Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa
File: 1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa (raw, json)
Hash identifier: pZugq23EDIU544OpCuM7hDUd1+y/txfCOV3C5E6h3Bk=
Subject key identifier: FA:54:FD:9E:A6:C5:AA:37:45:80:43:CC:2D:E8:77:08:51:28:20:42
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 019908E9AE32C99686A0CE63B64687E875AA
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa
Signing time: Tue 02 Sep 2025 05:32:36 +0000
ROA not before: Tue 02 Sep 2025 05:32:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62443
IP address blocks: 194.39.255.0/24 maxlen: 24
2a13:cc80::/32 maxlen: 32
2a13:cc81::/32 maxlen: 32
2a13:cc82:100::/48 maxlen: 48
2a13:cc83:701::/48 maxlen: 48
2a13:cc83:702::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:08:e9:ae:32:c9:96:86:a0:ce:63:b6:46:87:e8:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Sep 2 05:32:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa54fd9ea6c5aa37458043cc2de8770851282042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:12:cd:e2:f8:55:80:d7:68:92:5a:ec:f8:
ab:a4:2b:66:15:3e:da:e6:84:8a:99:ab:bd:12:cb:
ae:d5:c7:bd:c1:0d:02:49:3b:66:98:a4:95:39:ae:
fc:3b:d7:5a:0d:c7:95:39:a3:b9:3b:8a:67:50:bb:
20:81:0c:dd:d5:53:e5:cf:69:0c:14:84:8a:0b:e5:
e5:16:7b:03:64:af:e6:d5:8e:2d:41:24:cf:3f:7e:
fe:31:e5:c8:38:b7:cf:42:48:46:10:3c:7b:72:b8:
19:fe:9e:e1:68:3f:18:ea:ac:b7:b7:9b:2c:1d:d4:
f5:44:db:c4:6a:01:b2:64:a9:55:48:d8:59:06:b4:
fe:64:91:02:3e:9c:a4:b6:e8:cc:e1:88:c1:b0:df:
86:6d:ba:c3:94:9a:fa:3e:af:72:5a:6f:92:d7:20:
a0:86:64:81:0e:45:58:ef:6b:3b:5f:27:5c:db:d3:
65:d9:e0:7a:84:a4:73:a3:72:73:1e:a2:6e:70:65:
0e:5f:dd:85:3e:e2:12:3b:7d:75:e8:89:8d:67:50:
de:a6:fe:64:17:b8:a0:51:d9:c2:da:4d:0c:a8:66:
b3:bb:2d:31:71:0d:c4:eb:8b:fe:a9:1b:b1:ef:d6:
bd:dd:8f:aa:e6:97:db:5d:7a:e9:cc:88:fa:99:04:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:FD:9E:A6:C5:AA:37:45:80:43:CC:2D:E8:77:08:51:28:20:42
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/1-lT9nqbFqjdFgEPMLeh3CFEoIEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.255.0/24
IPv6:
2a13:cc80::/31
2a13:cc82:100::/48
2a13:cc83:701::-2a13:cc83:702:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:c5:28:d5:d3:45:3e:22:95:da:eb:86:48:d6:30:0a:0a:01:
2e:58:a2:ef:5d:6c:20:31:50:8f:c9:ac:6d:77:0a:04:fc:3c:
4d:a4:fc:37:11:5a:38:4c:f1:28:84:4d:5f:e9:3f:43:bd:7b:
4b:b8:a6:23:a2:b2:76:fa:1f:5a:d4:52:bf:59:ab:9c:d1:d4:
3c:36:7b:29:1e:ec:a8:a5:fb:eb:7e:94:f9:9f:2f:39:89:38:
75:1d:4c:cc:65:05:7b:68:e9:10:c9:52:ca:08:5b:02:94:d1:
1d:16:95:0c:65:d5:24:ef:44:06:8b:02:07:9e:3d:c9:a0:77:
cc:ef:64:9d:57:26:bb:71:61:d9:ea:3b:aa:08:f8:ff:c3:62:
09:7e:5c:0e:85:31:ed:3e:ea:d5:4a:04:9a:5e:64:e5:57:89:
c2:c8:8e:4f:9e:01:b8:a5:a8:29:14:d0:bd:5f:51:e4:45:ae:
f6:7f:d5:c4:0e:92:28:cb:59:d3:fa:bf:a8:04:c3:2c:c6:11:
f3:7b:68:02:1a:7b:42:c7:65:ef:39:a9:82:7f:1d:e1:ef:bb:
86:62:29:21:c4:4a:3a:01:eb:a5:9f:cc:0a:70:81:56:00:76:
9a:0f:35:ca:cb:f5:07:64:b7:aa:90:0c:56:6c:7d:da:3b:5f:
f5:27:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:20:15 2025 by rpki-client