Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/S9T1rhaGmzH08PhPokTW62Frl4c.roa
File: S9T1rhaGmzH08PhPokTW62Frl4c.roa (raw, json)
Hash identifier: vcI7+zdON/5+35MWyx3TJYC92Qn460lsfgOhmAa9SzE=
Subject key identifier: 4B:D4:F5:AE:16:86:9B:31:F4:F0:F8:4F:A2:44:D6:EB:61:6B:97:87
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019996E91A1E5DEA4C941BA5A06A58252C32
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/S9T1rhaGmzH08PhPokTW62Frl4c.roa
Signing time: Mon 29 Sep 2025 19:18:02 +0000
ROA not before: Mon 29 Sep 2025 19:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214102
IP address blocks: 2a0c:9a40:8fb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:e9:1a:1e:5d:ea:4c:94:1b:a5:a0:6a:58:25:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 29 19:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bd4f5ae16869b31f4f0f84fa244d6eb616b9787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:1c:1c:67:84:91:23:cd:d6:57:39:14:56:
0a:d2:c6:97:09:a0:ab:27:46:92:06:fa:dc:53:09:
d0:1f:e4:25:b6:68:9c:70:a9:56:c5:66:da:5d:c4:
59:b7:50:64:12:18:cb:25:dc:73:9d:3a:59:82:94:
0b:2e:41:7d:06:28:eb:4e:91:b8:d4:85:6d:18:df:
4b:5e:c5:67:3f:56:42:93:07:6c:b5:9c:1c:14:5e:
99:78:cf:2b:e9:48:26:92:65:95:e2:60:8e:19:1f:
83:03:55:69:75:61:0e:53:4d:8f:a9:15:0b:5c:e2:
53:00:4e:f4:51:93:c8:24:03:fa:2c:77:97:95:cc:
d1:71:cb:7d:33:db:d4:ed:02:c9:fd:df:ad:43:f5:
0d:ff:d4:67:51:31:67:9c:21:56:ea:4b:9a:6f:9f:
8f:37:d9:45:92:d2:16:0e:d6:ff:88:1d:5b:07:f0:
ea:42:59:79:bb:11:85:cc:3a:8e:33:a3:38:a3:c2:
09:8a:98:e8:63:aa:b0:fd:aa:5d:eb:43:9e:43:5e:
f9:62:21:fe:20:a7:ca:a9:9b:b8:c8:c9:30:2a:6c:
ea:38:03:63:f0:e1:de:7b:10:46:ff:2b:a4:c0:a2:
42:5f:f8:f6:4c:58:7a:b5:d5:4f:3d:a2:35:2a:82:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:F5:AE:16:86:9B:31:F4:F0:F8:4F:A2:44:D6:EB:61:6B:97:87
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/S9T1rhaGmzH08PhPokTW62Frl4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8fb0::/48
Signature Algorithm: sha256WithRSAEncryption
c1:16:54:a2:da:4f:7c:80:93:4e:95:e8:e5:c1:af:38:7f:09:
62:9a:67:49:6f:6a:00:d2:4a:45:34:fb:f9:47:f9:c0:02:e2:
dd:72:09:f1:19:db:66:df:68:84:28:3b:76:78:4c:00:01:f2:
01:32:43:98:2c:43:99:94:1b:11:9e:60:6b:d0:9a:0b:0d:42:
da:99:9b:eb:2f:46:72:4d:fb:66:3b:ee:4e:fd:1a:ff:0b:d5:
15:0d:42:7f:ee:63:0c:9e:63:ba:83:7f:d6:53:a1:99:35:2f:
e6:74:ed:08:64:bf:54:6c:23:f6:e7:18:36:6c:35:76:13:1e:
c2:f8:e1:67:54:0f:19:c8:26:2b:55:2b:5e:b6:bb:e1:6e:c7:
25:10:ad:d4:1f:f3:da:b7:00:98:be:ec:ef:37:25:e9:a9:a7:
9b:82:d2:fa:c7:de:6e:40:80:58:25:2d:47:c7:ff:c0:db:65:
aa:98:04:d9:a4:f3:34:43:18:87:1e:80:fc:23:3e:be:e6:ab:
56:2d:7f:08:8f:e4:9c:69:16:9a:bd:e6:85:26:f2:2b:7a:13:
ba:d7:18:69:bd:a4:51:b2:f8:a2:39:27:0c:a9:06:e6:94:06:
6e:a9:e5:bb:96:b0:50:f7:5f:3d:37:d5:22:dd:00:e1:0a:74:
17:fe:53:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZmW6RoeXepMlBuloGpYJSwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwOTI5MTkxODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmQ0ZjVhZTE2ODY5YjMxZjRmMGY4NGZhMjQ0ZDZlYjYxNmI5Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq8cHGeEkSPN1lc5FFYK0saXCaCr
J0aSBvrcUwnQH+QltmiccKlWxWbaXcRZt1BkEhjLJdxznTpZgpQLLkF9BijrTpG4
1IVtGN9LXsVnP1ZCkwdstZwcFF6ZeM8r6UgmkmWV4mCOGR+DA1VpdWEOU02PqRUL
XOJTAE70UZPIJAP6LHeXlczRcct9M9vU7QLJ/d+tQ/UN/9RnUTFnnCFW6kuab5+P
N9lFktIWDtb/iB1bB/DqQll5uxGFzDqOM6M4o8IJipjoY6qw/apd60OeQ175YiH+
IKfKqZu4yMkwKmzqOANj8OHeexBG/yukwKJCX/j2TFh6tdVPPaI1KoK98QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEvU9a4Whpsx9PD4T6JE1utha5eHMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvUzlUMXJoYUdtekgwOFBoUG9rVFc2MkZybDRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI+w
MA0GCSqGSIb3DQEBCwUAA4IBAQDBFlSi2k98gJNOlejlwa84fwlimmdJb2oA0kpF
NPv5R/nAAuLdcgnxGdtm32iEKDt2eEwAAfIBMkOYLEOZlBsRnmBr0JoLDULamZvr
L0ZyTftmO+5O/Rr/C9UVDUJ/7mMMnmO6g3/WU6GZNS/mdO0IZL9UbCP25xg2bDV2
Ex7C+OFnVA8ZyCYrVStetrvhbsclEK3UH/PatwCYvuzvNyXpqaebgtL6x95uQIBY
JS1Hx//A22WqmATZpPM0QxiHHoD8Iz6+5qtWLX8Ij+ScaRaaveaFJvIrehO61xhp
vaRRsviiOScMqQbmlAZuqeW7lrBQ9189N9Ui3QDhCnQX/lOQ
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:50 2025 by rpki-client