Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/2fWP_1okXthOUT5i0EgFPwAGnBc.roa
File: 2fWP_1okXthOUT5i0EgFPwAGnBc.roa (raw, json)
Hash identifier: J5+gVvniOtfHzGOi6xF3xcFK0fGXBXbVbA7PFuVnMdw=
Subject key identifier: D9:F5:8F:FF:5A:24:5E:D8:4E:51:3E:62:D0:48:05:3F:00:06:9C:17
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 01990F0BC796F58FFEBAF0B96964C6F318E9
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/2fWP_1okXthOUT5i0EgFPwAGnBc.roa
Signing time: Wed 03 Sep 2025 10:07:34 +0000
ROA not before: Wed 03 Sep 2025 10:07:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.196.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:0b:c7:96:f5:8f:fe:ba:f0:b9:69:64:c6:f3:18:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Sep 3 10:07:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9f58fff5a245ed84e513e62d048053f00069c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:43:27:03:64:1d:31:ef:cf:05:dd:b9:c7:
fc:6e:59:10:a4:7d:ef:8b:70:d1:24:6f:e6:da:5c:
88:56:67:6f:48:ea:6d:20:ae:e1:b4:0d:a6:74:70:
6d:ec:84:f0:93:15:ae:bd:82:ea:cf:62:fa:a0:6d:
96:a6:75:4e:4b:26:50:3c:69:bc:5f:49:92:2c:ad:
e5:68:f1:2e:01:30:4e:30:61:ca:34:82:9e:4c:43:
aa:fa:83:51:7e:23:d5:e2:7d:a0:c0:e6:f6:4a:7a:
d1:0f:16:63:ac:83:0a:5f:c3:08:3c:9a:e0:4e:53:
62:99:74:d4:d2:ba:96:65:0d:d6:77:97:14:0d:75:
9f:9e:b7:82:e8:4a:8d:b4:55:81:02:ad:bf:ab:1f:
b1:f9:45:9a:e7:03:2e:3e:85:57:08:18:bc:12:a5:
45:e1:18:18:74:57:9d:ad:f3:30:07:79:a1:20:42:
29:fa:01:29:93:ab:4f:8c:46:a2:5b:7d:aa:14:ba:
83:10:98:3d:11:6e:bd:1a:13:4b:54:77:55:a2:6e:
00:cf:9c:fd:12:1d:00:95:20:bb:e9:d4:ea:c1:57:
79:e7:84:4f:72:55:90:ca:d7:06:30:8f:93:20:cc:
44:c8:d8:c2:ca:bb:2f:81:a5:25:4f:f4:6d:56:d6:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:8F:FF:5A:24:5E:D8:4E:51:3E:62:D0:48:05:3F:00:06:9C:17
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/2fWP_1okXthOUT5i0EgFPwAGnBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
07:51:65:a0:f4:ac:0e:99:8e:a3:b0:6b:f4:27:3b:90:bb:45:
51:f2:7f:dd:ae:e8:91:ae:11:fe:14:82:40:fe:a2:82:76:0f:
56:0d:d4:be:df:56:b4:f0:21:f4:b7:71:55:9c:4a:0a:b4:e3:
ad:78:7b:8c:ab:0e:e7:53:48:fc:88:3f:48:8b:eb:7f:02:bf:
74:42:d9:d3:b3:2f:7c:61:0a:2b:56:e3:9b:08:2e:59:bf:67:
3f:62:ef:18:af:15:ca:7f:ac:23:53:d0:c2:91:cf:34:a6:d3:
2d:33:f0:16:55:1c:df:f5:47:f9:fe:41:7c:30:19:fd:98:d7:
81:b6:28:4d:6f:e2:78:b4:ff:d7:ad:b9:6d:d6:5a:49:3f:86:
0a:a2:ef:64:fb:a5:cd:b8:cd:e3:74:b4:c3:4f:e7:57:69:3d:
89:40:32:0a:34:83:e4:8e:51:0d:5c:69:d3:93:cc:af:6c:41:
27:a3:c5:de:e3:75:d1:3b:d2:c7:f8:66:48:df:90:50:f8:ec:
30:ff:77:d1:ef:a1:40:73:81:8d:06:db:58:f4:a9:d0:d4:f9:
4f:af:a0:1e:e3:ed:8d:59:6b:30:22:64:6f:10:8e:7b:8a:28:
44:0b:57:b6:2d:35:f2:c9:98:a5:a8:71:07:4e:fd:92:bd:4c:
e8:ff:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:33 2025 by rpki-client