Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/3odw06eY_aIJMJ5gia4SCuGIEhI.roa
File: 3odw06eY_aIJMJ5gia4SCuGIEhI.roa (raw, json)
Hash identifier: HtI0JFszp0zK+HxeeFPZ+mMVGR6pXK8jygEDvaNdyvQ=
Subject key identifier: DE:87:70:D3:A7:98:FD:A2:09:30:9E:60:89:AE:12:0A:E1:88:12:12
Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Certificate serial: 0199ED217D996A58FE1E5D57BF78DD41BFC5
Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/3odw06eY_aIJMJ5gia4SCuGIEhI.roa
Signing time: Thu 16 Oct 2025 13:06:59 +0000
ROA not before: Thu 16 Oct 2025 13:06:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215960
IP address blocks: 2a07:e043::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:21:7d:99:6a:58:fe:1e:5d:57:bf:78:dd:41:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3
Validity
Not Before: Oct 16 13:06:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de8770d3a798fda209309e6089ae120ae1881212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:13:63:4c:50:b5:e6:01:00:6a:8a:49:bd:
53:ae:e8:c2:a2:c2:b6:92:0d:d1:0f:d4:44:2a:ed:
55:e0:13:83:8b:9b:b0:d5:10:62:0f:f4:f5:0d:31:
91:b9:74:ed:90:2d:f8:70:91:e2:68:08:14:29:94:
33:3a:c9:95:4d:f9:55:61:af:66:b6:f9:e4:9e:15:
0e:92:a3:e1:f6:8a:7a:d5:6b:40:e3:f0:da:10:0d:
f9:1d:e3:1d:17:6c:06:79:a2:75:61:aa:f1:11:4a:
f4:a2:1b:f6:b4:58:d6:0d:e2:b2:5c:e3:b4:e6:f9:
32:b4:55:e9:9d:c3:ef:06:c4:a2:b8:b9:df:84:4f:
e7:6d:4f:db:10:bf:fd:95:11:aa:5b:84:2d:00:f6:
ea:e4:cd:30:42:47:a5:fc:f1:bc:d9:b3:01:67:41:
53:a9:b4:8f:99:b2:3f:27:b4:d0:a5:bd:0d:d4:5d:
d6:68:8c:ca:af:04:cb:d2:d9:85:19:d1:d2:7b:db:
e2:bd:95:24:bb:c4:04:9b:06:48:73:a8:f2:c8:aa:
4f:e4:8d:15:3a:ea:5d:08:5e:f3:bc:de:8c:d0:b9:
5b:88:64:a4:39:22:18:f2:21:bd:69:66:ee:95:13:
01:82:2b:2c:3c:cb:cd:c3:7c:6f:14:1a:b6:14:84:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:70:D3:A7:98:FD:A2:09:30:9E:60:89:AE:12:0A:E1:88:12:12
X509v3 Authority Key Identifier:
keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/3odw06eY_aIJMJ5gia4SCuGIEhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e043::/32
Signature Algorithm: sha256WithRSAEncryption
9b:43:b3:fd:ae:79:f9:ef:ec:b5:63:f7:7e:2f:ac:75:4d:65:
9d:fe:4d:1f:a9:2e:0a:5e:46:f3:20:61:9f:8c:e9:35:ca:00:
96:19:32:37:c5:8f:d2:5e:2a:eb:24:4b:58:cb:06:b4:0c:68:
e5:ab:4a:05:24:a4:40:d6:25:45:7b:0b:c0:a8:ac:a1:64:0b:
b2:32:25:29:60:88:ec:3d:95:1e:54:52:c5:5a:99:7a:7d:5c:
df:3f:05:21:1c:9b:d4:55:a7:a0:28:82:f5:c9:9e:a0:d7:49:
16:65:b6:d1:71:ee:46:ad:80:71:a2:08:c6:b6:3b:81:a7:95:
e2:df:09:6c:f7:b8:a7:b9:d2:6e:f2:29:d6:43:a8:ce:75:0d:
34:56:c7:8f:5d:d3:1f:94:ba:39:30:09:39:3c:f6:b4:37:69:
fa:f3:3d:0e:ec:db:06:82:8d:fe:da:36:e7:71:cd:a7:9c:e5:
5e:60:c7:84:7c:ab:b1:69:9c:bb:f1:da:ae:19:bd:9c:76:ed:
68:32:d1:2f:62:9d:30:0d:d5:b8:84:29:ed:3a:2a:bd:0e:32:
d1:04:0a:8d:d4:b3:69:db:ec:f5:06:16:03:dc:81:06:8e:72:
75:94:60:24:c3:a0:6a:1b:55:11:54:a1:46:c5:00:08:bd:82:
54:22:4e:c9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZntIX2Zalj+Hl1Xv3jdQb/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3
NjY3ZDMwHhcNMjUxMDE2MTMwNjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTg3NzBkM2E3OThmZGEyMDkzMDllNjA4OWFlMTIwYWUxODgxMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgYTY0xQteYBAGqKSb1TrujCosK2
kg3RD9REKu1V4BODi5uw1RBiD/T1DTGRuXTtkC34cJHiaAgUKZQzOsmVTflVYa9m
tvnknhUOkqPh9op61WtA4/DaEA35HeMdF2wGeaJ1YarxEUr0ohv2tFjWDeKyXOO0
5vkytFXpncPvBsSiuLnfhE/nbU/bEL/9lRGqW4QtAPbq5M0wQkel/PG82bMBZ0FT
qbSPmbI/J7TQpb0N1F3WaIzKrwTL0tmFGdHSe9vivZUku8QEmwZIc6jyyKpP5I0V
OupdCF7zvN6M0LlbiGSkOSIY8iG9aWbulRMBgissPMvNw3xvFBq2FIT9qQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN6HcNOnmP2iCTCeYImuEgrhiBISMB8GA1UdIwQY
MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et
NDQyY2MzNjQ5YmFjLzEvM29kdzA2ZVlfYUlKTUo1Z2lhNFNDdUdJRWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj
LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgfgQzAN
BgkqhkiG9w0BAQsFAAOCAQEAm0Oz/a55+e/stWP3fi+sdU1lnf5NH6kuCl5G8yBh
n4zpNcoAlhkyN8WP0l4q6yRLWMsGtAxo5atKBSSkQNYlRXsLwKisoWQLsjIlKWCI
7D2VHlRSxVqZen1c3z8FIRyb1FWnoCiC9cmeoNdJFmW20XHuRq2AcaIIxrY7gaeV
4t8JbPe4p7nSbvIp1kOoznUNNFbHj13TH5S6OTAJOTz2tDdp+vM9DuzbBoKN/to2
53HNp5zlXmDHhHyrsWmcu/Harhm9nHbtaDLRL2KdMA3VuIQp7ToqvQ4y0QQKjdSz
advs9QYWA9yBBo5ydZRgJMOgahtVEVShRsUACL2CVCJOyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:30 2025 by rpki-client