Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa
File: a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa (raw, json)
Hash identifier: 8Zfyg7ufLSgxjTlxOposyYi/HNbgCO7Wpg4AzvBTpFY=
Subject key identifier: 6B:C8:B2:20:3A:67:BE:76:F1:6D:34:B6:9F:55:43:66:27:89:FF:D1
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 01977D16D594DFA4180FF6F967817D444D9C
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa
Signing time: Tue 17 Jun 2025 08:52:17 +0000
ROA not before: Tue 17 Jun 2025 08:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8254
IP address blocks: 2a06:fcc0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:16:d5:94:df:a4:18:0f:f6:f9:67:81:7d:44:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jun 17 08:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc8b2203a67be76f16d34b69f5543662789ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:9b:7a:bf:4e:7b:4b:c7:e5:99:6d:7c:4d:
d0:5c:62:d6:08:c3:fc:b8:55:9d:2b:f2:fb:49:cc:
f0:b9:68:ab:af:32:69:78:1b:1d:4a:03:0a:08:74:
44:25:21:fd:36:37:68:c0:2b:5d:0b:9e:74:39:76:
11:a7:02:8d:a2:3d:b5:20:15:71:c9:97:74:20:5c:
cf:3e:7b:06:b6:be:3b:d9:e7:0c:5c:c3:ac:a6:b0:
41:69:e8:a0:1c:1f:7c:63:b3:3a:30:59:ef:91:10:
68:e8:7f:4f:3e:54:31:9a:9b:db:e7:e0:ef:da:4e:
eb:74:57:4a:85:09:69:23:37:05:fa:69:d1:e9:9d:
71:2c:5b:f0:3c:ce:a8:4b:91:40:52:a8:36:43:e8:
37:b6:39:79:46:21:c2:86:91:43:c4:e5:0f:af:49:
ce:a1:97:70:e0:03:a5:dd:d1:fa:0a:da:98:5d:48:
16:2c:cd:cc:ea:4d:9a:6a:8d:23:c7:f6:c9:8b:2a:
e6:66:a3:70:e4:36:e9:8c:24:f8:7c:22:04:94:5b:
dd:42:00:53:fe:03:46:83:21:99:50:8f:0a:1b:c5:
b5:eb:62:5b:d3:73:a2:0b:2e:86:fd:49:9e:ba:e0:
2b:85:54:22:e8:ec:c9:ba:21:f7:8c:ea:fa:d4:9a:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C8:B2:20:3A:67:BE:76:F1:6D:34:B6:9F:55:43:66:27:89:FF:D1
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/a8iyIDpnvnbxbTS2n1VDZieJ_9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:5::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f5:3c:4a:e0:07:c4:71:3d:10:45:d4:82:a2:9d:b9:fd:e8:
c4:16:69:3e:a1:31:7a:2f:fb:00:8d:38:db:63:10:0d:2d:59:
07:8a:1a:9b:e5:c1:40:72:6e:82:f3:e8:a9:5f:77:24:d4:a2:
9b:86:f2:af:2f:51:c8:ce:66:ce:0d:89:a2:12:ec:30:45:45:
79:15:8b:3f:31:16:1f:78:7d:f0:58:8d:15:cc:32:8a:0c:37:
52:1f:a9:99:f1:57:93:af:2d:f5:29:c8:17:31:26:d6:5e:9d:
ae:35:db:3a:1e:ca:b7:b4:a4:75:b2:9e:59:54:34:c6:99:2c:
29:21:82:8c:dd:75:f7:a1:f6:2d:38:d0:69:28:69:f5:b9:0b:
72:9c:02:a7:4e:55:a5:94:1d:ab:d2:a0:ae:d8:e4:73:8f:79:
1f:2e:6d:69:cf:28:c2:20:06:d8:03:31:ac:36:a6:bd:56:ad:
33:b0:b8:d4:dd:47:42:b9:5c:39:c2:e7:3a:c4:7f:5e:bc:57:
ae:7a:6e:e1:cb:32:62:03:d6:7e:d9:0e:0a:0f:15:4b:62:f1:
b6:22:0b:bb:57:2d:d0:11:53:d6:02:6c:80:e4:1b:bd:a9:e1:
ff:60:b1:0f:bb:a0:1a:0d:60:89:94:8d:47:86:6c:42:6f:95:
5e:8f:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:20:12 2025 by rpki-client