Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/K-Gr9e5ZkNbGUlsVOPtGfRNzL10.roa
File: K-Gr9e5ZkNbGUlsVOPtGfRNzL10.roa (raw, json)
Hash identifier: P+cFNc+MQnYfGEXzK8cKxkebUQjjYECR1xOQFRkMUtw=
Subject key identifier: 2B:E1:AB:F5:EE:59:90:D6:C6:52:5B:15:38:FB:46:7D:13:73:2F:5D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0198A9F074887F2B5EB8A38BC2E20E4C0033
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/K-Gr9e5ZkNbGUlsVOPtGfRNzL10.roa
Signing time: Thu 14 Aug 2025 18:56:04 +0000
ROA not before: Thu 14 Aug 2025 18:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215685
IP address blocks: 2a0c:9a40:8890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:f0:74:88:7f:2b:5e:b8:a3:8b:c2:e2:0e:4c:00:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 14 18:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be1abf5ee5990d6c6525b1538fb467d13732f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:61:7a:7c:da:d0:02:6a:06:8a:54:a0:63:
b8:af:05:d1:b6:8e:b0:d1:42:10:9d:30:fe:d5:0b:
f3:a8:87:e6:2c:32:e5:b4:d4:1e:9b:75:4c:e9:c1:
21:87:27:fd:01:2b:90:a0:ac:73:7e:5b:e5:04:a1:
2d:76:46:cb:4e:e4:fe:6d:d3:1b:a7:5f:64:f8:74:
21:5f:5a:01:3c:12:77:fe:08:6c:3d:72:3c:bb:fc:
1c:85:d6:20:b4:f4:21:3e:27:f2:b2:2d:5d:75:27:
28:1c:33:36:85:48:48:bc:58:a8:d6:23:dc:69:ff:
72:0a:a1:64:25:62:62:d7:3c:1a:2b:c0:7c:7e:93:
5e:48:9a:f7:6b:62:dd:64:bc:88:f9:36:5a:84:49:
35:3f:f5:af:0d:3c:71:e0:1a:84:03:56:7a:1c:a7:
2d:7b:fc:00:53:d7:80:dc:ac:53:fc:a1:cc:06:e9:
9b:e1:46:0f:ec:23:e5:87:81:94:44:6b:f9:31:15:
14:29:26:9d:4a:85:6a:b4:36:2b:19:56:07:7d:f3:
ae:78:14:d1:18:d3:62:84:42:ca:3c:fb:2b:89:27:
82:d2:99:c0:9b:9a:35:da:b7:fa:7e:4f:fa:98:39:
65:8b:da:17:5b:f7:79:66:7f:af:fd:4c:c1:c0:0d:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:AB:F5:EE:59:90:D6:C6:52:5B:15:38:FB:46:7D:13:73:2F:5D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/K-Gr9e5ZkNbGUlsVOPtGfRNzL10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8890::/48
Signature Algorithm: sha256WithRSAEncryption
23:66:30:94:79:ba:ef:be:d5:e3:a1:4c:cd:03:c7:4b:b5:1f:
4b:2d:ed:3e:91:cf:2f:57:10:5d:fa:dc:6e:e7:40:92:48:ed:
8d:e1:12:f6:82:7f:84:82:fa:17:41:56:6b:bd:a2:76:40:70:
a4:52:7b:5f:38:78:d5:76:14:75:0e:43:04:14:75:0b:a0:78:
35:3d:ac:b5:fa:c0:11:6c:0e:ff:39:d1:ef:16:f0:54:73:fe:
16:3c:ad:20:10:61:58:ea:f7:ad:22:3c:aa:7f:e8:d5:d5:d1:
6f:bf:69:a6:38:7a:92:24:67:9c:15:ad:a4:c9:7f:89:e3:27:
3a:78:c0:71:84:a7:42:f3:42:71:23:e1:57:57:62:41:9a:19:
16:d5:e6:1d:5b:17:f8:ab:9b:77:e3:85:ea:e4:95:fe:ca:95:
ae:02:53:93:c5:2c:fe:06:10:b0:28:4c:9d:8b:f0:61:59:32:
99:6d:5c:92:53:7c:23:c5:3e:c1:07:1e:6b:8f:97:3c:89:e8:
77:49:07:e8:4a:61:98:27:f7:33:24:0a:4e:74:a0:11:5e:94:
4b:4c:df:15:23:a1:5a:be:c4:cb:ec:82:fe:d9:fe:2a:bf:65:
63:e4:53:e7:62:a8:d2:fa:09:41:b9:34:28:ae:2e:35:b2:70:
94:8f:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:02 2025 by rpki-client