Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9WzcISpJ-uTJXJpGPWImaJ1ZGbA.roa
File: 9WzcISpJ-uTJXJpGPWImaJ1ZGbA.roa (raw, json)
Hash identifier: tuHJkUiGT5lmE9PFCGcxYDgAaDUdZDVU1o04BRBCM5w=
Subject key identifier: F5:6C:DC:21:2A:49:FA:E4:C9:5C:9A:46:3D:62:26:68:9D:59:19:B0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01996C2603F4D454F5762FFD55DF0851009E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9WzcISpJ-uTJXJpGPWImaJ1ZGbA.roa
Signing time: Sun 21 Sep 2025 12:00:54 +0000
ROA not before: Sun 21 Sep 2025 12:00:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397006
IP address blocks: 2a13:c3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6c:26:03:f4:d4:54:f5:76:2f:fd:55:df:08:51:00:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 21 12:00:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f56cdc212a49fae4c95c9a463d6226689d5919b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:0a:cd:f3:66:46:9d:0c:6d:1c:f5:2c:08:
4b:cd:31:39:ea:fd:13:a8:a5:ba:05:03:48:54:bb:
cf:86:5b:3c:0f:f8:d1:14:98:10:15:0a:df:7f:a1:
27:b5:20:3a:c3:5b:6c:16:08:2e:9b:86:16:6f:63:
5f:8a:2f:47:2f:02:0a:14:c8:e5:49:b1:77:38:e5:
35:fe:ce:0d:fb:85:81:07:f4:80:db:49:3a:4e:d2:
04:85:34:45:53:33:78:e8:27:71:9f:41:02:36:8e:
fb:2f:e7:c3:29:20:f0:e0:be:ae:af:96:e9:53:64:
9b:5c:ac:8a:12:e3:28:bb:3a:66:c5:5f:12:70:1e:
48:3a:c8:ab:52:bd:a4:a0:20:32:55:e5:5a:86:af:
1d:86:d1:8e:7f:57:7e:76:cf:95:e5:8a:ae:cf:d7:
ba:8e:35:31:b7:39:e5:93:c0:81:61:b3:eb:f1:95:
94:2f:47:1d:73:4b:8d:ce:2d:c7:0a:44:b2:cc:17:
a3:d8:e6:91:f7:24:b0:f8:7f:e7:c4:69:9b:df:78:
9f:4d:fd:bc:ad:78:dd:95:59:4b:f2:f7:09:5a:59:
21:32:c8:1e:e9:ec:49:ba:e7:b7:d5:41:dc:65:d7:
bd:56:69:9c:cd:dc:ff:22:ca:cb:0a:85:71:1a:6a:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:DC:21:2A:49:FA:E4:C9:5C:9A:46:3D:62:26:68:9D:59:19:B0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9WzcISpJ-uTJXJpGPWImaJ1ZGbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:db:41:6a:5c:ea:43:61:1c:59:3f:ac:05:43:b5:56:2d:62:
2f:d4:d7:33:99:45:cd:ad:00:b2:ba:a6:2c:55:6b:82:3e:17:
60:5d:37:6b:f9:c0:9e:f4:3c:ea:a8:a5:88:22:f5:c9:b5:31:
35:f2:e0:19:25:c2:bf:de:7f:b6:ed:fd:a7:a6:14:7f:b8:10:
21:76:e9:65:6f:cf:22:77:9d:25:81:0b:6a:e5:a7:1b:a9:e2:
ae:b8:07:cd:09:e5:a1:58:ed:c1:63:2a:ba:cc:2b:83:0e:20:
8a:1d:18:60:15:a1:5f:99:e0:37:7b:5d:a4:fa:c8:a6:1b:64:
d8:26:f7:61:31:05:e0:0d:07:e6:2b:e1:d8:ca:a4:50:64:fb:
3a:32:bd:e0:4e:9a:d7:97:3f:ec:41:c8:35:6e:08:20:4d:f0:
9b:94:c7:6a:90:69:10:f9:20:7c:ef:2c:0e:34:03:e1:05:ac:
a1:1a:b9:e1:be:ef:92:78:c6:bb:3c:de:aa:7a:f2:5d:1a:98:
d4:6d:db:a1:e3:50:ec:3c:2a:42:40:7d:71:ee:0d:f2:0a:e7:
93:1b:05:eb:b4:c8:f0:03:1c:01:55:0c:5b:2c:fe:cf:f4:16:
59:91:50:e1:e3:c0:05:05:56:0b:fb:05:60:28:3e:b8:68:fe:
77:7f:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:46 2025 by rpki-client