Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/i7VszA84SZS6OuHdokjMypdaGJc.roa
File: i7VszA84SZS6OuHdokjMypdaGJc.roa (raw, json)
Hash identifier: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=
Subject key identifier: 8B:B5:6C:CC:0F:38:49:94:BA:3A:E1:DD:A2:48:CC:CA:97:5A:18:97
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0199DDFF93B909FBCC1AD10E190BC38E2C59
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/i7VszA84SZS6OuHdokjMypdaGJc.roa
Signing time: Mon 13 Oct 2025 14:35:38 +0000
ROA not before: Mon 13 Oct 2025 14:35:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200081
IP address blocks: 2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:ff:93:b9:09:fb:cc:1a:d1:0e:19:0b:c3:8e:2c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 13 14:35:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bb56ccc0f384994ba3ae1dda248ccca975a1897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:92:31:ec:93:a6:71:8a:0b:b4:29:34:8d:
20:d6:fd:ac:e0:92:1a:98:57:6f:26:9a:7e:3a:03:
ce:62:0a:c3:13:1e:cc:47:40:44:5f:42:bf:f1:bb:
1c:60:ba:9f:59:3f:35:1c:43:b2:c3:09:f9:eb:3c:
1b:57:c7:4c:c3:40:c6:2a:8e:d5:71:03:e1:0a:5a:
c4:c1:3c:71:8b:b0:c8:38:d7:ef:48:e9:b7:bd:45:
5e:4f:e1:70:e1:ce:b3:05:47:f1:29:0c:93:03:d3:
c9:e5:46:fd:cb:c6:15:84:16:97:bc:4f:2d:12:b2:
48:90:a2:76:dd:66:c2:0f:93:ce:b9:d1:95:90:fb:
ec:8d:9e:c5:4c:ad:40:e6:27:52:e8:47:79:5c:01:
7c:3b:70:ff:b8:a8:7b:7a:f7:7a:c6:4e:4a:f7:dc:
53:e1:c6:d8:05:15:62:1e:b4:22:de:bb:89:89:30:
0f:b2:af:ba:0d:b5:be:25:88:8a:3f:8f:c8:33:13:
2b:2a:7d:61:81:91:62:d0:32:ac:70:03:75:42:ca:
77:d9:0c:c7:1b:59:0a:ba:c9:34:39:6d:a1:1b:1f:
95:f6:bf:95:ad:fa:31:0e:fe:fb:9b:15:71:e9:5f:
ab:a3:31:a9:e5:e0:bf:3c:ea:b1:36:cb:8e:99:84:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:6C:CC:0F:38:49:94:BA:3A:E1:DD:A2:48:CC:CA:97:5A:18:97
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/i7VszA84SZS6OuHdokjMypdaGJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
9d:aa:5a:b9:5c:37:2a:78:38:dc:89:27:84:64:7d:8e:8f:04:
6f:47:e4:93:b3:a4:9b:1d:ef:31:fb:e2:38:2b:a7:ed:79:ea:
d3:29:f0:06:26:55:09:f9:2d:cb:b3:aa:23:84:06:55:de:eb:
45:16:f8:6d:58:e4:e7:61:77:83:c2:f6:d1:67:bc:eb:02:b2:
1b:76:de:50:1d:53:69:db:15:8d:a2:b9:90:14:8a:3a:ab:02:
fb:58:58:50:2d:0f:01:78:f4:4b:82:bf:d7:6c:72:fc:30:02:
90:d3:63:63:8f:c9:68:9f:70:95:99:cc:b8:5a:78:c7:2a:63:
d1:4a:13:d3:25:96:65:70:7e:a8:c9:3e:d8:21:b9:17:95:c4:
f6:a0:7e:a0:96:6a:6b:1b:e5:06:9f:30:97:30:b6:89:5a:04:
03:35:bb:d8:93:b6:67:52:91:d0:db:4b:4b:6a:32:ce:3f:be:
de:7b:7a:b2:1a:33:b8:0d:a4:2f:cd:8f:09:c0:69:c8:97:1f:
2f:d9:11:f5:65:6f:1f:08:6f:e5:97:23:f2:f6:3f:b7:92:01:
dd:95:3c:7f:be:c6:aa:e5:3c:4b:13:22:94:0c:82:81:b5:06:
ac:1b:3c:2e:93:cb:06:fe:57:94:67:b4:f6:0e:2c:59:3a:1a:
a2:1f:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:20 2025 by rpki-client