Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nZXAm5cB_kY8Qdex4ILo_rAPbX8.roa
File: nZXAm5cB_kY8Qdex4ILo_rAPbX8.roa (raw, json)
Hash identifier: LcjiB2vkuAUHhIhHCKBH2ngrs+Xd2T92cEAz3t0VkNE=
Subject key identifier: 9D:95:C0:9B:97:01:FE:46:3C:41:D7:B1:E0:82:E8:FE:B0:0F:6D:7F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01979192C1994C2002305576EFD321218D58
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nZXAm5cB_kY8Qdex4ILo_rAPbX8.roa
Signing time: Sat 21 Jun 2025 08:20:03 +0000
ROA not before: Sat 21 Jun 2025 08:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11967
IP address blocks: 2a0c:9a40:d300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:92:c1:99:4c:20:02:30:55:76:ef:d3:21:21:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 21 08:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d95c09b9701fe463c41d7b1e082e8feb00f6d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:69:66:15:e8:6e:c6:97:28:d6:bc:5c:1d:
7d:25:48:84:0b:4e:6b:f8:74:4c:21:80:f8:99:bd:
39:38:01:ad:80:d6:5b:60:b9:95:90:43:c9:43:52:
de:36:b0:93:85:e7:39:3d:5b:b4:36:a7:34:0e:92:
7f:37:83:e0:4e:e0:ab:bd:20:32:43:52:50:c5:b2:
dc:59:de:33:9a:c6:88:47:20:0c:7f:7a:95:0f:44:
8d:39:85:2c:34:4a:f0:3c:aa:d2:af:32:41:b1:9c:
dc:61:a4:ca:d3:53:41:8f:cb:4a:e7:f4:47:62:59:
5b:62:88:1c:e0:e0:66:08:ac:f0:42:8f:3e:15:2c:
d5:45:a0:59:de:a5:0a:3d:95:a7:09:63:d0:f8:9a:
43:be:d7:b9:65:f7:c1:e3:5e:f4:e4:cc:c2:eb:20:
54:f6:85:f7:1e:a7:dd:40:3a:a1:0c:10:2d:43:16:
a3:8c:b7:98:e5:d2:9d:26:4c:2e:91:40:82:b0:90:
04:02:51:8a:71:e4:1a:5f:dd:25:8b:c8:4f:e7:14:
b7:bb:75:a3:de:c9:94:6a:64:17:95:d8:a4:ab:e9:
0a:65:9f:10:41:90:da:7f:e8:34:02:29:e9:39:fd:
91:af:f3:9f:3e:a3:0b:a3:62:e5:c5:0b:8a:df:bb:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:C0:9B:97:01:FE:46:3C:41:D7:B1:E0:82:E8:FE:B0:0F:6D:7F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nZXAm5cB_kY8Qdex4ILo_rAPbX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:d300::/40
Signature Algorithm: sha256WithRSAEncryption
d0:fd:28:6e:e8:8a:e2:f5:2a:b8:c7:3c:c2:c9:99:82:c8:2e:
f6:77:6f:8e:9c:12:87:67:8e:20:88:88:af:f7:4b:63:1e:ac:
0d:10:8f:47:50:34:48:aa:cd:ba:09:0c:b8:5e:23:10:09:b6:
ad:d7:36:bb:38:1d:31:8a:9a:b9:da:d2:b9:f2:c9:5f:0e:a5:
6f:ca:2f:bf:3b:a4:92:5c:f4:ea:0a:21:ba:2e:b1:f1:ce:84:
c9:fd:b0:0f:24:63:b8:50:af:64:00:db:a0:06:f2:76:5f:9e:
71:fc:75:e9:10:fd:b4:69:3b:4b:4d:e7:98:54:cc:99:37:74:
57:3e:ea:41:f1:97:28:73:92:5c:0c:10:90:2f:1b:0c:dc:6a:
57:c6:d6:3f:4f:04:88:66:17:38:2e:0e:98:89:29:95:1c:6d:
5b:02:d6:bf:d3:f0:3e:d5:b0:31:90:39:38:44:8c:b4:ec:1d:
6c:87:d7:27:85:d7:d6:1a:b6:fc:c6:e9:24:b9:d3:21:bd:90:
56:10:63:8c:8b:fd:d9:46:c1:8e:91:43:ec:f6:97:7a:4c:45:
7c:fe:c2:d3:33:95:d8:6c:71:08:4f:d3:36:a1:66:06:24:67:
cd:20:23:57:5f:6b:98:72:51:8e:5d:a3:72:21:a7:2e:5a:66:
ca:99:59:f8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZeRksGZTCACMFV279MhIY1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwNjIxMDgyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDk1YzA5Yjk3MDFmZTQ2M2M0MWQ3YjFlMDgyZThmZWIwMGY2ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqBpZhXobsaXKNa8XB19JUiEC05r
+HRMIYD4mb05OAGtgNZbYLmVkEPJQ1LeNrCThec5PVu0Nqc0DpJ/N4PgTuCrvSAy
Q1JQxbLcWd4zmsaIRyAMf3qVD0SNOYUsNErwPKrSrzJBsZzcYaTK01NBj8tK5/RH
YllbYogc4OBmCKzwQo8+FSzVRaBZ3qUKPZWnCWPQ+JpDvte5ZffB41705MzC6yBU
9oX3HqfdQDqhDBAtQxajjLeY5dKdJkwukUCCsJAEAlGKceQaX90li8hP5xS3u3Wj
3smUamQXldikq+kKZZ8QQZDaf+g0AinpOf2Rr/OfPqMLo2LlxQuK37shDwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJ2VwJuXAf5GPEHXseCC6P6wD21/MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvblpYQW01Y0Jfa1k4UWRleDRJTG9fckFQYlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQNMw
DQYJKoZIhvcNAQELBQADggEBAND9KG7oiuL1KrjHPMLJmYLILvZ3b46cEodnjiCI
iK/3S2MerA0Qj0dQNEiqzboJDLheIxAJtq3XNrs4HTGKmrna0rnyyV8OpW/KL787
pJJc9OoKIbousfHOhMn9sA8kY7hQr2QA26AG8nZfnnH8dekQ/bRpO0tN55hUzJk3
dFc+6kHxlyhzklwMEJAvGwzcalfG1j9PBIhmFzguDpiJKZUcbVsC1r/T8D7VsDGQ
OThEjLTsHWyH1yeF19YatvzG6SS50yG9kFYQY4yL/dlGwY6RQ+z2l3pMRXz+wtMz
ldhscQhP0zahZgYkZ80gI1dfa5hyUY5do3Ihpy5aZsqZWfg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:12:02 2025 by rpki-client