Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa
File: 9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa (raw, json)
Hash identifier: afICcgfnIITniDH/lSXwW7AGExaecqfSGTuSlxA7xGg=
Subject key identifier: F4:F6:0D:77:63:2A:7F:43:20:8B:06:22:58:3E:53:A2:ED:66:22:E1
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 01977C8AC403370D54BE6A0AD806E5FDE7A2
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa
Signing time: Tue 17 Jun 2025 06:19:18 +0000
ROA not before: Tue 17 Jun 2025 06:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202175
IP address blocks: 84.54.100.0/24 maxlen: 24
84.54.101.0/24 maxlen: 24
84.54.102.0/24 maxlen: 24
84.54.105.0/24 maxlen: 24
84.54.106.0/24 maxlen: 24
84.54.107.0/24 maxlen: 24
84.54.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:8a:c4:03:37:0d:54:be:6a:0a:d8:06:e5:fd:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jun 17 06:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f60d77632a7f43208b0622583e53a2ed6622e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:40:87:90:c3:f3:3e:7c:be:a8:6e:92:e8:
da:42:07:00:3e:54:75:94:2b:f3:b1:5e:9b:9d:29:
9a:49:63:1e:da:d1:ed:a7:b6:98:92:15:85:f6:96:
2b:9d:04:54:2f:42:31:b5:2e:15:9d:3b:04:0f:32:
4d:ef:32:b6:d4:cd:1c:47:1b:bb:ce:a3:0f:23:67:
8a:0c:62:14:4a:fc:32:86:8a:e0:26:a2:6b:78:32:
70:58:b0:ec:15:81:4c:3c:10:89:40:68:86:19:8b:
18:67:fa:36:f1:e6:dc:19:c2:0e:77:4e:94:23:76:
f2:0b:76:18:a5:98:fe:89:75:47:f9:62:56:cf:20:
f8:9c:aa:35:11:3d:9d:79:b2:9d:d7:64:d1:af:2d:
ff:6e:bf:84:c9:99:d2:1a:75:2b:cb:a5:74:00:8a:
b6:38:8f:fe:f9:c3:49:6e:86:a7:7e:b0:60:66:4d:
90:d9:96:c2:77:f4:e1:fe:ef:93:16:a1:45:39:90:
48:b0:58:45:b1:6e:50:02:79:8d:17:b9:43:9f:4b:
9a:fb:04:d7:e1:46:5e:84:ab:94:c5:fb:0f:5f:7a:
3d:f9:93:3e:4d:a7:bf:c5:d9:48:d0:eb:8f:2e:dd:
a3:15:4b:bb:06:18:d6:dd:54:30:8a:fd:b1:38:6e:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:0D:77:63:2A:7F:43:20:8B:06:22:58:3E:53:A2:ED:66:22:E1
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/9PYNd2Mqf0MgiwYiWD5Tou1mIuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.100.0-84.54.102.255
84.54.105.0-84.54.108.255
Signature Algorithm: sha256WithRSAEncryption
57:ff:b1:dd:0b:72:b3:18:8a:be:88:1f:6e:7b:eb:cc:7d:34:
ee:07:61:0c:69:b6:37:37:b6:9f:3c:2c:fe:0a:35:3f:1c:82:
30:fe:ec:34:e0:b6:33:4b:54:d9:3f:a0:c7:d3:24:b1:eb:57:
f2:16:87:96:7e:2f:b0:50:8b:89:79:1f:aa:17:94:27:f9:0b:
e4:ea:55:8d:aa:5d:f7:69:17:bf:9a:76:6c:fc:2e:d8:94:6f:
a0:21:c1:82:2e:75:2f:9b:ab:e2:35:07:2e:93:ce:c9:66:07:
47:2b:55:50:9c:cb:2b:f9:36:6f:27:df:f9:be:3d:59:cf:ba:
11:26:0d:f7:19:3b:bf:17:80:f7:7a:0e:17:d8:bb:21:1b:09:
7a:21:80:3d:32:0d:c0:5c:fb:0f:9d:60:51:17:f0:c0:2a:2f:
e7:27:20:9b:17:d5:aa:a7:3d:82:2b:ab:b6:92:b7:e3:06:27:
d3:4e:6d:be:a9:92:cf:8f:70:28:ce:9b:c7:71:55:03:c7:46:
db:93:30:3e:af:4a:cf:87:2b:3b:4f:8c:79:9a:9a:83:1b:fc:
28:ff:db:db:bd:8a:f2:1d:66:ec:ef:3d:2a:0e:0c:19:db:d6:
bd:12:ab:76:76:86:b4:f0:7b:07:dd:05:06:5b:95:19:b7:e3:
2e:0e:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:51:45 2025 by rpki-client