Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vyk7oqYxfas_2OlEtzch07mehB8.roa
File: vyk7oqYxfas_2OlEtzch07mehB8.roa (raw, json)
Hash identifier: Jsqna/2PM9vOn+bZbap+1YUJQ9bKjyYfMOSoNhN0IeM=
Subject key identifier: BF:29:3B:A2:A6:31:7D:AB:3F:D8:E9:44:B7:37:21:D3:B9:9E:84:1F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0199FC4D29B7658E26CBFDFF7294B4F39CF3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vyk7oqYxfas_2OlEtzch07mehB8.roa
Signing time: Sun 19 Oct 2025 11:48:59 +0000
ROA not before: Sun 19 Oct 2025 11:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216305
IP address blocks: 2a0c:9a40:8490::/48 maxlen: 48
2a0c:9a40:8720::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:4d:29:b7:65:8e:26:cb:fd:ff:72:94:b4:f3:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 19 11:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf293ba2a6317dab3fd8e944b73721d3b99e841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:4b:f7:5c:9f:13:ce:3c:23:41:2e:e5:c6:
c4:7f:6f:b0:a1:87:91:68:09:e4:a7:9e:d5:1a:bb:
64:93:67:75:d8:51:c5:04:0c:a5:64:6e:6d:b3:b1:
94:b1:7c:b0:a8:10:fd:15:f2:2d:e0:cc:99:f3:7a:
97:c2:e0:44:a8:80:16:bf:5b:8c:51:5b:fe:85:6f:
74:0f:99:3b:33:2d:dc:2a:5f:5e:c1:11:fa:c1:32:
a5:0f:6f:93:27:8a:c3:e9:95:b5:f8:8f:4e:9d:e5:
03:76:e5:25:9e:00:ed:0d:bd:4d:34:aa:e1:49:7e:
05:ea:56:9a:cb:90:18:9f:2d:bf:4c:14:38:45:84:
4a:b3:dc:59:0c:2b:01:a4:7d:f2:db:2e:c4:3b:b4:
9d:49:8e:e6:97:64:60:66:a3:95:42:6f:54:dd:ff:
de:c7:05:f4:44:64:98:16:1e:7f:ca:d0:89:47:9c:
27:35:9c:b4:30:60:03:0c:3e:6c:d9:f6:dc:14:d8:
12:37:a5:54:ba:8c:93:f1:64:dd:45:98:ab:c5:9e:
e9:8c:c0:f9:84:ff:17:03:c3:10:12:ca:a6:b3:3e:
a8:33:c6:de:a6:86:e6:de:86:ab:e4:a0:d0:ee:2c:
bd:1c:81:37:b4:99:ab:b3:99:8e:c2:d4:07:48:99:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:3B:A2:A6:31:7D:AB:3F:D8:E9:44:B7:37:21:D3:B9:9E:84:1F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vyk7oqYxfas_2OlEtzch07mehB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8490::/48
2a0c:9a40:8720::/44
Signature Algorithm: sha256WithRSAEncryption
8d:78:9a:4a:b8:18:b4:26:76:9c:05:02:93:38:10:ef:d1:48:
1e:00:61:7d:b0:45:c3:26:3a:13:59:ec:56:46:b5:53:b7:3e:
00:60:13:71:ab:ce:18:96:d3:b1:fc:86:4b:83:21:e2:2f:b8:
c2:98:46:b3:8a:ce:5b:0e:70:11:0f:ac:b6:94:ff:a6:48:61:
db:dd:49:f3:c0:1b:4e:de:2d:d3:4d:65:6c:52:f9:65:fc:ab:
6e:b0:b9:20:6d:45:85:09:1e:94:30:56:73:a0:c3:b1:b3:dc:
b4:bb:c7:06:37:97:06:49:d3:6c:95:95:a4:a4:f0:1d:c9:5b:
d8:55:50:87:08:19:0f:a2:b3:80:a7:6d:16:e9:2f:7b:dd:32:
b6:f9:14:c8:c3:9e:80:bf:ff:23:4a:89:59:09:a8:84:ad:c3:
9b:50:39:78:10:37:8e:c1:f5:7b:42:4b:ed:f2:98:cd:7e:68:
f2:b5:2a:95:b4:1c:54:48:22:ab:8b:10:e9:51:85:5e:b5:51:
64:ba:da:3a:88:a0:b2:73:76:1c:8d:f6:80:c6:3e:fb:7a:88:
a8:0c:98:ac:65:12:26:e9:33:d1:b8:25:d0:b4:3e:33:c7:8d:
8b:1c:ef:e8:fb:87:d6:f3:8e:2b:b6:a7:a6:a2:23:7a:44:cb:
b7:28:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:56:12 2025 by rpki-client