Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/VxhJQDKCdmlccpU7wsiJAEzzTtc.roa
File: VxhJQDKCdmlccpU7wsiJAEzzTtc.roa (raw, json)
Hash identifier: b9Rf82tWGBx56csRc2DtObsZNSgJoQBwhj0rE/YxDoo=
Subject key identifier: 57:18:49:40:32:82:76:69:5C:72:95:3B:C2:C8:89:00:4C:F3:4E:D7
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 0198EC26856C7E727D24F73060F1DB3E764E
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/VxhJQDKCdmlccpU7wsiJAEzzTtc.roa
Signing time: Wed 27 Aug 2025 15:30:04 +0000
ROA not before: Wed 27 Aug 2025 15:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 176.121.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:26:85:6c:7e:72:7d:24:f7:30:60:f1:db:3e:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Aug 27 15:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57184940328276695c72953bc2c889004cf34ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:8f:e7:24:57:3f:a5:4a:cd:05:ae:48:7b:
3e:64:5f:92:dc:95:88:73:8a:3d:3d:39:cb:4b:29:
2b:55:24:d7:dd:c8:06:d3:60:01:7f:e9:9e:2e:6b:
73:be:40:79:e1:88:a2:31:9b:f3:87:b7:de:b4:bc:
da:58:72:e1:54:d2:e0:11:ec:c1:37:95:ed:9c:99:
43:1a:ee:4b:14:63:df:84:f1:94:48:a3:90:a4:85:
8a:8c:07:4a:39:b1:63:46:4b:e5:15:e9:a2:ca:9b:
a6:51:a7:9f:c7:bc:d0:56:fc:e1:0a:52:c1:f7:d5:
53:f6:3f:b8:7c:ee:c6:dc:4e:2b:e6:77:3d:5e:ee:
65:fb:c0:1e:a0:a7:b2:62:fa:f5:37:5d:c9:23:28:
3f:c2:96:8c:58:f1:e1:73:df:b2:4d:4a:59:5c:49:
1b:37:5c:6a:df:35:ed:8c:0e:41:8e:f4:70:7c:6f:
9c:dc:eb:05:53:59:ba:91:64:14:13:1c:bb:d8:a3:
cc:2e:7a:92:b5:18:04:e2:6f:a0:2e:10:b9:09:a5:
db:3b:64:0d:02:06:cd:05:b1:61:fc:21:93:84:a6:
83:5d:4f:66:a9:d6:c8:94:79:f4:e7:97:b9:66:c0:
29:c6:12:61:f0:30:ed:c9:22:c0:d2:0e:9c:3b:6b:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:49:40:32:82:76:69:5C:72:95:3B:C2:C8:89:00:4C:F3:4E:D7
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/VxhJQDKCdmlccpU7wsiJAEzzTtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.2.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a7:e3:71:00:bc:f3:26:5a:6c:0d:c4:d0:22:7e:f8:67:4f:
4a:ed:ae:3e:e5:4b:b9:b1:e9:86:a6:b2:ea:88:28:48:9e:58:
b4:04:0e:0d:06:2a:b4:31:d4:fa:31:70:06:0b:14:3b:ac:73:
b3:b6:6c:61:06:dd:f3:9f:53:c9:96:79:7c:42:0b:f3:1c:8c:
a6:25:1b:00:ed:75:06:1b:8e:93:f9:54:b2:7a:0b:67:d9:0d:
42:9e:94:29:15:72:7b:58:18:25:68:6d:4b:26:27:10:5a:7a:
8d:2e:99:0a:f0:46:fb:b7:70:25:fe:2e:f6:4b:f2:82:76:9b:
d7:64:99:f1:af:73:59:d5:3a:55:59:a6:2c:b8:ac:bc:25:5f:
ca:8a:30:3a:81:94:66:60:4c:8f:85:75:5a:95:8d:59:52:cb:
0e:5a:4c:a7:c8:52:e1:d6:58:e7:a3:2c:48:1f:7d:80:6a:ef:
97:d5:22:4e:8a:88:06:05:51:f1:62:52:d6:19:ea:df:13:31:
ca:7e:c4:62:97:23:b0:86:ee:db:43:e0:52:17:a6:63:cf:41:
61:4c:c9:75:0e:16:89:d7:01:77:bd:65:0b:9b:55:b9:a0:33:
7c:c1:a8:65:51:3c:57:55:fe:02:b9:a6:b6:aa:19:07:72:a1:
4f:2e:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:35:49 2025 by rpki-client