Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9la_AU58bMd-3pCNHt8w31jQCl4.roa
File: 9la_AU58bMd-3pCNHt8w31jQCl4.roa (raw, json)
Hash identifier: E9TsWgVQ3BFPUDXwzoZMZ0b6bAsHWFerURHLZ/QkqCc=
Subject key identifier: F6:56:BF:01:4E:7C:6C:C7:7E:DE:90:8D:1E:DF:30:DF:58:D0:0A:5E
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0196BB5288B09BEFADC4F19BFC42E6526CE2
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9la_AU58bMd-3pCNHt8w31jQCl4.roa
Signing time: Sat 10 May 2025 17:51:10 +0000
ROA not before: Sat 10 May 2025 17:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214294
IP address blocks: 195.216.178.0/24 maxlen: 24
195.216.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:52:88:b0:9b:ef:ad:c4:f1:9b:fc:42:e6:52:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: May 10 17:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f656bf014e7c6cc77ede908d1edf30df58d00a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:67:55:d3:ff:1d:27:ad:a6:a0:62:f0:e9:
e5:bf:9d:7c:e0:e0:e9:f4:21:8d:09:ee:0b:a7:40:
54:70:6c:46:ae:c3:e2:1b:a5:03:de:1c:c7:19:56:
bb:18:69:e4:67:7d:c5:2e:cb:e2:91:e7:9d:8b:e6:
7c:7f:1a:20:71:fd:4d:31:0e:ef:e3:15:9f:86:62:
e4:a0:9e:28:df:af:eb:a4:7e:db:b7:be:35:27:24:
49:65:75:66:39:ae:58:dc:43:ed:91:33:cb:e2:f3:
58:c4:f7:be:6b:6a:e0:2f:46:94:ae:b4:e2:18:a7:
8e:b0:11:15:27:88:87:95:fd:26:33:08:9f:06:73:
a8:ad:d0:20:f0:79:b3:5a:39:30:1a:fc:4f:12:f3:
29:a8:c4:88:39:6a:cf:11:3f:bb:7f:c5:3c:31:36:
8e:6a:ed:5f:5d:a5:1a:24:ed:d6:3a:ff:06:e6:1b:
08:22:3a:42:09:06:0e:15:fe:11:5b:28:cf:95:76:
a2:14:63:ae:74:b4:ee:50:7c:e3:6e:c4:1e:79:87:
8f:98:9a:d4:76:0b:0a:97:9e:00:bf:6c:99:7c:9c:
23:c7:f2:28:14:3f:ac:d6:9d:44:16:a6:05:15:2b:
89:d4:b5:a3:92:b2:e4:2c:cf:ff:cb:0e:42:0a:a7:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:BF:01:4E:7C:6C:C7:7E:DE:90:8D:1E:DF:30:DF:58:D0:0A:5E
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/9la_AU58bMd-3pCNHt8w31jQCl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.178.0/23
Signature Algorithm: sha256WithRSAEncryption
27:82:b1:3d:1a:0e:2f:da:61:d9:8d:f9:d2:93:7e:da:14:a2:
76:f6:96:45:e5:c3:51:78:a6:d4:c9:26:20:06:9c:24:b0:76:
3a:63:25:86:bd:77:86:82:0f:27:75:9d:2b:e0:78:79:a7:1a:
a8:d1:18:fd:fe:52:42:ba:b4:f1:e2:10:1f:87:95:61:d5:f6:
f3:9e:2c:e6:5f:9b:25:31:8b:9d:a2:36:d2:28:c5:4c:c0:3e:
d5:66:d6:08:d9:24:26:75:2a:13:a1:e1:20:03:24:2e:d2:33:
e1:fb:0c:e5:1f:70:f1:d7:fe:f7:4a:0e:d3:dc:bd:ce:98:dd:
5e:97:15:2d:2c:1f:a1:95:db:60:8f:c5:83:ca:f6:b3:13:15:
c4:30:a9:ff:94:2f:5d:0f:f3:44:15:be:96:d4:54:2f:de:d1:
df:af:86:85:3d:67:f3:56:ea:fc:7d:1e:6b:a6:84:47:10:f0:
98:7e:a9:35:b8:f6:d9:0f:fd:9a:0c:2b:9b:52:53:d0:2f:7d:
64:71:c2:0b:d6:de:36:c0:d4:38:e6:33:9d:e1:4f:d2:a1:07:
16:94:8e:c7:27:89:25:10:de:a8:a4:d4:5b:cd:e3:2c:e0:0e:
f7:a6:0d:12:3f:0e:9b:c9:81:11:20:88:7b:48:ef:9f:27:f4:
dc:d6:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:47:53 2025 by rpki-client