Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/u9fQ--7ZUbrJjJsrcl6-1mKFvp4.roa
File: u9fQ--7ZUbrJjJsrcl6-1mKFvp4.roa (raw, json)
Hash identifier: 9vM5BmcIuAVq5ukvOsVD6+0zY6eczhRk6fykT/FMvyQ=
Subject key identifier: BB:D7:D0:FB:EE:D9:51:BA:C9:8C:9B:2B:72:5E:BE:D6:62:85:BE:9E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01973182FFACB45DC501722CD065E3D775F4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/u9fQ--7ZUbrJjJsrcl6-1mKFvp4.roa
Signing time: Mon 02 Jun 2025 16:39:18 +0000
ROA not before: Mon 02 Jun 2025 16:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 88.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:82:ff:ac:b4:5d:c5:01:72:2c:d0:65:e3:d7:75:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 2 16:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbd7d0fbeed951bac98c9b2b725ebed66285be9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:40:ce:a9:ec:5c:a3:e0:33:27:7a:97:84:
c1:cd:c0:21:4a:58:25:0b:d2:41:88:60:2b:13:19:
ba:b0:ba:b7:77:68:65:39:87:9f:69:72:0d:d3:8c:
ef:45:dd:05:72:e6:ef:bd:c3:5f:51:35:31:ce:87:
de:a3:85:84:6e:9e:9e:b1:f1:8f:77:cb:06:8b:6e:
64:28:f2:fb:4f:f3:c7:3f:81:44:9b:4d:28:0d:a1:
50:2d:ae:4a:9e:25:93:0c:d0:cc:2e:e7:f4:6e:5d:
c4:ee:16:8c:67:2a:47:2f:0d:dd:c6:58:de:78:a1:
d2:ea:e3:c2:75:20:87:90:66:af:44:4a:2f:e8:8f:
05:45:4a:6a:f1:62:43:d1:e1:ba:1c:64:aa:18:cf:
ef:9f:52:f9:b3:72:da:f6:51:ed:0d:0e:62:6c:ef:
f6:ea:6e:65:5d:28:d3:81:19:52:7f:c5:fe:d9:cf:
4a:11:a1:e6:20:2b:b9:de:67:11:89:e5:d8:d6:61:
29:50:ce:fe:b0:1e:94:21:05:c7:ab:e1:91:34:26:
ff:51:2d:48:e7:e5:16:e9:c6:0e:f3:d0:3b:cb:bb:
1a:2f:a1:98:cb:29:81:e8:3f:5e:7e:b7:ae:2e:60:
83:5d:3f:ba:b8:5e:7a:39:3f:d9:4a:0f:b2:50:01:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D7:D0:FB:EE:D9:51:BA:C9:8C:9B:2B:72:5E:BE:D6:62:85:BE:9E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/u9fQ--7ZUbrJjJsrcl6-1mKFvp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0e:4c:76:a4:13:5e:21:89:a4:15:6f:c6:2f:0e:b1:ac:a4:
9c:3f:fe:b3:9f:58:e3:18:f1:1b:80:0a:c2:a7:a5:48:a7:ae:
cd:d5:0c:6f:aa:17:f3:6f:c1:11:4b:26:15:79:b9:d7:05:62:
d7:f7:94:5c:03:34:25:88:22:d2:df:ee:ec:e4:b1:11:2e:11:
df:a4:0c:75:32:3e:f6:45:dc:58:27:ca:35:5f:72:3c:13:2a:
e1:30:e7:f6:e5:d5:d4:d7:5e:04:15:ca:cd:aa:8b:09:bf:03:
63:52:3a:c4:c4:4c:c9:5e:53:b3:a1:29:23:5c:db:94:18:06:
46:8d:b7:df:ac:ab:6f:2c:c4:21:fa:2b:26:1e:4e:f5:14:95:
04:08:ae:5b:1b:9f:59:ac:39:21:9d:1d:b8:92:fa:52:0f:d2:
3e:c2:71:4a:ea:51:4f:09:44:64:91:b5:aa:f2:3d:3d:e4:3d:
bb:40:7d:65:b5:ae:5a:5a:94:72:de:f3:12:68:2f:82:4c:4c:
8a:67:c1:61:82:ab:13:d8:29:cc:83:74:eb:50:79:fe:19:8c:
70:ee:df:ba:0b:39:94:9a:c8:ce:64:58:30:ed:24:db:d0:85:
d1:16:e4:e6:15:9f:c6:5c:00:3a:11:52:63:1b:7f:93:d2:a2:
16:c6:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:22 2025 by rpki-client