Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/9-Jf83x4olz8Hfew1s_UNi3V90k.roa
File: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (raw, json)
Hash identifier: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=
Subject key identifier: F7:E2:5F:F3:7C:78:A2:5C:FC:1D:F7:B0:D6:CF:D4:36:2D:D5:F7:49
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0198134DF4206D762216BAC3F9801B8C5004
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/9-Jf83x4olz8Hfew1s_UNi3V90k.roa
Signing time: Wed 16 Jul 2025 12:55:32 +0000
ROA not before: Wed 16 Jul 2025 12:55:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.212.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:4d:f4:20:6d:76:22:16:ba:c3:f9:80:1b:8c:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jul 16 12:55:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e25ff37c78a25cfc1df7b0d6cfd4362dd5f749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:d0:c2:f6:ea:54:92:4f:19:d7:48:7b:1e:
bf:86:9c:cd:3a:db:2e:f0:56:b2:43:e0:da:0d:70:
64:98:58:0a:5e:08:d6:75:f7:a9:0c:2e:1d:a4:8e:
26:9e:3a:ee:bc:51:44:4e:85:e5:8d:65:85:4e:55:
3b:10:fd:f3:78:0f:cd:fc:39:6f:37:6f:20:85:12:
26:4d:3d:28:7c:d8:07:d7:91:cb:b7:f7:47:cf:44:
40:e8:c1:95:ef:ec:bc:01:c3:a7:c0:c6:eb:3d:79:
e8:b3:e0:5c:9f:22:fc:36:34:61:53:bd:06:58:06:
18:03:9b:ac:cc:b4:e4:59:5e:6e:90:6f:c1:ce:7e:
37:6f:01:ea:40:24:fc:f6:f6:07:3e:c8:9d:95:0f:
0e:17:8c:f5:d2:d4:7b:39:fd:da:db:ee:47:fe:ba:
5c:04:38:56:ad:6d:f9:29:ab:35:73:c9:c0:33:48:
00:87:e4:7a:2b:d3:0f:a3:db:e7:d6:54:4b:f3:42:
e3:ce:be:f8:29:1e:bb:e7:d3:5b:e6:1d:81:b4:84:
e3:6b:33:f3:ee:54:c1:9f:52:35:87:81:87:a3:29:
4f:d0:9a:3e:07:03:a8:13:55:69:93:a4:e7:b6:77:
63:48:5b:1b:99:ec:3e:fa:a1:8f:24:8f:a3:6d:60:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:5F:F3:7C:78:A2:5C:FC:1D:F7:B0:D6:CF:D4:36:2D:D5:F7:49
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/9-Jf83x4olz8Hfew1s_UNi3V90k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.29.0/24
Signature Algorithm: sha256WithRSAEncryption
26:21:3e:07:6e:75:ce:8a:09:c6:6a:c2:61:c5:ed:6d:c4:e7:
04:65:f5:80:ba:1d:d3:b8:79:91:2b:83:5a:36:45:ae:3e:f8:
48:45:4a:78:ce:23:43:d7:7f:49:a6:65:64:08:af:b0:05:d0:
bc:d0:b3:6e:d3:aa:7c:f2:3c:7c:49:3b:0d:16:da:9c:14:1d:
53:c6:af:e7:a1:60:6f:5e:2e:8b:b4:e1:91:52:f7:91:95:aa:
4e:e9:56:c4:58:c0:18:3e:8e:a6:8b:1f:ce:ed:5a:c7:4e:0f:
64:68:ae:72:32:a7:30:42:e5:fc:2d:b1:50:9c:5d:c4:87:76:
01:0b:8c:ae:63:53:63:43:4b:56:53:a3:ba:d5:7d:0c:8c:b9:
dc:44:15:b0:18:87:17:d6:30:25:9a:57:b3:2d:5b:1f:33:44:
f7:9e:d5:a0:91:c3:43:e2:bf:e9:dc:f7:e2:8c:1d:70:1d:dd:
c5:a5:de:49:61:1f:de:d3:76:a1:a2:81:d2:80:3b:0b:4e:17:
1f:db:32:fd:a3:9a:5f:85:54:42:13:27:1f:54:f1:e6:3b:5d:
58:66:3c:56:4f:cb:75:05:ff:de:4b:97:3a:38:11:42:4b:96:
34:34:0c:48:bf:ae:f9:df:9d:41:0b:d3:a9:14:56:b5:83:03:
aa:81:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:40 2025 by rpki-client