Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4SJGO0ahyGrj6_wgUycRPIM87rQ.roa
File: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (raw, json)
Hash identifier: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=
Subject key identifier: E1:22:46:3B:46:A1:C8:6A:E3:EB:FC:20:53:27:11:3C:83:3C:EE:B4
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 0199E9A1306C76E628BE893CF1F8A7E0B409
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4SJGO0ahyGrj6_wgUycRPIM87rQ.roa
Signing time: Wed 15 Oct 2025 20:47:58 +0000
ROA not before: Wed 15 Oct 2025 20:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 2a0e:da40:3000::/36 maxlen: 128
2a12:8c00::/36 maxlen: 128
2a12:8c00:1000::/36 maxlen: 128
2a12:8c00:2000::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e9:a1:30:6c:76:e6:28:be:89:3c:f1:f8:a7:e0:b4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Oct 15 20:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e122463b46a1c86ae3ebfc205327113c833ceeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c5:47:54:c4:12:b7:aa:0a:f5:95:be:19:1a:
6a:e4:a8:bc:f1:6b:aa:72:aa:e7:95:06:a9:04:18:
1f:70:08:1b:ea:1d:20:c7:c8:e8:44:f7:7a:1b:76:
74:41:88:62:00:32:bc:57:9f:d5:35:ab:c5:e8:78:
ce:f6:91:34:36:f0:73:03:88:9d:ce:4e:60:e9:d5:
65:6e:cf:e2:6b:ea:5c:8e:3e:69:89:70:f7:c0:61:
f7:89:f6:19:a9:fd:8c:3c:91:71:7a:10:48:41:b4:
ba:e4:44:63:75:43:bb:40:e7:db:db:ba:7b:dd:bc:
8b:d1:c2:e7:76:7f:42:60:fc:12:22:f5:07:5d:43:
b2:04:28:7b:b1:47:ef:e3:27:46:1b:08:57:23:4c:
c5:16:8e:5b:b5:8d:32:5f:af:4b:a7:72:a5:f3:92:
21:57:e3:e7:6a:92:c1:fc:75:a8:94:84:b4:e0:cb:
6e:e3:88:a3:e9:c6:a7:79:6d:29:9d:7e:4a:3f:14:
76:f3:0d:0d:a1:32:e1:11:fe:56:0e:d4:78:cd:48:
05:7e:58:1e:61:44:1c:eb:2a:6f:f2:0d:77:8f:8e:
e8:d9:6a:87:84:32:5c:a3:49:cb:18:b9:9d:9a:7a:
ce:2e:b7:28:3f:79:12:55:7e:11:45:3c:b6:f7:9c:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:46:3B:46:A1:C8:6A:E3:EB:FC:20:53:27:11:3C:83:3C:EE:B4
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/4SJGO0ahyGrj6_wgUycRPIM87rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:3000::/36
2a12:8c00::-2a12:8c00:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:99:40:1e:6d:35:fb:f5:13:95:3b:0f:fa:be:43:d6:aa:4a:
a0:7c:b1:36:9b:98:0b:3e:61:0a:27:90:18:e7:11:f9:17:9c:
b3:b1:8c:96:22:2d:12:1f:03:39:1c:b7:9b:af:68:05:93:45:
e6:5c:b2:21:05:22:6d:82:ee:68:9c:89:45:32:34:f5:62:fe:
aa:0d:9b:81:9b:5d:31:71:22:b3:0b:50:25:a0:d9:f8:c0:b2:
54:f7:68:e6:18:f1:e3:14:98:54:8e:d5:d5:27:c6:8f:30:59:
53:93:4d:47:80:e2:2c:ac:87:64:5b:e0:17:09:4c:4f:6c:24:
4d:b8:73:82:3a:f4:89:5a:60:ee:aa:5d:07:54:ae:f3:eb:05:
bb:b3:e2:be:59:9f:c1:91:61:46:50:99:7a:1b:4f:62:5b:b2:
34:28:23:a4:2e:72:2f:56:f1:e0:e0:80:bd:59:1b:93:5a:a2:
ea:a8:ae:dc:4e:db:78:b4:6e:9c:8f:c5:89:7f:94:5d:67:31:
92:1e:c4:db:83:20:84:ae:70:eb:28:a5:9a:b3:44:31:97:b6:
99:07:7d:49:79:2c:f6:c5:6a:40:9c:8a:45:4e:95:98:52:6e:
83:cc:60:b7:3a:4e:a7:d3:16:e3:c6:34:9d:35:02:07:80:dc:
3d:8e:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:06 2025 by rpki-client