Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FTVnNMfqDM3g63iAtr4ldsCacTg.roa
File: FTVnNMfqDM3g63iAtr4ldsCacTg.roa (raw, json)
Hash identifier: XpjzqTKvpyAvBcK23vPI2SzFIl57TKVyisxLyAQ+ISM=
Subject key identifier: 15:35:67:34:C7:EA:0C:CD:E0:EB:78:80:B6:BE:25:76:C0:9A:71:38
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019751939DE9A62E9B54C0EB69CB9F21ECDF
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FTVnNMfqDM3g63iAtr4ldsCacTg.roa
Signing time: Sun 08 Jun 2025 22:05:18 +0000
ROA not before: Sun 08 Jun 2025 22:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207196
IP address blocks: 2a0c:9a46:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:93:9d:e9:a6:2e:9b:54:c0:eb:69:cb:9f:21:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 8 22:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15356734c7ea0ccde0eb7880b6be2576c09a7138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:ef:98:ee:37:ba:a3:04:c6:e4:90:a1:c0:
55:4a:5b:b2:d3:9d:b5:36:7a:0d:32:e2:86:67:4b:
8e:e2:2d:f7:b6:df:ab:16:3c:91:5d:bf:3b:10:b5:
df:e8:7c:ec:29:45:e4:1f:2c:15:68:35:f0:14:e2:
cf:7d:29:a1:fd:fc:98:75:6f:b7:e2:96:44:77:59:
84:5f:0c:f2:38:b0:b2:b1:27:cc:16:81:43:ae:16:
96:11:25:e2:bd:2e:5c:d8:5d:9b:86:23:11:a5:32:
b7:a3:15:19:6b:e2:08:48:39:1f:a2:48:f3:b8:3f:
58:e8:f0:68:fd:40:db:80:d1:64:9a:b6:80:04:68:
e6:fb:8d:e1:57:46:7d:4e:61:e1:b0:63:0b:a1:cd:
0b:1c:6f:93:ac:61:a3:1a:24:63:12:10:7e:94:7c:
70:79:17:1d:5e:95:05:ca:74:1a:ca:4f:84:af:a8:
29:69:d5:f5:6c:51:a9:24:0c:1c:2f:12:71:88:9d:
44:11:9d:58:fc:3e:5c:a8:69:ef:d0:93:d3:69:8e:
eb:9d:90:1e:4b:b9:0e:60:7b:50:02:d5:45:d0:a0:
e1:6d:a8:0e:dc:e5:5b:8c:fa:a4:d8:76:a2:29:fc:
08:32:ee:98:af:bf:36:25:bd:03:bc:c0:84:d5:27:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:35:67:34:C7:EA:0C:CD:E0:EB:78:80:B6:BE:25:76:C0:9A:71:38
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FTVnNMfqDM3g63iAtr4ldsCacTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:d00::/40
Signature Algorithm: sha256WithRSAEncryption
ac:b5:89:88:04:f0:99:eb:fd:0c:6c:01:02:8d:99:17:2a:fc:
d9:d9:f9:39:5e:77:37:df:75:82:f2:44:06:7b:72:46:1f:46:
ae:fa:4f:45:09:c0:eb:5a:16:3e:6e:2a:89:40:cf:a1:53:79:
ed:ce:27:82:0f:2b:79:6f:c8:26:fb:5b:43:25:12:e1:aa:67:
9f:0d:41:ce:e9:fc:16:a4:be:9a:81:4b:38:64:ac:19:e3:42:
bc:9f:96:aa:16:f1:16:1c:19:48:14:27:cd:d4:55:52:26:b3:
d4:29:dd:ec:ff:1b:32:b8:fd:84:46:a8:62:50:8d:34:ca:c5:
27:93:24:2a:01:31:18:d2:20:be:ed:08:6b:90:6f:eb:88:52:
59:bc:97:26:ce:43:3d:fe:30:00:b4:cf:20:92:a4:3b:ce:db:
eb:66:7c:bd:e3:37:96:d5:3f:a5:cd:9b:80:95:df:37:3f:bc:
65:41:2c:66:22:0a:d0:55:d4:75:20:c0:1e:ea:1b:03:7e:fe:
b8:34:7d:30:cc:4f:00:64:a7:42:91:a6:02:b9:90:d3:9e:a1:
14:c8:ee:c7:af:04:30:c9:42:35:1c:b2:13:c5:0c:4a:fd:4b:
59:11:4e:4c:af:34:a2:5f:57:9e:48:2b:49:6f:dd:68:ec:dd:
d1:58:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:13:53 2025 by rpki-client