Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/S0JWHuECsZ6iuktpxbYUQRx-C6w.roa
File: S0JWHuECsZ6iuktpxbYUQRx-C6w.roa (raw, json)
Hash identifier: 98345m9+1a80pFN7NYYUPugpeCnwrYKSTv2S9SSzXYY=
Subject key identifier: 4B:42:56:1E:E1:02:B1:9E:A2:BA:4B:69:C5:B6:14:41:1C:7E:0B:AC
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198C3FFE5BAD5152D69A15DC91B2F10625A
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/S0JWHuECsZ6iuktpxbYUQRx-C6w.roa
Signing time: Tue 19 Aug 2025 20:23:04 +0000
ROA not before: Tue 19 Aug 2025 20:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205828
IP address blocks: 2a0e:b1c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:ff:e5:ba:d5:15:2d:69:a1:5d:c9:1b:2f:10:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 19 20:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b42561ee102b19ea2ba4b69c5b614411c7e0bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:fe:01:b1:d1:ec:cb:f7:b0:8b:7f:04:1b:
11:fe:29:b1:de:12:f5:df:e6:d2:53:d8:2d:30:01:
08:4d:0d:f5:85:f3:a4:88:6f:16:79:21:56:3b:af:
c8:f2:4b:83:0f:00:d9:97:a5:31:84:45:00:49:e4:
c5:fd:96:4f:cd:fa:ce:f3:d1:7b:21:f1:7e:8d:83:
43:1b:00:c7:cd:31:6c:d1:36:28:ba:28:7f:a2:52:
ed:55:fd:1a:40:86:0d:53:24:80:76:6c:26:f8:6e:
2b:15:3a:e9:55:12:22:76:bf:10:b3:75:aa:82:2b:
95:d7:1f:a2:ab:61:2a:23:4c:78:44:52:f0:b2:58:
e2:a7:9f:f5:f9:e3:0d:2f:41:38:bf:f7:3b:ea:59:
d6:e7:e9:52:10:04:d9:7c:9f:c9:a8:1f:01:fd:76:
5d:d3:1a:c6:2d:d9:d8:f3:a8:47:c4:2b:a1:5c:62:
2e:76:13:aa:e0:9c:3c:69:1c:3e:4e:3e:87:55:29:
2f:36:df:33:48:fa:3c:c1:1a:af:c7:30:3f:f8:a5:
4e:35:98:12:e2:5f:9b:4c:65:68:1d:73:a4:fa:9a:
55:84:fe:05:12:84:24:8b:d8:89:f2:d1:57:85:77:
9b:45:14:9f:bf:59:e7:f1:ba:43:73:fb:82:dc:a1:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:56:1E:E1:02:B1:9E:A2:BA:4B:69:C5:B6:14:41:1C:7E:0B:AC
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/S0JWHuECsZ6iuktpxbYUQRx-C6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b1c2::/32
Signature Algorithm: sha256WithRSAEncryption
2b:14:b5:a6:0c:38:25:9e:1e:6f:7f:e5:fc:b0:90:f2:85:a2:
68:65:69:9e:c9:9b:11:b1:b0:24:2d:8c:9b:22:9f:3f:c7:42:
7a:57:1c:96:2d:89:8a:af:0d:a2:87:08:29:87:b2:5e:2f:b8:
cf:eb:c2:f0:06:3e:72:a2:78:db:76:dc:6b:0f:c5:43:8b:7e:
5f:ba:1d:ae:c4:e0:b8:b0:d9:20:13:83:b7:d3:1b:29:ce:93:
2c:bf:da:b6:2b:e6:79:ff:70:91:f0:68:2e:e6:48:bd:8c:c6:
cc:18:44:6e:4c:92:a5:3b:3f:54:ff:61:20:eb:d4:69:41:75:
4b:04:87:83:0a:fe:3e:a5:84:5a:2f:2d:da:25:03:ca:6e:58:
63:63:98:50:3d:31:73:9e:21:e5:dc:45:69:96:3a:0e:4f:87:
2d:4f:9a:7b:34:08:d0:e3:c6:15:79:b4:be:ca:77:0f:b7:66:
41:8c:4a:29:0e:e4:f1:05:4e:6b:bc:34:65:62:e4:5c:d0:59:
a4:4e:1a:dd:cd:29:74:ee:ff:07:37:9c:38:78:e4:90:70:69:
26:6f:35:fa:87:57:b8:26:9e:e9:7a:6f:90:13:bf:46:bc:93:
54:3b:0a:c3:63:fb:83:18:4f:25:25:da:38:b7:4e:a7:0e:ea:
a4:c5:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:12:30 2025 by rpki-client