Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rRATSuRPn1k0xdr0Pcevps3F_6c.roa
File: rRATSuRPn1k0xdr0Pcevps3F_6c.roa (raw, json)
Hash identifier: uKtUTtOlOhfr3aV46xVMoqePsq5iGO7zwI0BAcwR7cw=
Subject key identifier: AD:10:13:4A:E4:4F:9F:59:34:C5:DA:F4:3D:C7:AF:A6:CD:C5:FF:A7
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 0199785A3E77D7E6FBE32240D18514306CA3
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rRATSuRPn1k0xdr0Pcevps3F_6c.roa
Signing time: Tue 23 Sep 2025 20:53:24 +0000
ROA not before: Tue 23 Sep 2025 20:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 5.102.36.0/24 maxlen: 24
5.102.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:78:5a:3e:77:d7:e6:fb:e3:22:40:d1:85:14:30:6c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 23 20:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad10134ae44f9f5934c5daf43dc7afa6cdc5ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:cd:b9:47:20:f7:db:19:9a:db:d2:e5:23:
71:3a:3b:23:3b:fa:88:12:e8:f8:f2:46:cd:df:00:
02:65:27:68:40:90:e3:2b:43:cf:6c:08:50:57:0e:
7e:8a:b0:cb:b8:80:e7:9e:0c:45:a3:47:4f:9d:29:
ad:43:00:10:5b:7a:bb:55:39:b3:4b:90:01:58:48:
42:62:70:9e:6c:88:45:4c:85:37:74:5f:c3:7f:8e:
7a:33:62:3c:21:8e:b2:66:2f:70:ce:7e:16:bb:29:
c1:63:c1:1b:5d:51:0d:92:dd:9a:d6:a0:2f:b0:db:
70:04:6a:a9:53:76:e4:48:1a:d7:43:62:8c:95:8a:
f5:f6:cd:75:7f:92:5c:ae:25:f3:f1:ce:d1:de:a7:
cc:9d:b5:ac:ef:64:fd:18:0e:6c:a6:36:db:e1:e2:
de:5e:63:f2:36:7b:35:0e:cf:08:6c:a8:49:b9:63:
ea:8c:58:25:af:a8:67:67:42:08:d5:8e:53:cb:e5:
4d:fb:c7:6a:f3:6b:d3:8e:f4:13:85:cb:08:bf:c5:
dd:aa:8d:98:fe:a7:1e:ce:de:cc:2a:40:1f:18:1b:
a9:de:5c:09:81:f5:26:d2:7a:00:48:ff:dc:14:fd:
15:1d:f7:2a:76:2b:fa:f2:06:3b:46:42:17:63:2d:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:13:4A:E4:4F:9F:59:34:C5:DA:F4:3D:C7:AF:A6:CD:C5:FF:A7
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/rRATSuRPn1k0xdr0Pcevps3F_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0/24
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
64:73:45:af:3d:bd:c5:de:7c:0a:cc:28:24:00:c6:76:d3:92:
21:59:2e:e3:77:9d:d6:49:2a:ed:f0:39:e4:84:49:81:26:18:
a4:8f:46:89:22:22:2b:5d:2b:02:0e:0c:30:2a:3e:ec:45:28:
bb:50:0d:97:af:a8:31:0d:95:e5:0e:ee:09:9b:bd:60:9a:7c:
ab:38:10:e8:46:0f:2d:15:c6:ca:25:f4:8e:e3:1b:77:4c:51:
72:8f:58:8a:0c:7c:52:e2:c9:14:7f:04:93:55:fa:4e:99:31:
14:31:6c:0e:30:98:5d:e4:bc:9c:2d:25:81:bd:d9:50:99:9e:
b0:b8:47:cd:c9:96:6c:53:6e:d3:f3:df:c3:23:cb:65:8a:1a:
f1:08:dc:27:6f:80:b8:80:27:ba:f3:66:c2:68:f4:3b:a8:76:
ba:d2:40:17:09:a9:92:32:12:d7:a7:54:45:3f:03:be:2e:6b:
79:56:a2:de:dc:89:c5:79:b3:7f:ad:c1:b8:1a:69:99:22:6d:
7d:e2:07:4a:cb:25:54:e3:ba:2c:45:c9:de:17:9b:69:df:6f:
b5:ee:30:48:88:87:64:5d:c0:46:dd:36:7b:ac:3d:c6:e3:8a:
c6:68:d1:7b:4a:ad:8a:6c:b8:21:3b:d9:f1:c5:78:17:2a:44:
7e:6c:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:09 2025 by rpki-client