Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NRaQo2jIQHJmAjiGhyJQMAA7WEc.roa
File: NRaQo2jIQHJmAjiGhyJQMAA7WEc.roa (raw, json)
Hash identifier: 0SnrGVOF2i1D6j6ZzSnt0Wg4Lvrl2BITuiIqatxVhqk=
Subject key identifier: 35:16:90:A3:68:C8:40:72:66:02:38:86:87:22:50:30:00:3B:58:47
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 0198AA21E3FC0983ADA2A7D2FB8F30D14A38
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NRaQo2jIQHJmAjiGhyJQMAA7WEc.roa
Signing time: Thu 14 Aug 2025 19:50:04 +0000
ROA not before: Thu 14 Aug 2025 19:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a0e:b200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:21:e3:fc:09:83:ad:a2:a7:d2:fb:8f:30:d1:4a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Aug 14 19:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351690a368c840726602388687225030003b5847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:14:e1:78:d4:ee:90:04:43:90:a8:65:dc:
6e:6b:9a:b8:e7:cf:c6:4a:63:14:a3:c5:f7:39:b9:
db:60:d9:6a:4d:fa:2b:41:be:a4:ce:27:03:07:f9:
c6:ff:18:e1:fa:75:0f:44:6b:6d:22:2d:04:ba:dd:
8a:03:9a:1a:57:01:0e:fa:33:de:66:52:9f:aa:dc:
4e:ae:3e:af:98:3f:ab:70:5a:99:11:33:23:e3:91:
5d:8b:09:2b:24:da:47:24:29:dc:e4:c6:e9:2a:12:
3c:31:8c:71:bf:d6:8e:3f:20:61:41:ee:d3:f1:6c:
38:82:de:68:be:d2:6e:c0:69:4b:64:11:af:72:af:
c0:e9:50:88:54:25:18:da:34:7d:aa:22:22:55:6d:
27:4a:3c:59:ec:70:9f:3b:f2:50:ce:29:99:66:fe:
ca:17:9e:13:8d:84:8a:25:92:d1:a2:a2:aa:7b:49:
4a:4a:eb:a1:e4:11:fe:76:e5:b3:95:93:69:f2:8d:
62:53:33:48:0b:b9:b5:29:f0:7b:6c:d2:d7:38:fa:
4a:dd:51:fc:11:28:be:59:c3:15:72:c7:3b:26:78:
b9:5f:70:49:de:41:40:eb:36:d4:62:59:d8:98:45:
96:d0:30:f6:06:86:2b:d1:e5:94:01:f1:e3:d4:61:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:90:A3:68:C8:40:72:66:02:38:86:87:22:50:30:00:3B:58:47
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NRaQo2jIQHJmAjiGhyJQMAA7WEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b200::/29
Signature Algorithm: sha256WithRSAEncryption
9b:6d:a0:db:12:63:11:2f:9e:9e:a3:5c:53:f0:17:d0:07:04:
b0:a1:f6:a2:17:40:57:e6:f6:c0:61:91:2c:6d:7b:77:8e:51:
2f:8d:8f:4b:72:9e:fd:71:f7:cb:2e:17:8a:3c:d2:d3:1e:55:
c4:53:00:6b:67:f4:38:48:3b:21:57:8f:11:74:b8:36:3b:01:
a6:43:d1:d6:a6:6b:c8:93:5a:35:fc:cd:56:2f:57:8d:92:a6:
13:1b:c1:28:b9:ce:c9:c9:eb:e0:15:69:c8:5c:f7:fe:ec:c0:
05:82:db:97:72:84:e8:d2:07:ff:ea:0a:62:27:2a:ac:39:ab:
84:c3:52:40:69:c2:aa:0d:65:ae:d4:da:65:db:f6:c8:40:46:
f4:1c:a8:fd:f2:49:63:e9:0d:e9:2a:35:e9:41:af:f3:90:bc:
36:7b:36:bf:2d:4a:b0:e3:8c:4d:68:b2:b4:9e:1c:72:3c:f9:
1a:0d:d8:9c:55:75:62:75:8e:95:6c:a2:f5:8f:63:80:3f:24:
94:68:4f:61:68:6e:8b:7e:9c:f4:26:4a:e0:e7:c5:81:f8:bc:
ca:6e:e0:21:99:fb:b7:69:ef:4a:98:fc:83:5c:35:52:a0:47:
63:a7:f8:3c:30:d1:ff:61:ed:94:04:c4:d0:78:0b:ed:c8:7d:
0d:d4:2c:88
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZiqIeP8CYOtoqfS+48w0Uo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUwODE0MTk1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTE2OTBhMzY4Yzg0MDcyNjYwMjM4ODY4NzIyNTAzMDAwM2I1ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHwU4XjU7pAEQ5CoZdxua5q458/G
SmMUo8X3ObnbYNlqTforQb6kzicDB/nG/xjh+nUPRGttIi0Eut2KA5oaVwEO+jPe
ZlKfqtxOrj6vmD+rcFqZETMj45FdiwkrJNpHJCnc5MbpKhI8MYxxv9aOPyBhQe7T
8Ww4gt5ovtJuwGlLZBGvcq/A6VCIVCUY2jR9qiIiVW0nSjxZ7HCfO/JQzimZZv7K
F54TjYSKJZLRoqKqe0lKSuuh5BH+duWzlZNp8o1iUzNIC7m1KfB7bNLXOPpK3VH8
ESi+WcMVcsc7Jni5X3BJ3kFA6zbUYlnYmEWW0DD2BoYr0eWUAfHj1GEOwQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDUWkKNoyEByZgI4hociUDAAO1hHMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvTlJhUW8yaklRSEptQWppR2h5SlFNQUE3V0VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6yADAN
BgkqhkiG9w0BAQsFAAOCAQEAm22g2xJjES+enqNcU/AX0AcEsKH2ohdAV+b2wGGR
LG17d45RL42PS3Ke/XH3yy4XijzS0x5VxFMAa2f0OEg7IVePEXS4NjsBpkPR1qZr
yJNaNfzNVi9XjZKmExvBKLnOycnr4BVpyFz3/uzABYLbl3KE6NIH/+oKYicqrDmr
hMNSQGnCqg1lrtTaZdv2yEBG9Byo/fJJY+kN6So16UGv85C8Nns2vy1KsOOMTWiy
tJ4ccjz5Gg3YnFV1YnWOlWyi9Y9jgD8klGhPYWhui36c9CZK4OfFgfi8ym7gIZn7
t2nvSpj8g1w1UqBHY6f4PDDR/2HtlATE0HgL7ch9DdQsiA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:03:39 2025 by rpki-client