Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/sFuAj7q40A9vLPCXsmWGoEh7p7Q.roa
File: sFuAj7q40A9vLPCXsmWGoEh7p7Q.roa (raw, json)
Hash identifier: CwP3icIB3dHY65lzGz/pHwGROsNyZTSHWuKLbw130Js=
Subject key identifier: B0:5B:80:8F:BA:B8:D0:0F:6F:2C:F0:97:B2:65:86:A0:48:7B:A7:B4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0199868D7A1C0EDF858D3EBD15FA33F0061B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/sFuAj7q40A9vLPCXsmWGoEh7p7Q.roa
Signing time: Fri 26 Sep 2025 15:04:02 +0000
ROA not before: Fri 26 Sep 2025 15:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210934
IP address blocks: 2a12:bec4:1cd0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:8d:7a:1c:0e:df:85:8d:3e:bd:15:fa:33:f0:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 26 15:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b05b808fbab8d00f6f2cf097b26586a0487ba7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:5f:85:95:b2:c2:37:2d:23:2f:eb:31:ca:
38:49:ce:45:7d:c5:b7:53:2b:68:16:3c:53:d4:f1:
e3:78:2c:69:e7:1e:df:4a:2f:9a:20:0d:ea:3e:54:
4e:a0:9a:3a:a5:6e:bc:6c:7c:7e:3c:e6:90:02:a2:
75:ca:b4:ac:19:50:1a:9f:57:fb:71:0b:cc:d5:1e:
99:c2:54:7a:8d:ad:72:69:b3:b8:36:00:72:67:49:
4b:6e:d6:b0:52:4f:3b:ea:e7:d0:3e:68:03:4c:78:
6b:9d:09:82:60:51:3a:7e:8e:40:6a:7e:43:a2:51:
a6:63:50:48:13:86:9b:5f:5f:c0:9e:9f:04:66:7e:
86:0a:89:94:85:4a:77:ba:a0:af:a7:09:24:b7:af:
b0:05:c5:c5:77:88:b6:45:a0:40:8c:b5:ec:27:1b:
f4:b4:1f:bc:87:35:7b:f6:cd:d4:7d:a3:df:73:e6:
b7:cb:d3:a7:a7:f5:6e:85:30:e5:6c:33:b2:ef:ed:
2e:b4:3f:5b:77:91:12:ba:28:84:42:e9:b0:fa:ce:
6e:00:fd:de:33:ab:25:66:f7:05:08:22:be:6e:ac:
0d:78:bc:ee:0a:11:45:65:fb:bf:ec:9c:44:b2:6d:
e6:e1:d3:1b:e4:58:aa:7c:b9:52:99:0b:0a:7e:40:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:80:8F:BA:B8:D0:0F:6F:2C:F0:97:B2:65:86:A0:48:7B:A7:B4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/sFuAj7q40A9vLPCXsmWGoEh7p7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1cd0::/44
Signature Algorithm: sha256WithRSAEncryption
61:b2:7f:07:5f:b0:69:50:65:14:88:1a:1c:96:c2:b7:f8:b7:
c4:99:15:4d:af:ae:7a:ae:b0:14:a7:af:fd:6e:7c:c9:f6:78:
e7:58:57:bc:85:03:dc:85:d7:66:b5:cc:0e:ae:33:f2:d7:a3:
8a:aa:42:8d:60:80:37:7b:ce:41:f4:47:86:31:4e:cb:5f:06:
ea:cb:2a:83:da:3d:1f:c2:21:57:59:bd:e1:59:dc:08:4e:ed:
9c:f3:35:4d:a7:10:b3:07:f2:a6:88:de:2b:ff:af:26:59:86:
30:f3:53:70:27:4d:4e:6a:93:3a:be:28:81:d4:11:d6:d1:3f:
7e:f8:ff:96:4d:be:58:0e:93:84:15:fe:42:18:92:3f:0a:ff:
b1:5b:1d:80:f3:fd:8d:ce:18:58:3b:e1:d7:d3:04:16:b9:e4:
c3:51:68:ab:46:fe:19:81:ae:cb:db:f5:04:47:e2:d8:cc:53:
49:67:d4:05:3d:0b:f9:32:27:70:86:54:e8:3e:6a:8f:0d:35:
6f:5d:ac:eb:a8:0d:cf:70:19:a3:c8:13:61:b4:0c:34:f2:f3:
fd:36:10:e5:5f:06:0d:12:40:de:5a:3a:00:fb:5e:8f:4b:76:
28:f6:65:14:b1:37:eb:ad:ec:78:01:9c:39:3b:30:ca:69:e0:
92:a0:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:10 2025 by rpki-client