Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/n1lT-m44-1cFxu2-HyaXVW6E93s.roa
File: n1lT-m44-1cFxu2-HyaXVW6E93s.roa (raw, json)
Hash identifier: Db/yu14OiHjC1YOIfQjhx32jvoU3WcohshFPKla5Kdw=
Subject key identifier: 9F:59:53:FA:6E:38:FB:57:05:C6:ED:BE:1F:26:97:55:6E:84:F7:7B
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A29AD6E8CFE321FCD38C025373635D274
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/n1lT-m44-1cFxu2-HyaXVW6E93s.roa
Signing time: Tue 28 Oct 2025 07:17:03 +0000
ROA not before: Tue 28 Oct 2025 07:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21738
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb05:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:ad:6e:8c:fe:32:1f:cd:38:c0:25:37:36:35:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 28 07:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5953fa6e38fb5705c6edbe1f2697556e84f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:60:27:2c:34:07:e5:12:7b:09:d5:f8:bd:
04:f9:5f:81:48:ce:31:2a:1f:ed:6c:20:a6:cc:7e:
d4:26:f1:5c:fa:8a:f2:d4:fb:89:b4:12:ca:12:a2:
ce:3a:ee:c5:ff:b3:f2:e6:5c:4c:60:b3:fd:9f:cb:
48:f3:27:f0:0b:14:e8:f4:07:68:89:df:98:f8:e2:
cb:fb:fc:fa:67:c7:4a:d8:a2:e4:36:6a:22:b0:26:
ac:f2:4f:f5:a8:79:e7:3b:e3:4b:1e:80:ba:5e:2b:
16:01:67:41:dd:81:d4:69:2f:ce:04:ed:b8:f4:66:
5d:fb:79:a2:6e:97:04:be:d8:25:7a:45:2a:3c:26:
c2:30:01:6c:f5:9b:ad:c1:94:86:1c:61:af:b4:d7:
7c:ca:4c:90:13:50:68:88:01:33:3f:50:51:eb:5d:
84:73:54:1d:78:e9:76:c3:76:a5:96:ff:f8:90:89:
8a:14:31:83:05:2b:16:51:a8:78:9e:78:20:fb:ce:
d9:91:cb:78:d9:1f:43:d1:ac:97:06:f3:5b:c9:57:
46:bd:24:f4:1b:73:b0:3d:22:b7:e8:c3:26:20:d2:
0d:da:04:ca:55:3b:63:a4:bc:72:20:7b:74:b9:fd:
12:11:5b:70:52:1f:9f:b0:de:10:8d:3a:6e:cb:d7:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:53:FA:6E:38:FB:57:05:C6:ED:BE:1F:26:97:55:6E:84:F7:7B
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/n1lT-m44-1cFxu2-HyaXVW6E93s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
2a01:fb05:b000::/36
Signature Algorithm: sha256WithRSAEncryption
30:35:02:ad:7a:63:83:7e:e3:6c:f5:88:c8:3d:06:5d:65:35:
f2:3a:75:e1:dd:bd:1f:ac:74:80:31:ce:2c:11:c8:e9:d7:e7:
cd:ff:a6:fe:1c:2a:00:61:54:76:22:22:00:0c:95:c9:a7:83:
47:7b:b6:63:af:3f:14:05:2b:6a:7d:ec:62:42:75:e5:53:4a:
20:4a:1e:d6:3b:0c:7e:32:f4:f0:ea:7f:a0:92:f9:f0:fa:e4:
7e:f2:55:65:ec:b6:17:7f:08:9e:af:ee:4a:b3:38:4a:85:76:
4c:fb:a2:5c:28:5f:67:45:70:0a:19:bb:12:ba:21:d6:fa:87:
93:bc:84:0d:a5:01:7c:e4:3a:0b:d0:53:9d:6c:a6:22:1c:0f:
48:5f:0e:4c:36:2e:6f:3c:8c:19:3e:97:e7:d0:ac:07:29:dc:
be:a9:e4:d0:10:75:fe:5a:a7:5e:df:75:a0:6e:2b:4f:4d:fe:
4e:cb:c2:46:56:5d:19:43:34:7d:7f:e6:7f:ab:7e:d3:7e:c5:
45:3e:76:99:b3:0a:2b:1a:51:50:99:61:54:6e:e0:0e:63:b4:
d4:28:01:79:9e:e0:c4:08:98:76:c4:5c:6e:17:87:15:ef:52:
2d:85:c1:ba:55:4d:ef:c5:00:7a:4d:15:2e:78:7c:62:4d:1a:
2d:b9:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:29 2025 by rpki-client