:89:d3:3d:5c:83:
f5:43:43:bd:3a:12:2e:02:5d:37:28:1b:9a:85:24:
eb:b9:a6:de:26:0d:2d:ed:59:bf:c7:29:99:07:3d:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:55:DF:7B:18:B4:65:49:B7:96:14:7C:41:C8:57:BE:A5:63:03
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/rCpV33sYtGVJt5YUfEHIV76lYwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.144.0/24
Signature Algorithm: sha256WithRSAEncryption
43:72:df:c8:ee:42:5b:3d:d2:ee:9a:7c:4c:f8:28:05:02:05:
29:06:18:3f:03:36:0f:b8:24:8f:55:b9:ce:15:8a:ef:0b:5d:
d7:b7:0d:37:75:37:5a:89:7a:95:f8:2b:21:a3:6f:5a:dc:b0:
ad:44:50:17:9f:9a:9d:3a:8e:ec:6a:8e:4a:ab:37:aa:3e:4e:
e2:07:cb:65:9f:cd:cb:73:0c:19:23:9a:1e:ef:59:c0:2c:15:
39:e8:74:95:48:7f:93:95:16:1a:34:fc:ea:0e:35:6a:24:fb:
ba:8c:99:0e:18:ba:0c:06:a1:a1:a4:ee:cf:b1:9d:4a:de:d9:
82:24:78:c2:17:14:51:ec:be:31:88:53:60:31:1a:42:8e:97:
2a:ef:6f:8c:ce:15:68:ef:34:0e:8e:04:5a:4e:56:1c:b8:4f:
54:a9:9e:6c:9d:80:8a:0b:1e:63:6a:37:24:c3:0d:05:aa:77:
ef:7c:d7:42:0e:49:4a:5c:49:36:33:28:db:d1:23:7e:04:5c:
3c:6f:e8:75:b1:8b:f4:2b:e3:db:8f:e4:fc:60:0c:95:0c:17:
10:10:77:91:6c:f6:5b:15:49:01:71:9e:f3:03:8e:8d:79:a8:
b5:ac:de:b5:2c:27:73:08:ab:9a:59:7a:9b:9c:c9:7d:ef:86:
86:93:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:08:03 2025 by rpki-client