Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa
File: 6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa (raw, json)
Hash identifier: YFFcoS2pkj0ppsY1suyM7N1UBbz37UF87GS5rHAetLM=
Subject key identifier: E9:51:6F:CE:73:35:8A:FB:83:54:3A:F6:FB:32:7C:45:CF:47:2F:87
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 01988B3024122151152C01F0D06D83882120
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa
Signing time: Fri 08 Aug 2025 19:37:24 +0000
ROA not before: Fri 08 Aug 2025 19:37:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 217.9.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:30:24:12:21:51:15:2c:01:f0:d0:6d:83:88:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Aug 8 19:37:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9516fce73358afb83543af6fb327c45cf472f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:ca:0b:91:b1:e6:12:fa:3d:3c:a8:c8:bf:
0f:ef:96:c2:98:73:46:ee:d4:27:2e:4c:e6:79:1a:
9f:2d:9a:23:e0:98:d4:e7:eb:a5:b7:a8:63:dc:9a:
b1:0e:ae:b5:b2:e3:b6:10:f3:32:90:4e:b3:43:76:
74:5e:cb:93:02:1a:9c:f5:8f:21:63:d8:38:03:65:
92:7a:85:b9:00:61:7c:b6:ba:ee:07:47:5d:07:82:
56:13:19:26:ff:b6:01:83:4b:e2:5c:70:98:d8:cf:
3f:5d:cf:33:9f:0c:33:9d:4b:f7:20:6b:72:ab:32:
5d:48:d4:51:17:82:a4:84:e1:8b:d1:96:5d:8e:98:
43:d8:13:4a:3d:40:b8:1d:17:ab:ca:37:72:8b:2e:
c0:61:c0:d5:1b:48:8f:4c:2f:48:08:80:48:b6:6a:
b4:52:68:62:7e:e0:e4:c0:f7:2f:ea:d6:d7:67:2b:
c8:19:9c:8c:34:8a:5d:ea:16:a6:4e:00:5f:3c:42:
c9:e9:b8:68:d1:5b:34:7d:c6:2e:84:4e:7b:5c:37:
40:61:c2:85:07:3b:cd:49:ff:ae:9e:78:61:82:fd:
6a:3b:66:d9:f2:a1:e5:9a:c4:0d:b1:65:9b:5e:ff:
dc:b5:5b:d5:0b:07:c0:39:50:8b:96:a8:69:13:83:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:6F:CE:73:35:8A:FB:83:54:3A:F6:FB:32:7C:45:CF:47:2F:87
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/6VFvznM1ivuDVDr2-zJ8Rc9HL4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:31:4a:0a:8b:df:f5:bc:ee:9b:92:b6:76:db:73:80:6b:de:
25:c0:52:11:4b:4a:38:b6:ab:2d:eb:c4:84:69:b3:9d:fd:bb:
68:53:ed:00:47:78:e1:87:4a:28:77:8c:04:05:56:f3:62:a1:
76:6b:09:ac:cf:95:29:20:93:50:10:91:d2:fa:62:9f:7e:06:
cf:29:0b:97:04:1a:96:96:32:63:27:03:1d:0a:2a:02:32:cf:
5b:b0:83:54:f1:30:b7:57:48:15:07:60:a0:af:cd:18:b6:c2:
98:50:25:7b:e8:45:00:97:18:c7:84:1a:60:ec:10:cc:22:43:
56:9d:5c:ee:54:37:23:0b:0e:06:73:6b:ad:d0:8e:4f:8b:47:
d5:dd:0c:16:18:c5:37:e7:c5:92:1b:cd:88:1d:f1:79:33:fa:
9b:07:c7:81:58:66:55:77:91:9a:29:7d:cb:12:3d:84:e0:3e:
df:90:19:15:46:a7:14:6a:07:87:d0:30:46:9b:a8:6a:c9:c8:
cb:87:1a:e3:72:50:bb:34:1a:de:11:75:6e:c7:d0:ee:c7:d0:
3c:86:4e:bc:52:e6:c7:ab:9a:96:af:e7:d9:03:be:73:31:20:
40:06:05:1c:5d:11:9d:47:54:c8:f7:d6:e5:6f:8f:2e:07:f2:
2b:c9:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:09 2025 by rpki-client