Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/8841bTLrrYM0Y1pyII0NVGzQWf4.roa
File: 8841bTLrrYM0Y1pyII0NVGzQWf4.roa (raw, json)
Hash identifier: 9qcEtK1zI2KboXmqVlSqE8SPNMfCXcG8xs/dxHVG8IY=
Subject key identifier: F3:CE:35:6D:32:EB:AD:83:34:63:5A:72:20:8D:0D:54:6C:D0:59:FE
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 01990B825A915FD1DB848A88D3BDF89D6F1B
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/8841bTLrrYM0Y1pyII0NVGzQWf4.roa
Signing time: Tue 02 Sep 2025 17:38:36 +0000
ROA not before: Tue 02 Sep 2025 17:38:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 109.235.98.0/24 maxlen: 24
109.235.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:82:5a:91:5f:d1:db:84:8a:88:d3:bd:f8:9d:6f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Sep 2 17:38:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3ce356d32ebad8334635a72208d0d546cd059fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:37:86:06:c0:87:22:f1:e0:ab:75:1e:9a:
37:ad:68:53:d0:9f:e1:dc:13:a4:cf:00:b0:13:b2:
93:8a:a4:48:13:96:32:fb:e0:d0:90:2a:22:6c:f0:
e0:45:be:c3:08:43:38:29:48:82:91:6c:57:bf:a5:
d5:af:38:60:0b:ac:57:3a:45:dd:ce:ec:11:31:c7:
e1:24:b4:bc:d0:cd:ee:d5:df:05:e2:89:93:53:b9:
c6:80:3e:c6:7b:af:30:57:b9:6b:b3:2c:73:6c:52:
03:4d:0b:7c:4e:f1:78:1f:5c:9c:da:96:9a:c4:95:
6a:b3:e7:0b:6d:c2:f6:f2:48:b6:8c:bc:77:36:f0:
e3:63:e2:08:9e:9f:de:26:ec:9b:09:20:a4:e6:5b:
59:41:5f:0f:0c:ec:45:2e:26:18:74:4e:94:30:41:
8a:e1:2d:30:d9:c6:a6:f4:d9:66:94:70:22:0c:a2:
69:20:e7:b7:b5:3d:00:b2:d3:4f:bb:6f:01:5a:05:
ed:62:9a:34:17:c0:9a:a0:18:d8:3a:9f:8d:2a:db:
ad:5f:80:1a:3d:c4:b8:0f:45:13:b5:f7:7f:f1:38:
77:78:66:fb:30:f0:c4:6e:09:3f:0e:05:cb:69:25:
e4:22:a0:d2:51:89:cd:1b:2d:7d:39:fc:23:46:8e:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:35:6D:32:EB:AD:83:34:63:5A:72:20:8D:0D:54:6C:D0:59:FE
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/8841bTLrrYM0Y1pyII0NVGzQWf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.98.0/23
Signature Algorithm: sha256WithRSAEncryption
f8:6e:78:ce:a0:99:f3:05:f1:5b:d2:e5:bb:0b:05:ca:3d:bb:
f5:bd:cb:25:1c:30:a9:a3:60:59:0f:5f:22:5e:3c:4f:4a:0d:
32:0d:75:32:6f:29:9f:fb:6d:0e:f3:c4:cf:0e:70:ce:8b:1e:
ce:7f:7d:90:fb:83:a1:6b:94:f2:4f:ee:42:2c:f7:26:0b:67:
ea:92:d2:61:48:8d:dd:22:30:02:1e:74:fc:4f:14:ea:9d:9b:
c2:1e:05:f6:aa:ff:bf:b3:d9:03:9c:7d:54:a2:d8:dd:c0:8b:
2c:70:1f:b7:21:d1:98:e4:ee:16:72:39:6d:c4:79:1d:73:15:
7e:80:90:76:c5:43:8b:42:91:9f:e1:73:a0:90:7b:25:11:84:
8e:58:34:18:4c:27:9f:2c:23:6a:c0:20:2b:27:bc:98:6e:12:
44:78:24:48:5b:81:e0:fb:e4:c8:4f:48:d3:3a:c9:39:63:7b:
73:f0:58:6d:8a:c1:5b:63:e4:05:b2:a6:01:b2:43:87:ad:bb:
84:eb:79:cc:69:e1:a1:61:a7:82:cb:81:3f:25:cf:51:ef:10:
16:93:2f:9e:ee:50:53:fc:97:75:03:94:1c:b5:f8:77:61:b7:
b9:e4:5e:b6:42:be:31:ba:08:b4:eb:b6:85:9f:f1:fb:d6:30:
0d:b7:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:31:36 2025 by rpki-client