Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qWxt3Dfe3WqtsMdhhRpj0sVUN1w.roa
File: qWxt3Dfe3WqtsMdhhRpj0sVUN1w.roa (raw, json)
Hash identifier: 87nQfZKuQw+PVONBpS9ZM3p/iT0ip5c8TY8CpoQugyc=
Subject key identifier: A9:6C:6D:DC:37:DE:DD:6A:AD:B0:C7:61:85:1A:63:D2:C5:54:37:5C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199C319E5F92A6D0658D780C7A0EF3D538A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qWxt3Dfe3WqtsMdhhRpj0sVUN1w.roa
Signing time: Wed 08 Oct 2025 09:14:38 +0000
ROA not before: Wed 08 Oct 2025 09:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31025
IP address blocks: 2a02:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:19:e5:f9:2a:6d:06:58:d7:80:c7:a0:ef:3d:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 8 09:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a96c6ddc37dedd6aadb0c761851a63d2c554375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:47:03:ad:ae:b8:53:7b:36:50:1c:fc:57:
82:0d:33:16:2f:b2:dc:b2:94:6e:a0:8e:77:68:15:
8b:f9:13:dc:88:61:d2:c8:cd:24:c5:a5:e7:01:bc:
1c:95:7c:9b:dc:a6:2d:d3:61:54:a3:24:fb:be:1e:
ed:ee:6b:3a:03:69:80:16:68:f0:dc:a0:b6:f5:64:
6f:b4:e4:db:4f:d9:0a:62:ad:88:64:e5:5b:34:50:
da:46:ae:79:b9:58:f0:49:f4:58:20:c3:6d:d1:bc:
df:2e:b3:31:e5:07:e2:8f:f2:aa:4c:77:42:50:d3:
f2:26:85:56:05:35:df:14:7c:6e:a1:11:e3:ac:61:
21:92:7b:6b:fc:79:98:d2:b0:bc:0c:6d:42:49:02:
a4:57:58:ea:6d:b6:d7:c7:0e:b7:48:fd:27:ee:12:
ed:29:9c:eb:78:30:9b:c4:1d:a1:93:9a:23:3b:61:
51:be:06:17:aa:62:87:b8:82:03:bb:32:35:b2:f2:
ef:ce:52:84:b4:e2:4a:c8:9a:83:86:38:08:ce:3e:
e9:16:21:7c:ec:bd:f6:a7:bc:e1:4a:0d:95:45:3e:
35:17:cd:7d:7e:8c:29:b9:81:f9:f8:ce:84:fc:85:
17:a6:14:4a:d5:19:51:19:07:3b:cc:08:2c:72:95:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:6D:DC:37:DE:DD:6A:AD:B0:C7:61:85:1A:63:D2:C5:54:37:5C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qWxt3Dfe3WqtsMdhhRpj0sVUN1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
71:aa:cf:8d:22:7d:bf:c8:a6:b3:78:eb:26:1c:8c:90:80:18:
22:15:72:37:ec:6e:22:78:79:8f:e6:12:9f:b9:a3:58:c0:8f:
7b:e3:39:eb:df:ef:f1:82:8a:7f:aa:57:76:f2:6c:a8:5e:81:
87:93:82:24:46:c7:28:dd:d5:b0:c8:ee:b4:0a:1e:0a:a4:f1:
d0:0b:1c:76:41:18:a0:82:8e:2d:64:5b:1f:dc:f9:a4:da:c0:
9f:aa:2c:fb:16:a2:60:9e:ed:02:4e:d0:8a:f2:a9:df:43:a3:
36:33:87:ab:bb:00:ae:05:91:dc:1d:e5:e9:d3:12:61:f6:13:
5e:8a:a4:5f:31:6a:2c:6f:a6:f6:1d:1c:49:55:c6:8c:39:41:
63:fb:0c:14:ca:81:c3:35:7c:1a:7e:4a:90:30:9b:4e:bc:90:
4a:44:9d:2b:4b:13:fd:98:48:10:60:41:b2:79:90:3b:2d:eb:
5d:29:62:46:81:9a:ae:39:72:c7:4a:13:a0:9e:68:f0:4d:0e:
dc:ee:6c:10:c7:6b:06:a8:bd:a9:9d:a1:8e:71:5e:a4:ae:ff:
22:19:f7:1e:76:fb:6b:81:e0:e4:b1:55:6a:3e:f7:37:10:8e:
fc:2a:83:e7:ff:dc:3f:ba:a9:10:08:2b:05:a7:3b:09:20:ea:
74:86:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:42 2025 by rpki-client