Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/67f16VoktsMb0TGo3ZxLBjfcz4Y.roa
File: 67f16VoktsMb0TGo3ZxLBjfcz4Y.roa (raw, json)
Hash identifier: n2ZVFQqZ0r56rs0BJjjR8hXNwGPxc3Zk28iS61MT+2k=
Subject key identifier: EB:B7:F5:E9:5A:24:B6:C3:1B:D1:31:A8:DD:9C:4B:06:37:DC:CF:86
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019976732CAE709A777A40A366850EFF2535
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/67f16VoktsMb0TGo3ZxLBjfcz4Y.roa
Signing time: Tue 23 Sep 2025 12:01:23 +0000
ROA not before: Tue 23 Sep 2025 12:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 46.70.0.0/17 maxlen: 24
46.70.128.0/19 maxlen: 24
46.70.160.0/20 maxlen: 24
46.70.176.0/20 maxlen: 24
46.70.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:73:2c:ae:70:9a:77:7a:40:a3:66:85:0e:ff:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Sep 23 12:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb7f5e95a24b6c31bd131a8dd9c4b0637dccf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:ab:e7:c3:5f:1c:55:1e:b2:13:cd:a3:90:
9c:a9:d1:cb:cd:49:ea:0a:50:6e:49:60:8f:3f:d3:
8b:f7:a9:05:70:d0:4a:7d:ac:e8:4c:94:d0:8a:af:
15:ee:0c:71:87:1a:51:b9:6b:07:7a:10:ce:a5:17:
0f:9c:b8:bf:57:01:74:cd:bd:23:b7:72:f2:0d:13:
42:7e:03:3e:cb:80:fc:21:86:6c:7d:10:02:02:dc:
74:a6:bf:53:fc:30:57:30:d9:4b:5f:0a:20:1f:73:
5f:e7:f1:cb:a1:60:97:e2:f3:6f:c5:39:38:cb:f5:
d4:8f:55:cb:c8:8d:58:8e:54:42:fd:cf:3d:ec:5f:
80:5a:ab:f1:cb:e4:b4:60:f7:53:8e:b5:b5:d9:de:
1d:10:13:62:5c:be:24:87:ce:03:e2:ef:89:0a:1d:
7e:26:76:b3:bb:5f:9e:42:fd:48:8a:d6:b6:92:6e:
04:6c:8f:f2:1a:6d:38:5a:4d:2e:63:d4:fa:85:32:
ca:12:81:49:4a:ab:46:84:85:df:bb:ec:f5:5c:03:
1a:e8:f8:ec:ce:4b:22:a8:c3:63:26:48:6e:77:fd:
8b:0a:8e:df:94:8f:d5:81:eb:1d:f6:d8:51:a3:8a:
42:93:55:4a:20:0c:de:1f:b6:a0:3b:81:91:d7:e3:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:F5:E9:5A:24:B6:C3:1B:D1:31:A8:DD:9C:4B:06:37:DC:CF:86
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/67f16VoktsMb0TGo3ZxLBjfcz4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.0.0-46.70.223.255
Signature Algorithm: sha256WithRSAEncryption
b1:6b:91:05:37:4b:f2:81:27:43:d6:c7:c1:cf:e6:b3:f9:d7:
02:e1:9e:0c:ad:63:04:3d:06:3f:93:d9:74:52:46:9d:69:98:
a7:3d:8e:01:d5:80:df:e7:d0:4f:9d:a5:7e:e1:e8:b5:8a:9d:
ec:12:f2:fd:f2:f4:7c:25:15:e9:94:0b:3e:c8:27:7f:68:ed:
af:b4:1e:3a:60:1d:09:d7:fa:8f:99:98:cd:e2:e6:6f:5e:4b:
56:47:c0:41:d5:a4:1e:ff:52:f4:6e:7e:e7:12:a5:b7:30:39:
1c:79:fc:ba:b9:13:09:cc:34:0a:d4:3d:1e:b0:f7:a8:9c:98:
00:b0:88:2b:9e:7b:2a:22:a2:b2:b3:6e:ea:b5:53:b2:08:74:
24:ca:25:8d:2f:c2:23:10:b8:2f:d4:5a:c5:3f:8e:b5:d3:df:
0c:f3:47:50:bf:cd:84:20:18:67:a3:e6:58:34:a3:3f:a9:78:
c5:48:24:50:b6:c2:bf:2a:98:90:e4:7c:73:0c:74:1a:61:18:
5b:81:38:9b:6b:25:a8:c5:9d:65:f9:0a:ab:c9:b3:b8:fb:d7:
5e:2a:43:e0:ac:42:48:c7:ef:75:eb:a5:b6:5b:db:91:d0:02:
50:a3:db:d2:9c:b0:dc:da:5b:48:ef:47:bf:9d:2b:9a:40:9b:
6d:c6:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:31 2025 by rpki-client