Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nt6unjazO6WizRmQu8kkO6X4HJo.roa
File: Nt6unjazO6WizRmQu8kkO6X4HJo.roa (raw, json)
Hash identifier: JtUUS5ffmNVcxeYCnlQ/kvBeGntwYTsBdYnIEp7SgV0=
Subject key identifier: 36:DE:AE:9E:36:B3:3B:A5:A2:CD:19:90:BB:C9:24:3B:A5:F8:1C:9A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0198CD4E19D2EB5A3225C793176461DB2C52
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nt6unjazO6WizRmQu8kkO6X4HJo.roa
Signing time: Thu 21 Aug 2025 15:45:04 +0000
ROA not before: Thu 21 Aug 2025 15:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39831
IP address blocks: 2a05:4380::/32 maxlen: 32
2a0a:e9c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:4e:19:d2:eb:5a:32:25:c7:93:17:64:61:db:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 21 15:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36deae9e36b33ba5a2cd1990bbc9243ba5f81c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:fa:b0:fa:4a:f0:98:20:36:9d:9f:d4:a5:
77:f7:8a:e9:dc:07:13:25:54:ca:51:d6:e6:f6:51:
9a:13:39:3a:2a:bb:f2:da:6b:5a:29:61:db:4c:7b:
9f:3b:2f:09:7a:d6:f8:a6:1e:30:6a:fd:05:6d:e1:
80:1c:04:01:bf:7e:09:5e:f6:c3:7d:f6:5b:9e:60:
57:12:12:10:d1:c6:8d:89:60:f4:e5:90:af:a7:2e:
46:26:6c:e7:d8:6b:79:1b:41:eb:97:fb:35:1f:06:
ff:bf:68:f2:09:56:f6:be:6c:8c:20:4a:50:b9:dc:
af:df:a6:90:01:c0:15:8a:99:e7:4d:f7:5c:e5:73:
37:b4:11:e5:db:2c:83:13:f5:c1:f8:b7:cf:cb:0a:
1b:d2:45:07:28:aa:1e:20:ab:7e:e1:38:ab:b3:56:
74:2b:d7:92:14:6c:ee:1a:d2:23:b9:b1:0d:98:82:
01:32:3a:76:5c:20:37:54:fd:58:71:ba:4e:c3:b1:
ee:39:12:f0:b6:15:44:b4:9c:94:8c:70:2a:39:e4:
08:6f:3a:0a:d2:30:c3:2c:cd:8d:68:fb:3d:11:eb:
04:7f:8f:8e:28:2c:08:c8:51:35:26:7f:73:1f:05:
20:db:6d:b7:ec:13:39:db:90:30:d3:c2:f8:76:4d:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:AE:9E:36:B3:3B:A5:A2:CD:19:90:BB:C9:24:3B:A5:F8:1C:9A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Nt6unjazO6WizRmQu8kkO6X4HJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4380::/32
2a0a:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c0:cb:19:41:5d:35:06:a2:bb:bc:8c:71:a3:e4:61:1c:32:
19:03:a7:40:af:e9:df:5c:b4:2f:35:e6:5f:a4:57:75:df:92:
4d:37:9d:60:f1:c2:d5:4b:25:ca:b2:e9:95:72:3c:4e:25:25:
5e:43:3e:c4:99:c7:53:4e:7c:a8:8e:f3:25:db:99:6d:fc:8d:
e1:f9:b9:9a:cf:b1:ea:e6:2e:de:c4:4d:2b:f0:05:60:7d:93:
cb:e7:a1:76:07:98:66:05:4f:8f:66:2f:03:b2:4b:58:99:d6:
fe:e1:5c:4e:0c:dd:68:ec:e0:3a:9f:fe:51:53:2d:a3:00:46:
a8:f6:c6:e9:ab:59:e9:16:2c:c6:6f:70:0e:9b:43:59:2c:66:
3e:2c:e4:f6:11:d4:ca:10:ff:63:90:de:b1:ff:c4:15:3e:6f:
fe:46:2b:8d:62:e4:1f:c9:bd:cc:b9:a4:af:4e:99:b1:08:ca:
3d:9a:1f:a6:c0:ef:57:0d:de:cd:36:f4:e9:e9:e1:84:34:f1:
2f:6a:00:83:a2:87:8a:06:f2:aa:0e:fe:b0:30:68:b0:16:74:
b2:52:76:c9:71:13:b8:7a:93:82:4a:12:fc:e6:0b:9d:0f:67:
7e:1b:72:3a:b5:6a:3f:d3:61:19:d8:76:85:3e:ae:42:53:51:
ec:8a:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:02:44 2025 by rpki-client