Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/n7A9iNcydEM0dF7od9K9kn6dOlw.roa
File: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (raw, json)
Hash identifier: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=
Subject key identifier: 9F:B0:3D:88:D7:32:74:43:34:74:5E:E8:77:D2:BD:92:7E:9D:3A:5C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01990A610D30DC9531B30E2F4DF03EA4933E
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/n7A9iNcydEM0dF7od9K9kn6dOlw.roa
Signing time: Tue 02 Sep 2025 12:22:36 +0000
ROA not before: Tue 02 Sep 2025 12:22:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46562
IP address blocks: 193.37.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:61:0d:30:dc:95:31:b3:0e:2f:4d:f0:3e:a4:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 2 12:22:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb03d88d732744334745ee877d2bd927e9d3a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:19:ce:21:66:1e:fe:40:9f:a8:ad:30:b9:
0f:e3:87:3c:66:3e:8b:8c:0b:e4:be:8f:5a:0a:2e:
71:31:e5:59:fa:93:27:06:53:4e:43:00:54:66:4d:
0e:55:ef:d8:78:84:84:39:ac:ee:e5:d0:9a:ed:92:
13:50:f6:bb:79:f4:64:b0:a9:c5:c7:63:04:1c:df:
a2:9c:99:88:ba:a5:83:35:4b:2a:de:58:df:ec:d5:
c9:2b:94:dd:f7:26:8c:14:2e:3e:7e:05:2f:98:e8:
96:8b:f3:ee:95:ea:c6:53:5c:9f:b5:e7:fd:74:ca:
d8:d0:8c:c2:a3:43:32:d8:64:a5:18:bf:a4:a9:13:
6c:68:f7:8b:ae:f6:77:30:25:cf:14:49:95:cf:ac:
24:3d:52:d4:5e:5a:3a:03:ba:14:6e:4b:68:61:c9:
41:a2:46:6f:82:25:1d:60:24:d3:aa:3b:21:05:62:
39:93:f9:d2:bd:3a:05:e2:62:23:eb:68:e7:58:86:
9a:19:46:a8:7e:27:85:cb:d6:fb:e3:74:33:14:dc:
e6:81:64:91:e7:b2:a0:86:a5:c4:81:98:99:41:32:
e3:79:6c:f8:2d:f5:01:96:fc:34:c5:08:29:88:ab:
56:23:8a:0b:b2:79:d1:12:59:c8:89:3f:b8:46:e3:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:3D:88:D7:32:74:43:34:74:5E:E8:77:D2:BD:92:7E:9D:3A:5C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/n7A9iNcydEM0dF7od9K9kn6dOlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.199.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ba:f0:08:e3:d0:b5:16:56:45:90:56:07:a8:bc:57:90:8d:
b2:63:01:e8:fd:5c:95:42:3e:16:fb:62:dd:6d:4f:13:d9:2a:
ef:92:13:ef:6f:07:1c:65:0c:86:41:1f:9f:16:b8:79:52:30:
e0:24:b8:35:e2:5c:63:55:44:7a:8d:38:d8:dc:8a:bf:84:05:
6a:26:a3:7e:4e:c7:20:e1:42:3b:13:6b:5b:72:6d:67:e0:17:
5a:0c:48:12:09:80:82:79:00:47:2d:00:02:96:19:53:e5:52:
f5:c0:30:ef:37:c3:78:0a:89:bd:b5:34:53:f9:8e:c2:0a:a3:
d1:66:b7:ac:7c:df:06:5e:24:37:46:71:6a:23:0c:da:57:f6:
4a:7e:5a:1f:94:7c:1f:11:55:de:41:3e:7f:b2:5d:e6:5a:44:
18:d6:e2:49:dc:80:dc:a2:c5:6f:94:cb:2d:06:d7:53:9a:54:
3d:74:31:4d:14:56:e5:2e:54:c3:ae:c5:58:b9:af:ec:5a:81:
42:11:3e:1c:0e:7b:2b:96:a1:8f:25:c7:87:7b:bd:6b:5d:6f:
ab:88:92:68:0e:b5:1c:a6:e6:42:48:37:58:6f:eb:1e:d5:51:
36:89:92:b8:50:92:58:34:f8:fd:f2:0a:01:dc:b1:c4:e6:e6:
c0:6a:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:05:57 2025 by rpki-client