Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IZ9yAhuRsc1oyrua1L1w24RgH1g.roa
File: IZ9yAhuRsc1oyrua1L1w24RgH1g.roa (raw, json)
Hash identifier: 6enHe4g8qx3fvYNdE4SDbqpGhsM52X7MQoEcw6qV75k=
Subject key identifier: 21:9F:72:02:1B:91:B1:CD:68:CA:BB:9A:D4:BD:70:DB:84:60:1F:58
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01985688E6D9894086DC2A06CD87D9EFADD8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IZ9yAhuRsc1oyrua1L1w24RgH1g.roa
Signing time: Tue 29 Jul 2025 14:14:29 +0000
ROA not before: Tue 29 Jul 2025 14:14:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213657
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:88:e6:d9:89:40:86:dc:2a:06:cd:87:d9:ef:ad:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 29 14:14:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=219f72021b91b1cd68cabb9ad4bd70db84601f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:56:33:f9:8d:d4:27:3a:ab:72:e6:1f:31:
d4:81:49:dd:4b:4f:48:f9:7b:76:0c:01:a8:0a:24:
1d:da:f0:c7:40:27:7a:63:59:69:7a:53:5a:8d:bc:
1f:7c:c3:19:9c:43:12:ff:2f:03:84:c7:4c:f1:89:
48:6b:0d:73:af:df:84:23:aa:36:72:77:6b:d5:09:
11:b7:6e:a1:2c:f5:51:d3:ca:30:4c:49:0b:9b:b9:
54:e5:68:06:c3:42:f9:17:a9:8a:1f:ae:a3:8d:90:
60:0d:30:00:4b:0c:a0:e0:ee:47:25:a9:4f:e3:8d:
d5:36:ca:82:2c:c1:f7:65:d5:77:c3:bb:47:02:36:
6f:b3:0a:d8:74:d4:0b:59:0b:9b:3c:ad:16:dd:4d:
be:29:50:cb:73:e3:44:3b:97:d8:de:de:7b:ce:cb:
a5:08:a7:b9:21:f6:c8:5d:77:09:99:ab:ba:21:25:
40:6d:69:1d:3a:dc:79:bf:4e:57:06:06:e2:cc:4a:
e3:8c:30:a2:cf:3e:15:66:46:d2:bf:0f:1b:2e:95:
e7:7e:7e:29:6e:a4:71:94:9f:0d:2c:ba:45:0f:7a:
4c:d3:89:1f:10:b8:fd:73:74:27:31:fe:d1:4a:50:
36:02:47:91:06:a2:0f:3b:cd:d0:fd:ee:5a:13:24:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:72:02:1B:91:B1:CD:68:CA:BB:9A:D4:BD:70:DB:84:60:1F:58
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IZ9yAhuRsc1oyrua1L1w24RgH1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:66:59:20:05:69:84:c4:fd:9d:b5:76:c9:91:56:91:ca:61:
ae:84:44:77:4a:e3:d8:d4:e0:04:dc:ca:7e:8a:38:27:99:5a:
57:bf:5c:2a:87:64:2a:df:73:0a:d3:95:dd:b7:8e:7a:45:a7:
8e:1b:35:cc:20:4b:3b:a5:5f:39:e6:92:be:b4:6c:3b:9a:68:
cb:8d:be:66:66:31:b7:8b:42:3f:e5:06:39:2d:11:28:1b:6d:
10:e1:dd:6a:f0:d6:7e:ae:12:4f:c6:df:61:af:c6:4c:9c:9e:
d6:aa:12:61:0e:cf:77:8b:c8:de:d9:6b:63:1b:e9:07:85:5c:
4f:4a:4a:7c:3f:cf:3f:5d:dc:c0:43:c8:c7:8c:17:30:8a:9b:
c5:4e:21:ba:b9:cf:3e:f5:79:ed:7b:c0:c5:77:f3:13:dc:be:
ba:05:57:7a:b2:6a:0f:7a:3d:79:e9:9f:16:8f:09:78:e9:9a:
1b:04:03:bb:47:c3:4a:0c:4b:3e:61:be:34:ba:11:77:25:aa:
9e:9b:61:1b:19:91:a9:ae:2e:c1:07:a8:a9:27:1c:35:98:53:
0f:43:1c:f0:59:6a:be:9c:cd:aa:f9:1f:70:0e:aa:e5:5c:60:
aa:c0:50:97:eb:ff:7f:4d:3b:3e:fa:af:dd:ca:5b:58:19:90:
4b:33:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:52 2025 by rpki-client