Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/V8FTP5FBGqjieT-NCYC2RXBpcbY.roa
File: V8FTP5FBGqjieT-NCYC2RXBpcbY.roa (raw, json)
Hash identifier: 4ISGD+gLQjJ5t+C8HDpmFoPJEPCLATavnTd/NqOl7WU=
Subject key identifier: 57:C1:53:3F:91:41:1A:A8:E2:79:3F:8D:09:80:B6:45:70:69:71:B6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0198CD824A4817FD0C34EF518C57A76A05CC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/V8FTP5FBGqjieT-NCYC2RXBpcbY.roa
Signing time: Thu 21 Aug 2025 16:42:04 +0000
ROA not before: Thu 21 Aug 2025 16:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205211
IP address blocks: 2a0c:b641:4c0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:82:4a:48:17:fd:0c:34:ef:51:8c:57:a7:6a:05:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Aug 21 16:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c1533f91411aa8e2793f8d0980b645706971b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:c6:f4:f7:65:72:08:6b:39:d6:2f:db:77:
71:53:8a:06:b6:6e:a2:a3:a4:ec:3d:e8:e2:61:00:
fc:74:d0:cb:30:f5:df:3a:41:34:e5:84:fb:44:b0:
a4:99:1b:0a:42:8a:91:73:ae:b6:45:e1:db:44:b8:
b8:70:80:78:fd:30:a6:b9:6d:c5:c6:4f:50:d8:5d:
37:45:ee:dc:fa:85:58:db:11:5e:bc:79:50:08:0c:
f8:a9:d0:0f:8e:89:fb:04:79:8b:05:4c:36:1a:ce:
9a:94:c9:ee:97:8c:eb:58:09:c3:30:a7:9a:77:c0:
dd:76:25:d5:9a:52:44:e5:ad:49:5e:75:a4:13:97:
95:15:2f:78:7a:f7:7b:8f:7d:47:f7:89:ac:d0:ac:
a7:39:44:50:4f:fe:e7:39:63:8c:3b:ce:bb:84:d4:
82:2c:6c:57:96:13:23:bc:ed:31:a3:e7:65:90:a5:
82:8f:9b:e5:5f:50:b5:5a:69:17:f4:69:36:5e:49:
56:d0:06:74:f5:43:9c:d3:e7:0d:ea:96:b8:c2:05:
d9:5f:f8:0c:8a:67:a9:e2:51:b3:05:29:54:67:d0:
5f:2b:57:7e:b8:60:23:38:b6:0b:d5:76:e4:d8:18:
07:c0:97:a0:65:9f:97:ef:2b:3b:5c:07:14:bb:92:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:53:3F:91:41:1A:A8:E2:79:3F:8D:09:80:B6:45:70:69:71:B6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/V8FTP5FBGqjieT-NCYC2RXBpcbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4c0::/44
Signature Algorithm: sha256WithRSAEncryption
48:dd:4e:b7:91:c4:54:da:67:1a:f9:bd:2a:ad:f1:4a:0c:7f:
a6:ac:d2:2b:c1:a0:2f:fa:31:a1:cf:64:37:0a:1d:4c:d9:cf:
ee:c0:57:b1:4d:d0:95:7c:43:78:80:5a:db:bd:3f:bf:7e:5c:
6d:c0:29:9c:2e:0e:e5:f0:05:23:7c:a6:ea:63:8a:f7:cb:0e:
b7:5d:a9:f6:27:17:f6:f6:e1:49:47:d4:14:6b:d8:38:c6:03:
31:86:40:27:c0:90:3a:5f:14:f8:ea:33:e2:3f:70:53:bf:71:
f2:db:b1:91:2d:eb:31:6b:fc:2f:59:09:c7:43:11:ea:ae:ef:
13:8b:2a:05:ff:d9:4b:a5:ee:71:0e:0f:e6:59:e4:0f:cc:d3:
30:92:7b:bf:b8:12:4e:7b:85:7d:f6:43:4e:46:b0:1a:e0:be:
7a:6f:f7:d7:13:a6:28:7e:aa:c8:3a:03:0f:fc:5f:a3:3b:db:
03:fb:e1:29:e1:dd:11:e4:37:e4:5e:b4:3a:58:54:d6:ec:e8:
a0:c1:e6:fb:e7:7c:8c:8e:35:25:68:5f:be:21:fd:ab:00:58:
51:cb:9e:58:da:18:d0:94:01:03:57:3f:29:9f:7b:b9:34:4b:
f2:54:a9:96:3a:e2:d8:17:8d:44:8d:4c:76:a5:de:5b:96:8c:
e0:97:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:33 2025 by rpki-client