Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/mX6U3t9algOOZS--zM0prPELPo8.roa
File: mX6U3t9algOOZS--zM0prPELPo8.roa (raw, json)
Hash identifier: 3gqECDZOVljmSK0Y2/kVRYNgmGMZgpKahFW7Q9oKBgE=
Subject key identifier: 99:7E:94:DE:DF:5A:96:03:8E:65:2F:BE:CC:CD:29:AC:F1:0B:3E:8F
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01993530821AA2A62E2EB539170642EC1B1C
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/mX6U3t9algOOZS--zM0prPELPo8.roa
Signing time: Wed 10 Sep 2025 19:53:15 +0000
ROA not before: Wed 10 Sep 2025 19:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.102.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:30:82:1a:a2:a6:2e:2e:b5:39:17:06:42:ec:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 10 19:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997e94dedf5a96038e652fbecccd29acf10b3e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:68:43:68:46:45:2e:92:6a:e9:7b:a9:55:
b9:8b:91:a7:a4:31:6e:aa:a3:58:95:06:ce:23:62:
23:f2:77:8e:00:1b:f1:d9:03:88:22:04:1f:df:f6:
23:47:c6:8c:d8:5c:c6:1d:af:c2:6a:b4:3c:e4:bf:
86:19:54:59:95:43:c8:7e:70:64:33:89:5d:28:f8:
e3:e3:3e:66:1d:78:55:85:dd:23:fc:96:3e:4c:ed:
a4:ae:06:cb:ba:53:56:a3:0a:62:49:b6:dd:ff:7f:
ee:72:e8:3a:1d:34:ae:32:6c:4a:04:2e:92:8d:f7:
3c:0c:cd:e1:ee:92:3a:f7:94:5b:1d:dc:ab:6a:0b:
35:50:ea:43:d2:91:b4:9d:bc:57:70:25:5d:ef:46:
21:2a:83:20:8a:38:ce:e4:1f:0c:b0:8d:93:11:a8:
5d:d4:7b:79:c9:23:4a:f3:39:cd:e9:2a:b4:6c:3c:
3b:44:bc:56:90:1b:5c:f2:14:af:69:51:cd:40:f2:
de:39:33:42:22:4b:55:7b:34:b5:dc:91:73:14:96:
3b:09:bf:74:a0:52:cd:e8:c6:45:88:98:38:dd:0f:
bd:80:68:56:e0:fc:1a:a2:20:ff:93:16:68:ac:a2:
fb:f8:bb:d5:fd:e7:f3:5c:01:b4:cf:8f:c6:62:f2:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:94:DE:DF:5A:96:03:8E:65:2F:BE:CC:CD:29:AC:F1:0B:3E:8F
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/mX6U3t9algOOZS--zM0prPELPo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.37.0/24
Signature Algorithm: sha256WithRSAEncryption
85:38:d2:1e:4c:4c:15:48:90:18:de:fd:f8:47:de:20:41:a0:
b7:5d:b2:5e:73:05:0e:e2:4f:ef:fb:f3:21:f3:93:8b:5b:df:
07:75:92:93:f6:a1:77:15:77:12:6a:8d:1a:e1:6c:92:1b:0a:
29:d3:fc:36:bc:7e:d9:a3:5f:3e:f1:58:72:38:fa:47:6f:f8:
20:ce:c8:50:21:bf:de:cc:05:40:52:86:7a:88:32:2a:75:fd:
31:c9:a6:76:bc:6c:d7:a5:33:98:48:4e:1a:5f:65:4e:01:f7:
9e:bb:c9:b7:8f:7c:10:dd:f1:97:0d:bd:df:0d:b7:34:e3:3d:
a1:10:21:5f:72:92:08:b1:af:33:f4:96:7e:78:28:f8:c4:ca:
b4:5d:59:6b:14:60:80:36:ec:30:38:0e:be:62:81:27:f7:b4:
d7:c9:4a:c9:44:c4:d9:76:3e:7a:18:89:50:71:c7:00:ef:af:
79:71:fe:99:ab:bc:d5:39:e2:79:26:cc:d2:9f:b4:be:d3:f6:
65:68:f1:65:96:11:a4:2b:d7:bd:c4:41:7f:51:12:9b:46:38:
4d:8f:b8:47:af:2e:13:e9:6a:b0:63:c5:4c:a9:bb:73:f4:14:
59:d4:68:84:b2:96:2d:f6:1a:c3:c0:33:0e:9f:f0:82:dc:f0:
08:d6:8c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:41:21 2025 by rpki-client