Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9r6qhrs-WMkKmRhAntLw5h6AV9I.roa
File: 9r6qhrs-WMkKmRhAntLw5h6AV9I.roa (raw, json)
Hash identifier: mGzN/cmzbkWWHzKCoo8CWgSNL6Xv/KsXwu7f/tuseAI=
Subject key identifier: F6:BE:AA:86:BB:3E:58:C9:0A:99:18:40:9E:D2:F0:E6:1E:80:57:D2
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 01977C8AC3AB9147139BE30DEEC829029C74
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9r6qhrs-WMkKmRhAntLw5h6AV9I.roa
Signing time: Tue 17 Jun 2025 06:19:18 +0000
ROA not before: Tue 17 Jun 2025 06:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201767
IP address blocks: 84.54.114.0/24 maxlen: 24
92.63.204.0/24 maxlen: 24
92.63.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:8a:c3:ab:91:47:13:9b:e3:0d:ee:c8:29:02:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jun 17 06:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6beaa86bb3e58c90a9918409ed2f0e61e8057d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:66:68:7e:dd:25:0d:fd:ca:7e:45:df:35:
21:f7:a7:0f:dc:8c:1f:20:da:8d:ff:9c:5d:11:1b:
41:f5:7b:c6:68:b1:d5:8a:9f:5d:5a:d1:eb:86:e9:
12:f1:61:10:a5:1c:9c:0e:8d:15:fd:d5:55:36:a8:
26:98:1a:7c:84:50:3a:20:a4:53:9f:7d:2d:06:ab:
9e:b4:b0:76:b2:82:08:3a:95:0a:ea:9a:14:03:15:
d5:69:19:1f:ac:1a:fa:e8:73:6f:fa:53:b6:f3:ec:
12:2f:4b:52:22:9b:c2:7e:b0:fd:36:d1:d7:a7:a7:
62:73:ec:79:bc:6b:91:b7:ea:ad:15:2a:15:c6:fe:
1c:60:58:ca:10:bc:d8:27:ba:de:e4:c0:17:83:a8:
12:5c:63:03:76:9b:7c:7a:12:fe:d2:69:2a:e9:b0:
a7:9f:ab:ed:c1:39:f2:7c:83:e0:a3:7d:ff:6b:ef:
6f:3d:1a:42:f9:57:7e:76:35:b0:a4:08:93:98:ec:
8d:40:0b:28:42:60:85:a3:7d:2c:2b:b3:ba:77:26:
09:dd:18:fe:ef:ef:c9:db:ab:e1:a3:56:79:54:16:
6e:1a:e0:b8:74:50:36:a7:1a:37:f5:a2:68:ab:c6:
8c:c6:bb:68:fb:f1:5a:74:7a:9b:c5:6e:d6:b9:02:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:AA:86:BB:3E:58:C9:0A:99:18:40:9E:D2:F0:E6:1E:80:57:D2
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9r6qhrs-WMkKmRhAntLw5h6AV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.114.0/24
92.63.204.0/23
Signature Algorithm: sha256WithRSAEncryption
93:e0:57:59:71:01:15:63:f5:5e:43:1e:bc:2e:1a:ca:71:f8:
6c:bc:f4:e6:c2:ae:d4:33:3f:28:a6:a1:24:25:bc:72:b2:f1:
54:cf:a1:08:40:f0:68:aa:72:76:26:2e:b6:b2:ba:14:fc:1f:
bc:82:d9:55:c3:2b:1f:5d:90:c9:de:78:c1:f5:b1:61:0c:e9:
45:31:39:ec:30:dd:ae:1a:64:26:df:0f:0a:5a:af:c4:dc:91:
2e:2f:99:f4:3a:29:db:d4:2a:d6:a1:d2:41:d7:00:02:13:6d:
f5:27:e8:db:c3:e9:95:0e:ff:0c:ac:58:47:90:0f:57:10:d4:
9a:8a:16:eb:43:90:c2:14:e4:db:4a:f6:68:df:59:c2:20:71:
f6:0d:ac:67:aa:56:97:fc:99:d2:2b:19:25:1d:3b:b3:38:e5:
c4:86:a2:48:b1:4f:58:6b:b5:78:34:82:e3:23:33:5f:8e:63:
34:9a:24:6d:2e:d1:b2:72:57:5c:7b:fd:8d:ff:f5:ca:25:2b:
d6:45:81:b1:ef:4a:d1:ef:43:a2:c2:eb:94:c7:97:c7:a4:83:
98:12:78:fd:12:e3:2d:8e:d9:da:37:6a:6d:b8:79:ab:06:71:
d8:a9:9f:41:27:35:2f:f6:25:22:58:2c:49:ba:ca:ee:ea:76:
f6:1a:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:43:26 2025 by rpki-client