Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hve6ZzZtr-LmdT92rWOgnJGbsHY.roa
File: hve6ZzZtr-LmdT92rWOgnJGbsHY.roa (raw, json)
Hash identifier: oN3RiDdkqFYm++lASQdfIEl4ISQkIXQGxK58aYjanOM=
Subject key identifier: 86:F7:BA:67:36:6D:AF:E2:E6:75:3F:76:AD:63:A0:9C:91:9B:B0:76
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019972AE366B4CB15A012F15DBF9508A06A9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hve6ZzZtr-LmdT92rWOgnJGbsHY.roa
Signing time: Mon 22 Sep 2025 18:27:23 +0000
ROA not before: Mon 22 Sep 2025 18:27:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214862
IP address blocks: 2a0c:9a40:88f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:ae:36:6b:4c:b1:5a:01:2f:15:db:f9:50:8a:06:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 22 18:27:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f7ba67366dafe2e6753f76ad63a09c919bb076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:81:31:e9:d8:b3:71:e6:85:84:a6:49:30:
0e:27:bb:98:9f:a0:05:83:de:fc:42:ca:52:18:3c:
4b:77:67:91:65:6a:c9:2a:1e:04:e1:25:70:4d:e8:
00:97:42:13:b6:f2:75:7e:22:47:67:3a:d8:df:73:
fa:bb:62:cf:e2:94:5e:b9:36:c0:ff:3a:ad:47:36:
d8:8e:fd:54:7e:a5:48:15:85:cd:4c:a9:6b:cb:e4:
74:a6:67:d4:d3:e4:90:90:1c:72:25:71:b2:34:4e:
b5:4c:66:94:a7:92:5c:e6:13:4f:72:cf:46:bf:09:
42:25:78:f1:24:0b:2e:61:64:7a:c2:d7:ca:e9:2e:
57:d0:92:bb:31:c1:e5:d7:7d:af:b1:25:f2:47:72:
46:4e:de:dd:60:b8:94:d3:d1:8e:78:18:4d:d9:6b:
68:81:03:07:1d:b6:5c:29:e5:ee:71:7f:fb:93:ff:
54:3c:08:b7:32:b6:ea:31:62:d3:cf:e5:70:db:95:
25:2a:ee:56:09:09:89:0e:9a:f9:15:b8:41:60:65:
f0:bb:3c:48:01:1c:f9:23:9e:01:6c:9e:1e:cc:cb:
ad:a1:19:be:fb:61:43:18:6d:dd:fb:82:c6:ff:d9:
d6:f5:5f:31:10:43:db:2a:cb:08:37:bf:83:55:79:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:BA:67:36:6D:AF:E2:E6:75:3F:76:AD:63:A0:9C:91:9B:B0:76
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/hve6ZzZtr-LmdT92rWOgnJGbsHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:88f0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:78:10:56:cb:78:1a:8f:7e:46:3d:ae:27:0b:39:ca:0d:81:
6b:5e:4a:68:fb:20:8a:28:39:0f:fb:1b:99:d2:68:d3:80:9a:
bc:72:d8:96:be:86:77:1f:04:82:7d:d2:9c:3a:32:02:3e:c3:
f2:96:43:03:44:2f:01:c1:ef:2b:16:25:cb:3d:c3:78:05:5c:
13:d8:66:2e:b5:7b:1e:5c:23:83:b1:3a:6b:83:a0:16:65:6b:
75:d5:fc:e2:66:b1:08:55:40:92:70:12:72:cf:d1:bf:97:ea:
b2:94:7b:7a:a6:46:95:ac:0b:87:eb:89:89:61:2c:0b:46:db:
13:92:a5:47:7f:68:8c:80:5a:fd:66:a9:7e:6e:f6:48:81:5f:
30:5a:9b:de:85:5b:9a:09:f0:6f:be:55:d3:57:f1:3b:84:5a:
6b:af:6d:46:9e:5f:df:3e:ed:1e:1c:21:04:7e:d9:f1:99:a3:
6d:86:a1:7f:0f:77:be:a8:8d:88:5c:83:b4:33:5c:de:fb:d6:
bc:33:e3:dd:b3:fd:27:93:48:33:3e:a9:9e:59:f5:b5:3b:81:
e3:2d:67:f5:9f:ef:a5:5b:a5:25:49:ee:59:69:10:f0:a0:3b:
05:5c:d9:4a:9d:f1:41:dd:30:4c:f6:a6:1b:43:13:9b:58:65:
12:e1:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:01 2025 by rpki-client