Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa
File: CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa (raw, json)
Hash identifier: fqcNc1mJfaykXu7IOGpmWN0xqLSHMqYySIqnsZGy/CM=
Subject key identifier: 09:04:37:67:6C:C0:EA:72:11:D4:17:39:DF:4D:9C:6F:37:EF:7F:64
Certificate issuer: /CN=eaf9788c995130d70eac46c06b226672d25d4185
Certificate serial: 01978C527A77FF0C9E4C7579AD04A91218DF
Authority key identifier: EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa
Signing time: Fri 20 Jun 2025 07:51:44 +0000
ROA not before: Fri 20 Jun 2025 07:51:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2a01:9260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:52:7a:77:ff:0c:9e:4c:75:79:ad:04:a9:12:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf9788c995130d70eac46c06b226672d25d4185
Validity
Not Before: Jun 20 07:51:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=090437676cc0ea7211d41739df4d9c6f37ef7f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4d:b4:fe:6b:49:01:09:1e:a2:cf:93:9e:a9:
c0:18:07:ed:1d:b6:d3:e1:43:d5:21:00:78:1d:64:
b1:4f:a9:3a:34:76:38:e8:45:b7:e3:d2:5e:48:56:
1c:c6:25:d1:cd:39:96:cd:22:12:ef:37:11:5d:80:
57:d0:0e:56:ef:ab:e4:f9:e5:fc:39:c9:39:de:2a:
a8:6b:be:65:66:65:2b:ec:95:5f:d0:49:81:53:af:
dc:e8:7b:57:48:42:45:16:44:2e:93:1f:a4:2d:d8:
5d:d2:7c:b4:43:e6:9f:8b:63:b6:52:0d:95:bf:8e:
b7:ba:48:ba:9f:90:8b:20:be:ac:99:55:c3:e4:fe:
e3:82:10:81:13:84:17:97:19:59:d8:83:3f:46:4c:
b6:2d:52:74:4b:92:88:32:29:f1:63:32:a5:f6:aa:
0d:95:b5:dc:e9:d1:41:0b:cc:6f:a7:ef:12:83:db:
bb:d9:e3:c4:01:1a:60:96:c6:5b:9b:27:b6:38:56:
ca:c4:fc:ef:e0:5e:3e:4d:c5:23:91:6e:9d:83:2d:
89:f6:fc:0f:77:a4:6a:2c:2b:d3:9d:7d:80:f2:d8:
c0:26:af:4a:17:50:ab:71:86:04:5c:c5:4e:20:35:
89:40:6c:70:07:03:e0:41:ce:6e:17:7b:2a:95:f9:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:37:67:6C:C0:EA:72:11:D4:17:39:DF:4D:9C:6F:37:EF:7F:64
X509v3 Authority Key Identifier:
keyid:EA:F9:78:8C:99:51:30:D7:0E:AC:46:C0:6B:22:66:72:D2:5D:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vl4jJlRMNcOrEbAayJmctJdQYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/CQQ3Z2zA6nIR1Bc5302cbzfvf2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5596b0-a8a7-45b0-b245-0fe7a0ee6bd3/1/6vl4jJlRMNcOrEbAayJmctJdQYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:9260::/32
Signature Algorithm: sha256WithRSAEncryption
2c:65:65:06:eb:ec:21:f0:30:56:62:94:ba:9f:6a:b4:16:e5:
84:83:68:56:bb:0d:8d:7c:14:e1:7c:e9:b5:7f:0a:ff:e7:4d:
4e:b9:ae:5f:19:d2:ed:b1:0a:23:05:3e:16:20:e9:bf:7f:a6:
0f:b9:52:b7:10:d2:5a:7a:ab:8a:62:9b:d0:e7:9d:e4:66:da:
01:5d:af:fc:57:6b:8a:7b:53:61:4e:86:80:69:bf:f1:fb:5f:
13:dc:fb:b2:59:41:24:c5:87:fc:b2:e0:f9:e4:f2:9c:83:ce:
da:79:b2:23:98:fa:13:3d:bd:aa:be:ac:b5:72:cf:fb:f5:44:
12:b3:da:94:6d:2a:64:3a:ab:dd:d4:4d:07:aa:e1:5f:96:30:
7c:1a:e7:91:2a:b9:fc:49:50:74:2f:34:85:18:2d:80:78:bb:
a4:38:9d:bf:c9:44:02:28:5e:87:38:87:e4:80:fb:49:8e:c6:
17:c4:07:c5:2d:3e:5e:49:3b:eb:77:20:1f:f0:5d:bc:7c:c0:
2f:46:6f:77:d6:c0:c5:8e:1f:e7:30:1c:be:2e:f6:54:82:43:
0a:0a:fc:36:8f:f1:48:e0:99:e6:fa:a2:78:58:d6:2a:e1:12:
21:2e:b9:66:c8:b3:0e:e6:cf:a0:19:28:7c:af:72:d9:04:a0:
df:e7:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:39 2025 by rpki-client