Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/6-EX2htJlHImEHBSvQOybhHaeO0.roa
File: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (raw, json)
Hash identifier: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=
Subject key identifier: EB:E1:17:DA:1B:49:94:72:26:10:70:52:BD:03:B2:6E:11:DA:78:ED
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 0198AE3B15B538A1B72FE62DF704A5C30A9D
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/6-EX2htJlHImEHBSvQOybhHaeO0.roa
Signing time: Fri 15 Aug 2025 14:56:04 +0000
ROA not before: Fri 15 Aug 2025 14:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 2a0f:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:3b:15:b5:38:a1:b7:2f:e6:2d:f7:04:a5:c3:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Aug 15 14:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebe117da1b49947226107052bd03b26e11da78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:af:13:71:56:4b:1b:4c:ae:11:83:d8:37:
d6:0e:56:8d:15:84:e1:a5:3e:f7:b9:78:3b:51:c2:
94:36:51:64:cc:fb:e0:61:ec:86:d4:6a:85:e4:70:
dc:4c:ef:29:71:ce:93:b5:4d:c6:69:67:da:ea:37:
eb:b3:04:60:49:ad:b5:91:10:1c:3e:66:f6:a1:31:
8d:f5:3e:bb:b9:d2:89:f1:c1:46:a3:d4:bf:2e:94:
83:ae:7d:45:73:00:17:8b:39:86:de:3d:1f:ad:45:
4c:84:0b:30:15:02:67:b2:05:77:69:66:90:4f:eb:
c3:91:0e:c3:81:00:b6:c2:5d:c1:ef:58:c5:39:9a:
64:77:3b:51:a0:4e:58:9e:49:a2:21:60:4a:10:80:
e5:7b:d4:c9:c2:8a:dc:c1:f2:2b:70:64:87:1a:3f:
73:53:c5:26:ad:d7:cc:60:25:e0:03:6f:d4:e8:8e:
64:7d:be:19:eb:95:e8:04:cd:be:04:d4:dd:35:a7:
33:30:da:46:aa:d1:dd:02:85:0d:d3:78:26:f2:a0:
da:a3:07:95:0f:ea:be:b7:90:75:75:bd:54:d3:fd:
bb:a0:db:1b:4d:36:45:b6:f9:31:c0:5a:8d:48:25:
40:55:cb:41:19:02:32:22:be:71:60:87:5f:bf:92:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E1:17:DA:1B:49:94:72:26:10:70:52:BD:03:B2:6E:11:DA:78:ED
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/6-EX2htJlHImEHBSvQOybhHaeO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:2c:3c:cd:85:c8:a0:df:c9:9b:c7:8d:26:a3:3c:f8:2e:1e:
51:af:06:13:bc:f2:d6:b0:e9:09:dd:90:9c:84:98:53:eb:e6:
b8:79:5e:12:f7:fa:09:7a:9c:7d:f2:93:30:8d:50:a3:15:6f:
06:3f:79:fd:c1:13:80:c3:43:24:b1:eb:c4:08:e8:05:c9:1e:
2e:33:d7:26:2d:56:b2:79:c5:43:bb:5c:99:86:7b:bc:93:b8:
81:5d:d4:50:9b:a9:fa:f9:82:72:9a:8d:8f:93:0f:50:12:cb:
df:90:21:0b:c7:86:4c:0a:0e:38:6e:71:e4:96:88:6b:6b:cd:
52:26:a9:17:2f:2d:9a:f9:7a:b2:e8:98:fb:5b:36:db:13:ae:
26:84:e8:35:95:a7:95:dd:f2:a5:71:72:13:fd:af:49:29:d8:
2a:25:25:22:1e:02:0a:90:36:ac:ea:80:0e:d6:9e:d7:8a:70:
35:f5:cb:f8:ff:25:d1:26:ae:b7:a8:9f:94:52:75:bf:97:ba:
10:80:c6:a9:3a:0f:a5:2c:13:d7:e7:ed:59:19:1e:57:86:9e:
c8:2f:2c:62:37:1e:fa:2d:cc:26:5b:ef:d7:10:42:ec:93:42:
b6:f3:1b:7c:fa:82:03:b1:be:b6:a5:90:33:4b:24:33:77:d9:
db:7f:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:40 2025 by rpki-client