Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/iJ9K2n3jI4hPZNAG79rZ38I5lgY.roa
File: iJ9K2n3jI4hPZNAG79rZ38I5lgY.roa (raw, json)
Hash identifier: dFNKtlXDcHYhxg/GdP28JriV5FBHRaoGdINxWIMb3Tc=
Subject key identifier: 88:9F:4A:DA:7D:E3:23:88:4F:64:D0:06:EF:DA:D9:DF:C2:39:96:06
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019942F31E0D4C4FE215ED2337612736E716
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/iJ9K2n3jI4hPZNAG79rZ38I5lgY.roa
Signing time: Sat 13 Sep 2025 12:00:53 +0000
ROA not before: Sat 13 Sep 2025 12:00:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 176.97.219.0/24 maxlen: 24
217.11.164.0/24 maxlen: 24
217.11.165.0/24 maxlen: 24
2a01:f900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 09:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:42:f3:1e:0d:4c:4f:e2:15:ed:23:37:61:27:36:e7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Sep 13 12:00:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=889f4ada7de323884f64d006efdad9dfc2399606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:68:49:87:dd:ca:7d:03:13:9b:f3:7e:ab:
e0:98:26:3e:48:fa:53:ef:ac:06:55:35:d3:75:1e:
81:9e:8e:93:0e:08:6a:9d:62:d1:4e:bf:15:81:bf:
63:30:09:8d:39:02:f6:40:97:85:1d:70:6c:5c:39:
48:6b:e7:65:fe:e6:bc:f8:0c:9e:f4:64:3e:96:18:
64:68:12:5e:7d:49:23:33:33:63:23:a2:ec:99:dc:
ad:f6:88:18:5a:df:1e:a1:6c:bf:76:31:80:9c:0b:
23:5b:a2:2f:d5:16:63:12:ce:4a:50:1a:7b:1b:f6:
a8:62:a8:12:2c:59:49:9e:ec:5c:63:39:34:af:b4:
32:50:5a:64:c0:80:3d:e9:3a:e6:f9:ea:4f:74:6b:
82:0b:96:0d:ae:4b:1d:bd:71:37:7b:a5:6a:65:5b:
40:14:01:27:ff:c7:79:ef:cc:78:ef:4a:c2:2f:25:
90:74:aa:c0:40:4d:a3:fa:47:22:62:5d:d7:4a:da:
48:01:de:16:dd:04:02:30:ee:40:c6:14:a2:64:f6:
5d:0e:99:ac:4a:65:fe:a2:76:80:2f:a6:68:ce:52:
39:0a:b2:a4:0b:55:55:a4:bf:a5:c7:0d:2d:b2:9c:
ed:d3:b1:bc:f8:ba:c2:f3:54:62:60:71:fa:1a:5e:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:4A:DA:7D:E3:23:88:4F:64:D0:06:EF:DA:D9:DF:C2:39:96:06
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/iJ9K2n3jI4hPZNAG79rZ38I5lgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
217.11.164.0/23
IPv6:
2a01:f900::/29
Signature Algorithm: sha256WithRSAEncryption
a0:08:1f:d8:c5:4f:00:dc:d6:1b:ac:49:89:2f:4a:1a:05:c8:
d3:9b:7a:f4:43:11:89:4f:3f:f3:91:80:5e:99:d7:5b:01:ca:
43:47:7f:5e:67:d0:3e:3f:1c:3b:a8:8c:cb:f1:c7:6a:06:a5:
0c:f8:65:1e:c5:cd:df:e3:2d:19:b8:45:d3:b7:28:42:32:16:
b6:b6:18:f4:6d:fc:26:d6:44:bb:c7:0d:7c:04:f4:b6:fa:62:
a5:f2:aa:34:28:de:b1:46:24:23:07:e1:e1:f7:84:77:8c:05:
c8:ee:6c:56:86:c3:bf:3a:67:97:b6:6e:3d:8e:12:9f:b8:5a:
11:90:df:42:ab:5e:b0:76:2b:bc:ee:f6:1e:a1:92:52:f8:6e:
e2:71:8f:0f:69:d4:72:ba:fb:c9:fd:3b:9e:bc:41:04:23:2d:
f0:57:75:43:d5:95:0c:41:6f:22:39:f5:82:a5:f7:6a:d3:8b:
33:2c:62:8c:55:ff:10:aa:63:d6:03:80:3b:48:08:a2:50:05:
c4:26:47:81:58:96:38:cd:10:2c:9e:ff:20:57:5a:be:5e:bf:
0c:5e:a6:d7:fe:41:93:06:65:10:d5:5e:3d:f4:eb:b9:a1:b3:
16:2d:29:d4:96:0d:99:4f:1d:46:d5:b5:16:8d:a8:21:ba:08:
2f:6f:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 15:24:27 2025 by rpki-client