Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/tHw2QCya_IwnD4N9RJSSUPxyin4.roa
File: tHw2QCya_IwnD4N9RJSSUPxyin4.roa (raw, json)
Hash identifier: vqiPWFDba1Kkygb2v+HXMnm6nSEdnkwWmhtexUDr7iU=
Subject key identifier: B4:7C:36:40:2C:9A:FC:8C:27:0F:83:7D:44:94:92:50:FC:72:8A:7E
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 01993590A33E2210150B6CE9E1070009FFB1
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/tHw2QCya_IwnD4N9RJSSUPxyin4.roa
Signing time: Wed 10 Sep 2025 21:38:15 +0000
ROA not before: Wed 10 Sep 2025 21:38:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199614
IP address blocks: 2a13:a280::/29 maxlen: 29
2a13:a280::/33 maxlen: 33
2a13:a280:8000::/33 maxlen: 33
2a13:a281::/33 maxlen: 33
2a13:a281:8000::/33 maxlen: 33
2a13:a282::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:90:a3:3e:22:10:15:0b:6c:e9:e1:07:00:09:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Sep 10 21:38:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47c36402c9afc8c270f837d44949250fc728a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:0f:3f:53:b1:c5:97:ca:d1:31:37:a0:91:
f5:b2:cd:c5:77:f2:3b:17:ff:07:70:e8:9d:cc:39:
d9:a5:81:15:f3:f9:b1:5d:e1:48:f5:27:71:21:8b:
23:74:13:d0:bb:56:11:55:81:27:c4:cf:d3:63:9e:
ec:ab:d5:97:7c:4f:b1:a5:d9:ac:05:64:5a:4a:ab:
17:92:b2:21:8b:f1:74:1c:78:05:83:06:bb:12:ba:
e8:6f:30:7f:d3:f3:a7:16:5b:f3:bd:3d:fb:fc:f8:
17:1a:95:61:f0:92:e3:7d:bf:64:79:db:bc:93:42:
55:34:53:1d:ae:b4:85:97:b7:f3:e2:c5:91:77:6f:
97:09:c8:b6:d1:c6:7b:c4:a9:31:1b:dc:8a:cd:2b:
7c:77:b0:d4:f9:24:7b:be:c0:3f:ba:63:99:54:29:
e4:c5:d1:dc:59:f6:9a:26:c3:c8:38:bb:6c:4f:58:
99:8c:60:da:5c:d4:73:00:4d:8b:52:e2:a3:cf:66:
a7:90:87:66:1f:fc:51:eb:a8:66:ca:9b:d2:ed:9d:
51:09:eb:37:35:ee:6a:f2:1d:2e:07:5c:cf:31:b8:
06:e8:7b:33:50:da:f4:81:34:e1:73:c9:98:12:5d:
ad:2f:2d:9a:c3:1a:7c:56:bd:2f:4c:69:f2:79:b2:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:36:40:2C:9A:FC:8C:27:0F:83:7D:44:94:92:50:FC:72:8A:7E
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/tHw2QCya_IwnD4N9RJSSUPxyin4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a280::/29
Signature Algorithm: sha256WithRSAEncryption
88:18:5b:01:3b:a3:7e:b7:03:68:a4:8c:dc:ec:33:91:14:36:
7f:be:96:07:e0:db:05:f9:d6:ff:93:81:b0:94:27:f3:57:df:
a1:d3:53:e9:d0:ea:b6:31:9d:11:b1:cd:8a:54:29:54:e9:2f:
ba:07:5d:cd:3e:d1:52:74:39:d9:75:3b:5c:dd:66:a7:d0:67:
e7:2d:72:27:18:42:b1:b2:71:39:2c:6b:a2:95:10:58:ed:a9:
4c:2c:6c:57:a6:19:60:66:0c:d9:1e:d1:30:dc:dc:87:69:45:
21:de:77:56:cb:43:a3:c3:e0:6d:f5:14:bc:ac:db:57:5d:8c:
dd:6a:5a:62:f5:74:96:03:09:0a:70:5a:0a:e1:cc:58:77:41:
4a:46:fd:6a:25:7e:06:82:1c:d8:3c:e7:4a:fe:76:19:46:64:
9c:b2:aa:01:09:ab:9c:d0:d0:1a:79:78:15:f1:11:ad:e4:ee:
96:18:b0:8e:c6:c0:df:57:eb:49:71:8b:36:9c:7a:cc:7d:cb:
f0:cc:cc:19:8d:a6:ab:91:ef:ea:a0:e6:41:27:b1:3a:ff:f2:
d1:63:e2:fa:b3:6a:e0:0b:59:77:19:02:35:9c:43:4d:a9:81:
81:03:0f:da:89:e9:ff:a6:d5:9b:e4:8f:b0:33:11:00:c8:61:
4c:38:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:01 2025 by rpki-client