Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/lHoepiCpX7g78Ng_Suk_7keCehI.roa
File: lHoepiCpX7g78Ng_Suk_7keCehI.roa (raw, json)
Hash identifier: JX1GmHVZEyU6jv7xs+Gm8SluiSfi45q37cjpO1lCp5M=
Subject key identifier: 94:7A:1E:A6:20:A9:5F:B8:3B:F0:D8:3F:4A:E9:3F:EE:47:82:7A:12
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0199ABD2285C85BFAF69AF3DE022104010A3
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/lHoepiCpX7g78Ng_Suk_7keCehI.roa
Signing time: Fri 03 Oct 2025 20:45:00 +0000
ROA not before: Fri 03 Oct 2025 20:45:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214305
IP address blocks: 2a14:db80:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ab:d2:28:5c:85:bf:af:69:af:3d:e0:22:10:40:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 3 20:45:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=947a1ea620a95fb83bf0d83f4ae93fee47827a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7c:3d:6e:87:f4:5c:9e:8f:4e:80:54:7f:48:
f9:3d:b6:c5:03:5a:24:ae:dc:ce:dd:43:15:f6:0a:
c5:59:3c:33:18:f6:15:06:b2:a0:9e:69:a7:b1:45:
8a:78:4c:05:cf:b3:5e:d6:77:1d:99:cc:c4:36:40:
74:86:ea:82:c9:25:1f:47:57:27:0e:97:52:41:2e:
d1:ef:1c:70:39:2c:ad:5b:cb:c3:1b:9f:48:8d:ff:
f9:e0:66:c6:13:2b:ee:f2:98:ae:e7:90:a1:cd:60:
9b:44:8d:6f:bd:b4:f2:05:3d:2e:c4:7f:fc:a9:b4:
69:4e:03:e2:b2:7b:a1:b9:d3:69:ee:9b:58:bc:b6:
8a:e6:4e:03:76:f3:45:a4:af:95:db:12:74:e4:65:
15:a6:20:f8:7b:6c:ef:5b:e8:d7:00:29:c0:42:1f:
0b:f9:3e:2c:27:3b:b2:90:41:cb:54:81:7a:e2:b8:
a0:ed:6f:70:d2:63:3f:c4:25:30:08:13:87:2f:0e:
69:8c:e2:78:85:5f:31:24:ba:ca:06:7a:dd:d1:27:
e3:e2:39:a4:62:5d:5a:4e:59:9a:4b:88:2d:57:33:
02:41:f6:76:43:4e:b5:54:5c:df:38:8f:4c:ef:86:
7a:8e:48:ed:b8:ac:08:ba:9b:f7:d7:0f:66:a7:2d:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:1E:A6:20:A9:5F:B8:3B:F0:D8:3F:4A:E9:3F:EE:47:82:7A:12
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/lHoepiCpX7g78Ng_Suk_7keCehI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:db80:6::/48
Signature Algorithm: sha256WithRSAEncryption
90:b0:8e:4f:06:02:9f:c7:37:9d:53:6e:6d:41:f7:b4:89:4e:
ff:15:d7:44:cc:9e:3a:3a:6e:27:62:f2:1f:99:d8:20:28:cd:
39:da:d5:4b:df:b2:b6:32:bb:0e:37:d3:f0:0b:a4:c1:5c:ff:
44:9b:3b:2b:9b:c2:63:b6:a4:fd:72:ab:e7:2e:55:a3:2d:03:
2e:a3:9a:44:52:ad:e9:05:1c:23:08:98:25:49:c7:17:85:ee:
96:ad:52:b5:8c:d4:44:ce:c7:51:a2:8f:f7:a7:ca:94:54:d7:
61:c0:31:9e:c3:7d:9d:ae:c9:33:ff:89:4b:0f:80:08:8e:3a:
84:d2:cb:98:d8:27:a6:7a:bd:00:75:74:48:0d:85:c6:6d:87:
67:a6:95:dd:7e:c4:2a:f8:85:0d:43:f2:0f:16:f2:17:0c:e2:
93:74:62:89:3e:82:4f:f4:33:98:f1:22:c7:e4:19:a2:b9:70:
56:ee:df:39:90:86:e3:1d:53:c0:3e:2e:ed:ee:61:79:0b:84:
d9:6c:b8:f1:e5:be:44:f7:69:62:c6:46:9f:b4:bf:62:43:d6:
1a:8b:0e:11:45:e0:69:f3:42:be:9e:96:fb:00:86:8d:05:71:
41:42:6f:98:7f:49:2f:fb:86:20:66:82:fc:7d:0e:9e:2e:50:
47:8d:92:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZmr0ihchb+vaa894CIQQBCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMTIxMjBjMzUxYzE0ZWVjMjIxMDlmNjAzMjQ5ZmNkYWMx
ZDMzMjEwHhcNMjUxMDAzMjA0NTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDdhMWVhNjIwYTk1ZmI4M2JmMGQ4M2Y0YWU5M2ZlZTQ3ODI3YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nw9bof0XJ6PToBUf0j5PbbFA1ok
rtzO3UMV9grFWTwzGPYVBrKgnmmnsUWKeEwFz7Ne1ncdmczENkB0huqCySUfR1cn
DpdSQS7R7xxwOSytW8vDG59Ijf/54GbGEyvu8piu55ChzWCbRI1vvbTyBT0uxH/8
qbRpTgPisnuhudNp7ptYvLaK5k4DdvNFpK+V2xJ05GUVpiD4e2zvW+jXACnAQh8L
+T4sJzuykEHLVIF64rig7W9w0mM/xCUwCBOHLw5pjOJ4hV8xJLrKBnrd0Sfj4jmk
Yl1aTlmaS4gtVzMCQfZ2Q061VFzfOI9M74Z6jkjtuKwIupv31w9mpy18cwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJR6HqYgqV+4O/DYP0rpP+5HgnoSMB8GA1UdIwQY
MBaAFBsSEgw1HBTuwiEJ9gMkn82sHTMhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUt
NDNkZjQ3ZDVhMWU3LzEvbEhvZXBpQ3BYN2c3OE5nX1N1a183a2VDZWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZGFmN2YtMzAxZC00MjNlLTk0NmUtNDNkZjQ3ZDVhMWU3
LzEvR3hJU0REVWNGTzdDSVFuMkF5U2Z6YXdkTXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTbgAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQCQsI5PBgKfxzedU25tQfe0iU7/FddEzJ46Om4n
YvIfmdggKM052tVL37K2MrsON9PwC6TBXP9Emzsrm8JjtqT9cqvnLlWjLQMuo5pE
Uq3pBRwjCJglSccXhe6WrVK1jNREzsdRoo/3p8qUVNdhwDGew32drskz/4lLD4AI
jjqE0suY2Cemer0AdXRIDYXGbYdnppXdfsQq+IUNQ/IPFvIXDOKTdGKJPoJP9DOY
8SLH5BmiuXBW7t85kIbjHVPAPi7t7mF5C4TZbLjx5b5E92lixkaftL9iQ9Yaiw4R
ReBp80K+npb7AIaNBXFBQm+Yf0kv+4YgZoL8fQ6eLlBHjZJ6
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:38 2025 by rpki-client