Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/9KxQLDioSqe2aYOVeKPxnDsDwuw.roa
File: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (raw, json)
Hash identifier: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=
Subject key identifier: F4:AC:50:2C:38:A8:4A:A7:B6:69:83:95:78:A3:F1:9C:3B:03:C2:EC
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 0198F0DDD4DED6B7D03DD31254A2F52B5704
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/9KxQLDioSqe2aYOVeKPxnDsDwuw.roa
Signing time: Thu 28 Aug 2025 13:28:46 +0000
ROA not before: Thu 28 Aug 2025 13:28:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 192.207.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:dd:d4:de:d6:b7:d0:3d:d3:12:54:a2:f5:2b:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Aug 28 13:28:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ac502c38a84aa7b669839578a3f19c3b03c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:f4:58:f7:17:0d:1f:bb:70:d7:f3:b0:8f:
91:a8:35:1a:04:40:22:d6:70:90:5c:7e:60:73:35:
39:a6:a6:b1:1e:07:76:08:f9:b5:2b:e1:72:51:50:
32:7a:b4:6b:d8:e4:56:c0:f7:23:08:32:e1:96:14:
73:ee:f9:52:16:5d:e5:71:3a:04:74:c0:c5:93:39:
cd:ef:4b:db:9a:93:84:74:81:be:9e:95:cb:27:ce:
cc:25:cf:4d:d4:44:37:cd:9d:fd:b6:2b:f1:73:13:
47:48:fe:97:73:eb:c8:83:81:74:ad:e0:40:2f:80:
4b:f4:25:79:09:49:d2:d5:94:55:66:a1:ba:6a:2e:
a7:a6:3a:28:7a:cc:8f:69:2f:c1:cb:d9:a4:49:5c:
19:12:c1:f0:cb:a7:8f:ad:6a:51:ce:26:f8:f0:64:
dd:bc:cf:82:1c:ba:6f:0e:ad:d9:17:89:ea:e3:37:
0d:6d:bc:5f:0b:db:a4:8a:5c:41:e8:a1:85:f4:d3:
ef:f2:34:2c:d8:c5:be:38:2a:4f:69:40:2e:ca:9d:
74:35:7b:2f:d7:19:ed:1a:51:29:b5:7d:bf:c0:88:
6d:bf:59:7c:7a:c9:96:cc:7a:23:af:43:de:15:94:
7a:a2:b6:15:4b:9f:a9:f5:c1:aa:95:d3:62:33:3d:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:50:2C:38:A8:4A:A7:B6:69:83:95:78:A3:F1:9C:3B:03:C2:EC
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/9KxQLDioSqe2aYOVeKPxnDsDwuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.207.47.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d8:33:73:a3:ee:34:3f:f7:31:6c:88:b0:33:f8:04:c7:95:
1d:dd:ef:a4:08:40:ae:a4:20:8e:11:15:d2:25:25:22:b5:25:
28:58:e4:23:d2:2e:ad:90:9b:bd:35:90:a9:6c:9a:ff:8c:85:
7a:69:cc:68:41:13:bf:bd:4a:bc:a2:04:43:cd:dd:3b:36:05:
27:94:06:c7:64:9d:dc:06:c6:85:34:0f:54:0a:f7:91:2a:d2:
d5:a3:64:bb:66:ee:b9:d5:cf:ac:63:0f:1c:21:e1:79:7c:0c:
e9:99:97:29:d0:ca:db:04:8a:bf:f6:b7:20:f3:a2:69:2a:96:
f2:9e:d3:ed:9a:7b:c9:bf:d1:ec:b8:c5:e7:3e:05:18:f5:e0:
ad:b4:1f:5e:ea:76:84:00:bc:d8:ca:db:a6:88:06:39:a8:2f:
cf:ad:64:df:4e:33:76:52:bb:3c:6d:c7:fd:a0:75:9e:96:d5:
cf:3a:7b:8f:76:89:60:94:42:df:17:51:a4:eb:35:4a:9e:6b:
15:ab:ab:61:80:95:fa:42:2c:7f:da:54:f8:60:de:91:0d:b2:
dc:85:72:1d:4d:29:cf:ae:30:9a:2b:51:ce:33:cf:e2:1c:63:
4e:7f:ca:3b:c9:1e:58:3e:a3:31:7c:a3:04:2c:d4:c9:54:cd:
50:44:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:08:26 2025 by rpki-client