Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/s-r4w7ySnV2Vg8vme8Y9lIPrYVU.roa
File: s-r4w7ySnV2Vg8vme8Y9lIPrYVU.roa (raw, json)
Hash identifier: oHu+2xxFGvTD1nkXKayQ7o8DxDVG0V0AURS5kRLQJZg=
Subject key identifier: B3:EA:F8:C3:BC:92:9D:5D:95:83:CB:E6:7B:C6:3D:94:83:EB:61:55
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0198994EA6CAB7CF93DBD81CAF22F26DB142
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/s-r4w7ySnV2Vg8vme8Y9lIPrYVU.roa
Signing time: Mon 11 Aug 2025 13:25:25 +0000
ROA not before: Mon 11 Aug 2025 13:25:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205591
IP address blocks: 2a0c:9a40:8680::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:4e:a6:ca:b7:cf:93:db:d8:1c:af:22:f2:6d:b1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 11 13:25:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3eaf8c3bc929d5d9583cbe67bc63d9483eb6155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:b9:cd:cd:7f:f1:b2:7c:bc:f8:6f:55:d2:
e0:d7:b0:6c:e7:17:7a:24:13:5d:e7:6d:a8:6d:ca:
a5:41:03:a7:69:61:64:92:fc:51:23:40:ea:a8:18:
af:5e:05:9a:bf:78:86:f8:3a:0f:be:e2:17:ad:cd:
81:04:21:d5:aa:d1:d8:ba:7a:37:ec:a1:48:47:24:
7b:ec:7b:38:59:6b:5b:43:70:aa:3e:33:de:18:78:
1f:ba:9a:13:8a:bb:69:6f:3e:99:e3:a0:ff:0b:71:
bd:82:b1:38:59:e6:06:29:34:0c:56:76:16:97:a0:
c1:ae:bf:23:68:5b:7f:39:3a:70:7e:11:e2:02:44:
26:aa:bf:25:99:a6:e5:60:ce:98:60:96:7a:ae:b6:
b4:6f:29:15:99:a8:33:b4:f3:a1:b1:5a:66:3e:d6:
67:a0:23:bf:4d:dc:aa:af:c8:54:79:57:a2:2c:c4:
23:8e:0f:46:e4:39:41:c5:8c:af:d8:e5:cc:c3:0d:
e5:fc:46:25:35:9e:64:fd:84:83:bb:55:ce:1e:14:
42:b1:7d:cc:f9:be:08:17:37:1f:78:43:66:28:4e:
97:2d:97:99:8b:ea:86:b9:00:23:97:e5:24:19:7a:
4d:da:78:d5:b0:d1:38:53:2c:56:67:7b:56:13:fb:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:F8:C3:BC:92:9D:5D:95:83:CB:E6:7B:C6:3D:94:83:EB:61:55
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/s-r4w7ySnV2Vg8vme8Y9lIPrYVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8680::/44
Signature Algorithm: sha256WithRSAEncryption
77:aa:f4:aa:c2:92:67:24:8c:41:1c:7a:68:b3:d0:c7:22:c1:
d8:b5:3c:67:8b:07:8b:7e:e7:65:63:0a:b4:c0:ff:e6:81:ab:
5d:77:70:ca:a2:38:6b:d4:e8:5f:f3:4c:70:4a:ff:c7:fc:ce:
2d:03:3c:01:92:1e:68:cf:b7:34:16:87:de:f6:24:b2:e8:4a:
b7:e4:52:70:46:ac:dd:9e:b4:51:f5:52:95:8d:fd:b9:9c:a1:
a9:16:7e:9a:23:79:2b:74:4c:a0:36:81:80:bf:a5:9b:fd:52:
74:db:0a:10:fe:ba:af:16:af:f1:76:b4:8a:3e:f2:f0:1a:e7:
0a:c8:c2:ed:42:29:11:f3:21:75:4f:14:b8:11:30:fa:f6:a6:
9f:e0:7d:f8:c0:65:45:96:21:53:8f:1b:e1:7e:85:b3:62:2b:
ad:dd:9a:4f:4c:00:f6:bc:95:b2:ef:c4:cb:34:dd:1a:90:9a:
b6:4d:61:34:6b:c0:ea:8c:66:80:f4:4b:57:02:d9:2e:b8:6d:
0a:72:53:23:1a:2a:79:5b:de:f9:54:f9:27:e3:78:d0:4c:66:
ef:b1:58:1d:00:f5:b1:7e:f3:7c:d1:80:2e:48:91:dc:1e:c4:
d1:dc:a5:de:1c:88:c3:13:2b:0f:99:b5:e3:5e:bc:9d:b0:96:
c3:93:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:22 2025 by rpki-client