Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AVOZwt7rD6b7Uri_ABiPDQpVEfI.roa
File: AVOZwt7rD6b7Uri_ABiPDQpVEfI.roa (raw, json)
Hash identifier: b9VwteSH9jzWkD/sUFoJ908X1ZJ27VVPFPrv/2J6P6Y=
Subject key identifier: 01:53:99:C2:DE:EB:0F:A6:FB:52:B8:BF:00:18:8F:0D:0A:55:11:F2
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199622DF8433DBD56DA809B6063935FE517
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AVOZwt7rD6b7Uri_ABiPDQpVEfI.roa
Signing time: Fri 19 Sep 2025 13:33:23 +0000
ROA not before: Fri 19 Sep 2025 13:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207862
IP address blocks: 170.168.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:2d:f8:43:3d:bd:56:da:80:9b:60:63:93:5f:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 19 13:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=015399c2deeb0fa6fb52b8bf00188f0d0a5511f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:89:68:ea:98:97:a6:3a:c6:b3:ee:d6:d7:
67:86:21:38:c5:ae:37:43:77:bc:a2:fb:42:f7:fa:
7c:73:72:eb:1e:c1:75:65:89:49:fe:c7:78:14:34:
e9:60:1e:13:bb:08:47:a7:0d:ac:3f:8a:f9:19:84:
01:c9:76:62:5f:ba:85:54:b7:25:62:96:57:75:48:
6b:3a:be:8e:15:8c:fc:f7:a2:9e:9c:13:b4:2a:92:
d4:b2:63:d4:0a:0e:ca:6e:e8:49:6c:ab:3e:63:47:
8b:c2:70:da:07:13:25:b2:4e:19:c7:2a:f1:51:4f:
71:60:c8:cd:4e:14:9d:eb:e7:a3:3d:2e:7c:d9:7a:
24:7e:a1:cc:bc:25:d1:c9:b1:25:74:53:c1:a2:f3:
4e:5a:0c:50:4c:89:66:3f:95:cb:f0:18:f8:33:f0:
70:3f:55:0c:25:fb:cd:0f:b4:67:59:47:e6:82:86:
08:62:18:73:c4:87:76:eb:72:ec:1f:e2:90:b8:71:
73:53:27:da:ff:1e:0b:02:5c:f2:41:74:e1:a0:cb:
71:f0:6f:46:9d:ae:9c:29:54:31:5f:95:85:a0:9f:
09:3a:94:dc:c5:85:b5:51:63:b3:f7:52:df:9f:f5:
dc:61:7a:75:03:c8:5d:6b:57:30:22:7e:24:8b:30:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:99:C2:DE:EB:0F:A6:FB:52:B8:BF:00:18:8F:0D:0A:55:11:F2
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AVOZwt7rD6b7Uri_ABiPDQpVEfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:41:e6:0f:b7:4a:17:ef:45:ac:e0:ed:89:2f:14:30:49:1a:
2e:7f:45:a0:de:c0:d7:00:60:e8:11:8a:a7:5c:c2:9b:86:12:
56:5f:68:6b:46:13:d4:c6:67:53:77:8e:54:19:e7:96:28:03:
5b:5b:d0:b8:63:ea:93:1b:d1:ac:61:74:a5:f9:dc:97:62:2f:
49:c5:50:08:3a:59:3b:3e:a7:2e:47:f7:d6:1f:b1:bb:99:58:
f8:2c:bf:51:ca:7d:74:08:42:25:0c:67:c7:49:3e:73:8b:86:
9a:42:26:93:ac:ec:29:4c:77:25:0d:6a:46:34:08:39:86:c3:
82:9f:15:05:7f:10:4d:ee:c8:f1:c5:90:ab:5c:97:95:9a:50:
10:68:98:ed:75:4d:d0:97:7e:fc:11:6a:0c:db:2d:99:08:97:
0b:74:73:a6:a6:27:fa:62:12:17:9e:e8:2f:c7:79:4d:22:2b:
d7:ec:6f:8e:63:c4:2a:a1:7b:1b:e6:60:f0:0b:46:4d:87:7b:
4b:95:2b:5e:3c:34:32:7a:79:4e:6d:d7:92:6b:47:37:09:b7:
31:8f:01:86:8d:17:8d:6a:0b:b7:86:2b:9f:73:26:e4:96:a8:
c3:03:f1:e0:18:14:0e:af:ec:d7:19:67:76:11:8a:65:c8:ff:
a1:3c:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:17:08 2025 by rpki-client