Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kZuVrUvAvnLZLV9Y8qPzr--ztLc.roa
File: kZuVrUvAvnLZLV9Y8qPzr--ztLc.roa (raw, json)
Hash identifier: exsoabSTJBuB0yIR/KcYh9eTkEeXNIHbJSMZFxhupo4=
Subject key identifier: 91:9B:95:AD:4B:C0:BE:72:D9:2D:5F:58:F2:A3:F3:AF:EF:B3:B4:B7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01988FDF7CE134875C4A9E72CF3F92C06D1B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kZuVrUvAvnLZLV9Y8qPzr--ztLc.roa
Signing time: Sat 09 Aug 2025 17:27:25 +0000
ROA not before: Sat 09 Aug 2025 17:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205777
IP address blocks: 2a0c:9a40:8870::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:df:7c:e1:34:87:5c:4a:9e:72:cf:3f:92:c0:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 9 17:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919b95ad4bc0be72d92d5f58f2a3f3afefb3b4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:1e:8a:1a:ab:a1:c9:07:27:ad:db:7c:fa:
ab:a6:cb:12:31:dc:3a:d8:84:b5:b2:fd:e0:84:42:
29:fa:b9:e6:71:fc:75:8f:f1:1e:87:e1:20:01:22:
5a:16:33:cc:b4:15:db:f8:73:93:e8:5b:76:10:cb:
59:38:d0:6d:d2:42:19:99:9a:8e:cd:44:5f:e1:ba:
5a:fc:87:01:5e:fb:88:2a:16:ab:d6:7e:63:41:38:
54:3e:91:a6:b4:50:8a:b2:e1:a4:fe:21:21:4d:48:
46:b4:ce:c6:17:22:2e:98:c7:01:66:57:43:e5:c4:
c8:50:d2:52:e4:8d:bb:30:4a:05:0c:b3:7c:85:5b:
70:f1:0c:04:ef:a8:b0:f7:17:1c:d6:c5:3c:a0:b3:
15:24:78:19:c8:1d:40:1a:27:b8:9f:22:23:a9:00:
7e:7e:b3:bb:de:1a:5a:c6:bc:5b:3c:d9:8f:bf:66:
96:ec:fb:09:4f:fd:68:5c:49:0a:fe:9f:b1:b4:1b:
99:61:13:65:eb:09:84:20:55:15:c5:cc:fa:60:42:
c9:00:17:a0:e5:3a:ad:5a:1e:55:a0:7f:5a:2f:34:
6c:a4:e7:71:56:3b:4b:f3:1a:0b:6a:54:2e:64:b0:
91:29:bc:32:6b:a3:7c:4d:6a:6d:e0:38:6f:89:81:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:95:AD:4B:C0:BE:72:D9:2D:5F:58:F2:A3:F3:AF:EF:B3:B4:B7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/kZuVrUvAvnLZLV9Y8qPzr--ztLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8870::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1b:54:63:e3:9b:fd:bd:90:e7:68:75:be:f6:db:b5:37:47:
30:64:9a:1c:4e:e1:b6:f9:e9:b4:da:b0:c5:04:de:69:6c:a3:
8f:f5:a1:c6:83:3e:19:d2:b5:29:ab:27:f0:dd:de:16:a2:12:
0c:7a:5a:2d:50:7c:9d:26:74:8a:e8:37:91:87:b0:93:93:fe:
6c:e3:1b:d1:47:8f:f2:20:38:cf:0e:36:62:a2:36:b1:ef:a0:
f7:c2:8c:8b:1e:cc:2a:f7:ae:bf:84:5f:9e:ee:3f:68:65:c7:
ed:87:d6:5f:85:c1:8c:13:6f:82:e8:86:1b:76:87:fb:a8:ed:
97:4b:7f:29:9e:03:40:9e:10:39:ff:8d:23:8e:9e:aa:a0:8c:
4e:db:bd:01:0b:34:a2:90:b0:f3:58:b9:26:83:c4:25:4e:f8:
d1:26:58:2a:fd:e5:bd:52:f0:9d:a2:de:f9:4a:f6:2f:6b:63:
12:9d:3d:c8:9a:e7:dc:4e:96:26:9e:61:12:83:ee:fa:c4:88:
96:5d:2d:74:b8:26:78:fc:16:c3:f6:56:d4:b5:12:75:b2:d1:
88:24:26:ad:b0:e2:54:86:bd:20:85:30:69:5f:34:38:e1:9d:
c2:e6:6c:29:b8:e3:a0:80:3e:fa:43:70:12:0e:4e:5d:a5:a5:
b1:fd:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:39 2025 by rpki-client