Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/HD6zC7xfGA0SAuF4e7yz2Af08gs.roa
File: HD6zC7xfGA0SAuF4e7yz2Af08gs.roa (raw, json)
Hash identifier: VEGKVVclN7mqg9gsZ7F7LgAgXxZFarPfa+qJz1ng4Pg=
Subject key identifier: 1C:3E:B3:0B:BC:5F:18:0D:12:02:E1:78:7B:BC:B3:D8:07:F4:F2:0B
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 0198BCA005EF2A1ECCA722281186C4FAD1D4
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/HD6zC7xfGA0SAuF4e7yz2Af08gs.roa
Signing time: Mon 18 Aug 2025 10:01:00 +0000
ROA not before: Mon 18 Aug 2025 10:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64404
IP address blocks: 2001:678:814::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:a0:05:ef:2a:1e:cc:a7:22:28:11:86:c4:fa:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Aug 18 10:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3eb30bbc5f180d1202e1787bbcb3d807f4f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:d7:fc:93:f2:73:0b:2a:ff:6b:6f:68:24:
25:40:5f:86:64:07:db:c8:d3:0b:26:f3:40:f9:f6:
06:b6:02:f6:72:a1:03:0e:a5:04:07:2d:5b:07:42:
f4:d4:af:c2:b0:24:38:71:e0:9b:f5:f5:10:33:51:
d3:05:23:1f:27:1f:8c:e6:f5:88:cb:09:1f:b7:80:
3f:47:54:86:55:6c:21:53:d2:4a:72:81:3d:c7:da:
bf:d8:76:f7:35:a8:fd:bd:db:ac:00:1d:cb:02:17:
26:60:24:ed:2e:d5:13:2d:ee:ba:61:c3:2e:0e:7f:
f7:c1:51:d9:ec:4e:72:74:91:99:16:e1:2d:80:08:
12:68:76:76:da:e2:8a:7b:50:b6:ac:f0:de:55:e0:
af:1f:b9:bb:92:b0:1c:2a:4e:d8:49:7c:a3:cb:07:
ee:8a:f2:e8:4e:a7:a8:c4:ca:a5:5c:84:c8:5e:22:
cb:a2:bf:22:fd:d3:15:aa:e3:f9:d1:64:7e:e0:78:
44:6e:e7:af:4f:0c:f6:da:d1:6c:35:4f:4a:6f:67:
28:fc:15:3f:5b:dc:a4:8b:1f:a7:1f:bb:4c:75:dd:
f6:ea:a9:94:6e:86:15:0d:f1:52:10:1a:ad:b0:27:
64:68:34:00:8b:d9:fa:4c:8c:a0:27:6c:fd:e7:ff:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3E:B3:0B:BC:5F:18:0D:12:02:E1:78:7B:BC:B3:D8:07:F4:F2:0B
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/HD6zC7xfGA0SAuF4e7yz2Af08gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:814::/48
Signature Algorithm: sha256WithRSAEncryption
92:2c:4d:9c:22:20:96:41:2c:fa:a1:11:e0:4e:80:35:5a:e2:
cd:47:d4:06:ae:4b:0f:d2:df:a4:b0:e9:15:dc:6d:2c:ba:35:
95:af:09:30:d2:63:b0:48:96:5f:ae:c4:9f:f2:a2:75:82:83:
0b:b2:08:c9:83:f3:6e:77:7e:4c:3f:4d:ca:8c:96:49:8c:a4:
fa:ce:6a:cc:19:05:93:49:6b:6a:9c:ef:59:31:66:f6:38:4e:
29:c4:b0:5c:0b:df:96:9c:13:03:3a:9f:1e:62:1b:10:3c:40:
5d:f5:05:3b:8e:3a:62:5f:8b:ff:74:eb:a9:8d:9a:83:ba:32:
50:e3:f9:c5:b8:de:83:3d:42:96:1d:dc:8c:9b:61:44:22:ce:
9a:e3:b3:f3:24:22:31:a3:45:03:6a:f2:27:b8:b2:93:c2:f2:
3b:f9:47:dd:a6:da:f4:2b:02:66:dc:52:d4:53:4c:c7:2b:1d:
e5:b4:37:f1:e9:9b:ab:aa:de:cf:44:16:28:87:79:1d:73:61:
e3:93:e8:4c:40:65:72:8b:fc:d7:a7:df:3f:b6:aa:f9:35:07:
0f:a5:3a:75:ea:c9:85:4e:5c:e0:07:9d:93:64:b0:41:51:4c:
17:ce:66:59:4f:a0:e2:06:0f:69:d4:0c:e9:75:b8:bb:b6:e8:
9c:6c:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:14 2025 by rpki-client