Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9liVjtEMtIrsR62kZDaM0kPGr1Y.roa
File: 9liVjtEMtIrsR62kZDaM0kPGr1Y.roa (raw, json)
Hash identifier: NpGZmh+iD4/mONqK53GDxQAq8P3AfIUxbgPUthLhiP8=
Subject key identifier: F6:58:95:8E:D1:0C:B4:8A:EC:47:AD:A4:64:36:8C:D2:43:C6:AF:56
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199A0CE5D12B9EBF8550AD2CA771A8E14D7
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9liVjtEMtIrsR62kZDaM0kPGr1Y.roa
Signing time: Wed 01 Oct 2025 17:25:02 +0000
ROA not before: Wed 01 Oct 2025 17:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50556
IP address blocks: 170.168.14.0/24 maxlen: 24
170.168.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a0:ce:5d:12:b9:eb:f8:55:0a:d2:ca:77:1a:8e:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 1 17:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f658958ed10cb48aec47ada464368cd243c6af56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d2:3b:79:88:f4:ca:45:c3:df:d2:bf:00:8a:
c3:51:d9:b5:d9:0b:e8:4b:46:95:31:7c:58:19:e8:
fb:8e:57:26:91:2a:a4:5c:76:6a:cf:7e:cd:49:e2:
74:e2:75:c4:1c:21:57:57:69:2e:cb:b6:15:87:a0:
78:ad:e5:82:7e:79:16:b4:cf:2a:bb:07:8b:0e:30:
85:b3:a9:5b:7d:fd:4e:df:29:04:e8:6b:f9:54:dc:
5e:43:0c:d1:ce:05:7a:10:38:bb:ce:20:ee:3a:cb:
a6:74:ae:83:68:fc:52:2a:44:6d:4b:e3:70:8e:1b:
b4:09:a5:ac:c1:16:d2:57:de:a2:8a:6c:da:69:5b:
d1:62:17:e8:60:3f:f3:5b:36:06:6e:48:62:f4:1c:
39:0c:cf:99:d0:0a:a6:68:62:ee:61:e4:74:7d:36:
cd:11:48:4a:19:d6:d9:7f:a3:c2:42:f6:17:85:46:
d6:fc:33:69:5b:00:2a:4f:62:68:76:a1:5f:2d:d7:
05:fa:49:aa:07:4d:36:ed:ef:22:7a:aa:5d:d9:c2:
e4:34:b1:ea:79:6d:73:46:1f:44:f7:38:ab:d6:62:
be:44:07:08:4c:1f:a8:42:61:d9:fb:87:f5:22:c5:
c0:ba:c1:f6:7e:d1:83:66:51:10:5c:d3:e7:b1:f1:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:58:95:8E:D1:0C:B4:8A:EC:47:AD:A4:64:36:8C:D2:43:C6:AF:56
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9liVjtEMtIrsR62kZDaM0kPGr1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.14.0/24
170.168.46.0/24
Signature Algorithm: sha256WithRSAEncryption
34:12:87:4c:18:79:4f:f7:d7:67:de:91:55:20:3c:04:33:b5:
12:9c:68:fb:93:f1:bc:b2:53:e8:d6:93:80:7c:88:6a:f2:a5:
2d:5e:0c:2d:9b:d4:36:51:94:2e:fc:3c:43:46:d6:93:8b:70:
6d:1d:c9:1f:e8:1a:09:a1:33:bf:5e:47:69:7c:f4:c9:25:49:
9b:6d:c7:04:dd:1e:4e:f4:11:79:44:9b:63:af:ab:17:21:e8:
47:a4:b0:06:e7:80:10:78:cc:91:13:79:8d:54:09:53:43:14:
4e:bc:3a:68:3f:c7:69:74:a6:af:a6:22:e2:73:48:18:2d:59:
17:ef:72:9c:22:cb:bc:da:af:3b:70:d9:50:68:fb:c2:0c:50:
9e:85:a1:38:07:01:4c:a6:2f:e4:7a:36:87:17:69:3b:2e:dd:
be:5e:9a:5e:01:10:a2:ce:d2:44:b5:d2:f1:2e:2a:04:2d:b3:
a9:53:6c:d7:8c:69:f8:5c:5e:43:bd:dc:45:5a:8d:b4:5c:bb:
f4:42:bd:80:f9:f0:4c:13:96:2c:e7:7b:5a:57:ef:9a:b2:84:
04:e2:b8:f9:00:36:aa:f4:08:9e:4b:16:ef:12:50:3d:2d:74:
06:f2:d1:f2:32:e7:8b:ae:9d:b4:79:85:6c:e5:7b:cd:a9:c8:
9c:ea:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:14 2025 by rpki-client