Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/ipcATIgjas4T7BZfo-TD2nEX73w.roa
File: ipcATIgjas4T7BZfo-TD2nEX73w.roa (raw, json)
Hash identifier: ZBUqGgdfAWnUdQLDLJSVqqEZc8Zkflrw7OQeA+w/zN8=
Subject key identifier: 8A:97:00:4C:88:23:6A:CE:13:EC:16:5F:A3:E4:C3:DA:71:17:EF:7C
Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Certificate serial: 0199290084EDCD9A5BE2C61EC3E1C04924C3
Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/ipcATIgjas4T7BZfo-TD2nEX73w.roa
Signing time: Mon 08 Sep 2025 11:05:23 +0000
ROA not before: Mon 08 Sep 2025 11:05:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208231
IP address blocks: 2a06:6c40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:00:84:ed:cd:9a:5b:e2:c6:1e:c3:e1:c0:49:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01
Validity
Not Before: Sep 8 11:05:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a97004c88236ace13ec165fa3e4c3da7117ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:09:1f:55:fa:14:88:15:7e:21:8f:b5:fc:
19:a4:f7:8f:56:3a:1f:28:ae:89:ff:f7:88:8a:8b:
d5:34:e6:03:7e:14:f3:5b:59:85:47:80:c9:c9:d0:
08:6d:c8:55:e4:e5:5a:91:92:09:27:94:8c:35:11:
e3:0d:05:cc:a2:8a:c8:14:59:5d:32:c1:61:d3:c8:
6a:cd:c0:24:a1:e2:f4:18:8d:6d:e0:4e:5c:54:88:
2b:0d:d6:20:30:40:bc:99:1a:29:42:5a:47:a2:a4:
12:dd:a8:e6:f5:f0:2e:6b:03:c7:32:d9:b0:b2:0d:
99:f2:6c:13:75:66:80:99:e2:69:9d:f3:81:6b:66:
c2:f3:e3:ef:2b:3b:77:83:c6:1a:dc:e0:b3:25:66:
55:4e:b3:23:23:cc:f2:b0:37:47:87:2f:64:4d:90:
41:18:d2:59:c8:45:f3:9f:f2:45:aa:42:72:62:bc:
2b:53:89:51:56:04:55:09:84:f6:72:d6:a6:fc:c7:
1b:da:fd:6b:f5:fc:e2:3f:0b:e1:a6:e9:3e:14:88:
70:4c:4a:11:73:7a:65:dd:2b:cb:f1:03:fa:d9:5c:
63:63:b7:61:a0:f8:3e:2f:bf:d3:5a:0f:8a:c0:be:
fd:6b:c3:73:d2:92:9f:3d:4a:f0:72:69:7b:3c:6d:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:97:00:4C:88:23:6A:CE:13:EC:16:5F:A3:E4:C3:DA:71:17:EF:7C
X509v3 Authority Key Identifier:
keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/ipcATIgjas4T7BZfo-TD2nEX73w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
81:a2:9c:c4:1e:9c:fc:f5:90:c1:d4:a8:21:2c:6a:f8:71:8b:
52:31:c4:1d:d5:dd:94:dd:93:a2:40:c1:3b:c9:f1:fb:4f:6d:
20:c7:31:60:fe:fe:94:1c:af:66:ff:b0:ac:90:59:b2:88:98:
b0:82:65:d1:ba:4d:b5:03:a1:fc:25:97:84:98:2c:b7:9d:05:
66:d3:78:d8:71:b1:13:d0:5d:fe:32:6b:37:9d:5e:c9:fe:f7:
3c:18:3e:6b:00:2a:76:f9:cb:41:7e:f4:21:14:d6:f9:62:0b:
95:e8:7a:5c:8d:f4:aa:e8:d1:32:42:6a:8d:78:6f:2f:a3:3b:
a6:8d:e9:f3:02:57:a4:85:7f:a1:f1:62:5d:cb:a9:a6:32:a9:
70:8f:46:1d:85:02:5f:f4:4d:a9:c1:08:09:41:41:b3:37:e8:
42:5c:0d:00:f7:65:97:60:95:ff:fc:c6:ac:96:30:0a:3d:89:
7f:52:22:75:21:51:d1:fa:45:3d:01:19:2c:b6:83:92:29:c5:
14:71:47:20:7a:ea:10:44:2e:d3:0c:9b:4d:c5:e9:63:f3:af:
33:3c:2b:cd:07:d5:76:ac:ff:6b:b5:10:1c:3b:f1:95:5b:7a:
6d:ed:92:2c:34:48:34:f0:ab:7b:17:53:3b:ba:81:35:f3:09:
b1:59:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:52 2025 by rpki-client