Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/avwTDwXgj-XueUI8wn-hyOkB-tU.roa
File: avwTDwXgj-XueUI8wn-hyOkB-tU.roa (raw, json)
Hash identifier: IktCfn+eBAhnVRfOZR4afgek+KYNeXmLk7tpJfljPc4=
Subject key identifier: 6A:FC:13:0F:05:E0:8F:E5:EE:79:42:3C:C2:7F:A1:C8:E9:01:FA:D5
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019957B9C25786225C3DBFAB82EBAA93C46F
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/avwTDwXgj-XueUI8wn-hyOkB-tU.roa
Signing time: Wed 17 Sep 2025 12:50:15 +0000
ROA not before: Wed 17 Sep 2025 12:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8989
IP address blocks: 2a02:980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:b9:c2:57:86:22:5c:3d:bf:ab:82:eb:aa:93:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Sep 17 12:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6afc130f05e08fe5ee79423cc27fa1c8e901fad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:12:56:2c:5d:f9:c0:06:79:5d:fe:09:6c:
14:fa:7a:fc:dc:fd:92:25:eb:f3:4f:8b:36:f6:ce:
39:d8:3e:32:eb:77:ac:d1:be:2a:e0:75:13:46:43:
53:b5:e3:55:b3:94:de:d8:0c:d6:12:d8:56:fb:1e:
47:09:5c:ba:37:70:b0:06:00:c3:f9:4e:a0:2a:46:
14:67:6f:50:50:1f:88:4c:e6:20:ba:f3:e5:78:38:
e6:b8:54:05:79:41:99:3d:d8:27:8a:32:54:e2:48:
dc:4a:1e:44:00:c5:66:5d:88:57:fb:99:8d:d4:e7:
3a:ec:14:54:8f:28:cf:b8:75:e4:ed:9c:c3:dc:10:
ea:47:6a:73:ca:bc:02:0f:6c:ae:38:cb:eb:df:5f:
57:ff:f1:4e:55:ea:66:09:d8:9d:02:5e:2d:29:7b:
5b:2b:ad:f9:93:47:c5:fe:8a:e7:bc:e0:02:41:43:
e4:76:24:8d:f1:57:bb:57:9e:a3:66:da:cb:42:9c:
0c:eb:8e:69:4b:04:c8:d7:b5:84:78:39:14:bf:78:
9a:52:a3:45:ab:73:55:0f:c3:55:ad:76:1a:fc:46:
c9:99:fe:11:0e:6f:48:be:c7:49:35:f4:8d:a2:96:
ee:ea:69:d7:41:7b:b9:21:68:25:2a:a5:e9:fd:a9:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:13:0F:05:E0:8F:E5:EE:79:42:3C:C2:7F:A1:C8:E9:01:FA:D5
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/avwTDwXgj-XueUI8wn-hyOkB-tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:980::/29
Signature Algorithm: sha256WithRSAEncryption
89:fa:b2:da:ca:c2:ce:6d:e0:92:f6:e7:9b:01:21:6b:bf:fe:
39:36:71:a8:8c:ca:79:57:03:63:80:3c:a8:34:9a:4c:8b:48:
3c:29:ee:04:8c:bb:dc:15:a3:cd:b3:84:df:8f:30:be:b6:74:
8d:21:54:8c:a5:a3:11:55:95:14:e1:79:e4:c7:86:9d:89:3d:
34:fa:2b:b9:9e:e9:2f:71:7c:13:a2:fc:f8:82:74:33:64:b4:
73:4c:5d:6c:8b:54:23:1a:18:d4:64:1c:f0:ea:a0:47:cc:60:
35:f9:bd:78:3d:a4:fa:e7:fb:29:61:e8:f0:01:f0:6e:71:e5:
81:f2:2a:82:ab:78:07:42:16:4c:da:86:e5:64:a3:4c:44:9b:
70:78:14:b6:d3:e8:b6:ed:7c:14:5b:cf:b6:9e:1a:67:45:6c:
af:68:76:21:16:28:28:a4:23:b6:d9:9d:bb:95:ec:eb:01:40:
ec:e3:af:8a:cb:9a:de:78:19:9e:31:ca:da:7f:46:b1:49:fc:
e7:74:0d:19:02:33:b9:a4:41:5e:8f:4a:00:d8:b1:fc:20:f4:
ee:94:8e:16:0f:52:e4:f8:a4:36:3b:17:17:b6:6c:90:e7:91:
ce:2b:ef:e4:7c:3d:58:06:28:f1:44:ae:96:bd:a0:0f:b3:1b:
51:53:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:14 2025 by rpki-client