Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/7Z41l5GCvkmQM0-AZptE0q-8N2c.roa
File: 7Z41l5GCvkmQM0-AZptE0q-8N2c.roa (raw, json)
Hash identifier: W0spFBvn9EFz2Rg+2ALTObth8eVz6Jz8Eki0R5kperk=
Subject key identifier: ED:9E:35:97:91:82:BE:49:90:33:4F:80:66:9B:44:D2:AF:BC:37:67
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01994D1351616EF75DEBB87D855494849DE6
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/7Z41l5GCvkmQM0-AZptE0q-8N2c.roa
Signing time: Mon 15 Sep 2025 11:12:15 +0000
ROA not before: Mon 15 Sep 2025 11:12:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a05:8e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:13:51:61:6e:f7:5d:eb:b8:7d:85:54:94:84:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 15 11:12:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed9e35979182be4990334f80669b44d2afbc3767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:5b:94:f9:cb:a5:50:b8:ae:db:b1:fa:f5:
0b:26:3f:d2:02:f5:01:d6:dd:c6:0f:0f:88:ab:7a:
b4:19:fd:19:b1:aa:68:1d:b9:f8:93:34:d4:c4:4f:
f3:9f:b8:0f:58:ad:9f:a9:4a:a1:9d:9d:74:ea:4f:
69:b3:98:a1:d6:d3:15:5a:a4:cb:78:45:0d:7d:d9:
45:e2:aa:46:2e:cc:d8:e5:4c:50:bb:3d:ff:fd:16:
15:4e:5d:c3:c7:3f:0b:a5:92:27:5b:f3:46:97:1c:
5c:15:61:04:db:67:bb:42:fd:15:db:1f:c5:51:95:
c5:ca:1b:f8:22:4f:8b:4c:01:0b:b7:91:97:0b:dd:
56:1b:5e:bd:a1:68:7c:49:52:16:e7:f2:de:5c:85:
71:09:96:e6:b3:1a:e8:af:9e:fe:32:72:07:f3:80:
46:b2:9b:0c:3d:a7:2d:1d:49:dc:4f:cd:5e:70:44:
ca:78:15:9d:79:c4:41:ee:0a:c5:43:69:55:58:ef:
45:fd:e8:39:e6:eb:9c:d0:e9:ad:7f:74:58:26:2e:
3c:d3:6e:73:2b:53:89:0b:94:f6:75:cf:d4:04:13:
7f:7b:e4:8a:c3:f9:fe:88:29:2f:df:08:33:42:2f:
53:ad:68:3d:f4:33:b5:99:35:97:c8:57:e6:a1:93:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:35:97:91:82:BE:49:90:33:4F:80:66:9B:44:D2:AF:BC:37:67
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/7Z41l5GCvkmQM0-AZptE0q-8N2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
21:b5:5b:21:25:26:bb:96:66:ef:01:7a:36:f9:e4:0b:dc:05:
93:c4:dc:9f:20:dd:d0:c2:38:e9:a1:ba:82:cd:df:6e:38:33:
92:fd:d8:2c:92:cf:91:17:00:7e:82:f9:ad:5b:9e:eb:8b:25:
c6:db:77:62:6a:f8:39:95:d3:bb:54:2f:b0:6b:8d:c8:c8:c7:
7a:ac:78:ef:f7:8e:46:4f:e4:f5:84:a6:3a:af:f1:47:53:4d:
40:18:ce:46:9c:dc:0e:e9:a0:68:cd:eb:f2:3b:c9:e2:95:b9:
25:80:e3:3b:d8:7e:c9:64:2e:7c:b3:4c:0b:20:05:0f:dc:e7:
d7:08:31:ef:f3:77:58:57:c8:70:59:93:97:9c:34:58:40:09:
75:af:2e:29:ad:6d:af:37:32:57:48:2a:cc:37:bf:c7:e3:dd:
f9:51:6f:6c:e6:55:45:5a:ac:e3:22:f1:e0:a1:5c:3d:4f:45:
d1:de:9b:f1:ec:1e:e1:f1:9f:92:3a:03:79:fc:be:2b:91:be:
bf:b6:59:b7:fe:be:3e:1f:31:0a:d7:8b:4f:b6:c8:93:3f:96:
99:17:92:9c:63:12:ec:19:19:c8:1e:ee:63:95:67:2a:3b:1a:
c5:ac:60:86:dc:a7:4e:00:0c:66:58:d7:58:2c:10:ec:6f:22:
08:aa:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:58 2025 by rpki-client