Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/PBzJqoYZvI38HUyzCtwEiykxo6c.roa
File: PBzJqoYZvI38HUyzCtwEiykxo6c.roa (raw, json)
Hash identifier: bJueb5VZoyXUoSnTOS154mRkgzXIiMtBR2Ee+RLA/JQ=
Subject key identifier: 3C:1C:C9:AA:86:19:BC:8D:FC:1D:4C:B3:0A:DC:04:8B:29:31:A3:A7
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0199AF6958D72E3C5BB9AF77FFEF53DD5AE9
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/PBzJqoYZvI38HUyzCtwEiykxo6c.roa
Signing time: Sat 04 Oct 2025 13:29:00 +0000
ROA not before: Sat 04 Oct 2025 13:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137908
IP address blocks: 2a14:67c1:a110::/44 maxlen: 48
2a14:67c1:c600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:af:69:58:d7:2e:3c:5b:b9:af:77:ff:ef:53:dd:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Oct 4 13:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c1cc9aa8619bc8dfc1d4cb30adc048b2931a3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:2c:0d:d7:88:15:94:ce:96:bd:92:47:2d:
2d:54:f0:dc:ae:34:a1:cb:60:7c:6f:c1:fc:f0:bc:
ac:c6:86:ae:55:e8:4c:7e:6d:b5:02:40:e0:ca:1a:
93:9d:8e:af:b3:25:62:cf:55:6b:28:ba:11:bc:9a:
45:e5:01:39:ba:6e:e2:61:10:f8:90:7e:eb:42:25:
80:2c:68:dc:49:5e:70:92:c9:da:9e:39:97:d0:97:
39:f8:75:d0:d4:58:d2:22:26:e7:87:a4:81:5a:2a:
12:c6:97:10:e2:4e:1d:86:87:bb:e2:df:33:75:8f:
35:52:c3:a8:ee:0a:49:b2:d2:14:b8:bc:1e:9d:ae:
9f:8d:8e:ea:af:d9:15:a9:7b:a5:d4:38:fd:ca:d4:
d1:37:68:71:27:13:61:63:dd:2b:1c:d5:12:e8:b9:
5e:9d:09:be:28:ef:44:8b:29:10:c1:a4:2c:37:86:
66:40:b4:22:7c:bb:ec:2f:17:a9:c6:1e:56:e5:dd:
28:76:35:19:43:e6:d4:94:fc:56:49:f1:d2:79:05:
10:4d:b9:9a:9d:1f:cc:0b:40:85:40:0b:ab:9e:33:
35:7e:29:ee:75:bf:57:3d:4d:7b:20:74:f3:1b:5b:
e1:40:5a:39:7e:ac:6c:d7:3a:32:2b:69:74:07:ea:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:C9:AA:86:19:BC:8D:FC:1D:4C:B3:0A:DC:04:8B:29:31:A3:A7
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/PBzJqoYZvI38HUyzCtwEiykxo6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a110::/44
2a14:67c1:c600::/40
Signature Algorithm: sha256WithRSAEncryption
94:bb:9f:6c:13:0a:a9:e2:0b:a1:13:e6:aa:bc:80:35:ea:d4:
72:2f:bc:72:f3:c0:0a:5a:8a:df:c4:55:52:48:dc:4b:5f:ef:
00:13:3f:ed:cc:81:7c:85:35:6e:f3:af:42:0d:9e:00:0f:8f:
3f:68:c3:b7:b9:11:98:24:be:ef:0c:8e:e8:a9:43:a6:76:47:
5e:d3:f0:06:07:a9:df:9b:ea:f7:5f:ad:9f:3f:82:b2:97:41:
26:83:46:d6:c9:05:1c:08:bc:7d:0b:88:98:fa:ef:92:0e:53:
43:6b:00:e7:d1:b7:6c:76:b3:5a:b8:6b:75:ff:5b:68:79:e3:
a6:7e:07:41:65:99:85:a8:8a:db:57:51:e7:7e:86:2c:4e:75:
c9:16:55:00:5a:ee:27:80:19:e6:36:6e:26:b8:c3:40:7b:6c:
f3:57:66:3d:4f:dd:0d:94:87:64:af:b4:e4:d8:75:a3:14:89:
c5:fb:b0:6a:86:5a:64:44:fa:87:4e:d6:c8:0f:7d:84:60:f9:
a7:38:e8:87:a4:07:b6:34:a8:2f:a2:ed:da:9d:fa:df:ff:eb:
88:d2:96:a4:db:b5:55:13:c7:db:5b:d2:2f:2a:f5:9e:e8:e5:
3b:5c:cf:ee:ed:09:4b:57:1a:c4:0d:ee:7d:92:e7:1d:d2:d5:
d3:68:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:23 2025 by rpki-client