Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QtdUkgsyGnn0VAjvPm9g4M1YGMo.roa
File: QtdUkgsyGnn0VAjvPm9g4M1YGMo.roa (raw, json)
Hash identifier: 51HC2eh93WY1s0eDISpw9YujeJSkBQwMBXlCcCukKFk=
Subject key identifier: 42:D7:54:92:0B:32:1A:79:F4:54:08:EF:3E:6F:60:E0:CD:58:18:CA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0198C91B47A265D29AFC5E3A13FA9FFBB60D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QtdUkgsyGnn0VAjvPm9g4M1YGMo.roa
Signing time: Wed 20 Aug 2025 20:11:04 +0000
ROA not before: Wed 20 Aug 2025 20:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47757
IP address blocks: 2a0c:b641:f0::/44 maxlen: 128
2a0c:b641:aa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:1b:47:a2:65:d2:9a:fc:5e:3a:13:fa:9f:fb:b6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 20 20:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d754920b321a79f45408ef3e6f60e0cd5818ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:d9:0a:34:98:d5:8b:17:23:10:e9:72:37:
4c:0a:0e:fd:31:5d:6c:e9:79:b3:5a:37:4d:c2:b5:
55:68:98:b9:c4:ec:7c:cc:11:94:99:f0:7d:83:25:
27:c6:48:8e:40:d4:3d:39:e0:68:d3:0d:1b:87:2c:
3f:cc:6a:b1:4b:5c:0a:e2:8c:77:f7:b8:d1:40:15:
c0:6d:30:f1:3b:74:01:f0:e4:a4:13:7e:c9:6a:b9:
b5:7d:7a:62:bb:f2:26:7f:b5:5f:b9:f2:11:c1:0d:
f4:7c:d4:50:bc:49:22:3a:6c:ea:b7:1b:76:04:88:
4f:ca:b8:8d:a9:5d:c9:82:64:6f:ba:02:75:c0:3f:
9c:16:5f:77:42:7d:af:65:d3:f3:4d:df:8c:a2:0c:
b8:2b:20:6d:49:8d:07:03:0a:f4:eb:cd:89:a1:d3:
dc:db:7f:3c:30:fa:43:76:72:d8:f0:22:35:0b:e9:
3c:a1:07:12:93:2d:38:05:8c:7b:7b:ad:eb:fd:b2:
4d:5c:84:2b:2e:a6:58:59:3a:7c:20:87:36:51:5a:
05:4c:a9:41:e2:f6:7e:b7:bd:28:99:5d:a8:b1:c6:
25:28:c4:25:33:ac:b9:61:80:02:54:49:1b:35:60:
3c:31:c8:1d:94:a0:92:1b:32:42:fc:0f:4b:ad:7a:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:54:92:0B:32:1A:79:F4:54:08:EF:3E:6F:60:E0:CD:58:18:CA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QtdUkgsyGnn0VAjvPm9g4M1YGMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:f0::/44
2a0c:b641:aa0::/44
Signature Algorithm: sha256WithRSAEncryption
56:78:48:8c:5f:4a:ba:73:31:b0:e0:e7:91:8a:cb:a0:4a:10:
b0:fb:2c:8f:0c:c8:01:b1:65:85:e7:3c:21:17:62:1a:1b:53:
21:ac:94:0f:9b:28:5c:85:1c:b9:7e:6d:72:03:d4:25:c3:a5:
8c:9e:ea:ad:01:e8:6a:66:0f:86:12:16:23:35:07:33:7c:fc:
ee:4a:52:5b:7d:31:47:63:d3:d7:05:23:5e:1a:d6:e6:56:43:
91:db:d4:7e:66:60:fc:3e:38:9c:da:e3:24:33:8e:47:aa:90:
04:dc:25:42:2b:07:3b:aa:49:2c:03:b1:28:f3:5d:8c:b3:53:
33:bc:65:72:5f:d6:6f:43:85:e4:c5:4f:76:02:71:a5:a8:23:
1b:81:f5:79:f5:c7:75:69:c7:49:c5:ed:15:82:12:cf:7d:a7:
ae:79:ec:1c:d2:c7:7e:14:e4:e5:75:35:8f:65:1a:af:24:94:
f3:c4:6d:39:9f:34:d2:44:7d:36:b7:6e:bc:48:d2:31:18:b7:
eb:7d:d2:18:2a:28:97:b5:9d:ad:06:17:5e:87:72:42:68:b9:
5a:2f:07:49:3e:a8:4e:7e:61:5e:ce:8d:03:d9:4d:38:1f:6c:
54:80:17:70:73:8b:dd:c2:23:be:fd:5a:dd:68:80:e5:99:c1:
70:36:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:33 2025 by rpki-client