Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Vs_zjo8EPMGSU3a9KEo8SaaRtI.roa
File: 0Vs_zjo8EPMGSU3a9KEo8SaaRtI.roa (raw, json)
Hash identifier: F/L0YbPsTYE9pYNDXAWfR40Zk8rVhwsnhTkbv9ObLxw=
Subject key identifier: D1:5B:3F:CE:3A:3C:10:F3:06:49:4D:DA:F4:A1:28:F1:26:9A:46:D2
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0199616662307F6BAD07734B4BA0C0468804
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Vs_zjo8EPMGSU3a9KEo8SaaRtI.roa
Signing time: Fri 19 Sep 2025 09:55:23 +0000
ROA not before: Fri 19 Sep 2025 09:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a13:f084::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:66:62:30:7f:6b:ad:07:73:4b:4b:a0:c0:46:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 19 09:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d15b3fce3a3c10f306494ddaf4a128f1269a46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:fb:46:10:e5:45:6c:e1:c2:e2:f8:cd:b5:
03:83:c7:ac:44:7e:a7:f7:db:e7:1f:b9:f0:1e:80:
81:98:40:10:dd:2d:13:cc:55:ae:b6:de:c0:b1:5c:
ae:1a:36:9b:0c:19:d4:20:31:6a:8a:79:34:3b:10:
3b:90:2f:b3:bf:0f:7e:58:b7:92:46:0a:53:08:9b:
10:03:08:bd:33:1e:15:78:a0:a6:92:b2:08:27:49:
f0:bb:2d:3e:5f:e8:2c:2f:69:94:69:ca:3d:4a:e3:
be:83:ec:96:3b:6b:36:15:4c:a4:84:f3:3b:01:ec:
bd:b9:2d:40:da:03:b8:5b:aa:f2:4e:a2:39:4f:4d:
b9:1d:90:6d:73:75:30:d3:07:07:e1:29:7b:9e:57:
45:c9:5e:2c:b0:fd:ca:f8:8d:d8:99:4c:4d:8f:35:
fe:f4:72:64:06:c0:a5:3f:04:ee:43:60:04:7e:87:
00:3b:02:71:c7:2a:ab:cb:4d:33:f1:20:19:46:0b:
5e:53:fd:f1:6e:32:10:f9:ee:c9:6c:d9:df:22:ff:
5c:fe:7a:ca:9d:28:12:4b:00:68:aa:78:5b:cf:60:
a6:02:e8:8c:1b:2c:9f:46:ad:1d:1e:67:34:af:5c:
04:41:9e:a3:ca:0f:64:f6:a3:4b:47:e4:5e:7a:b4:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:3F:CE:3A:3C:10:F3:06:49:4D:DA:F4:A1:28:F1:26:9A:46:D2
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Vs_zjo8EPMGSU3a9KEo8SaaRtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f084::/32
Signature Algorithm: sha256WithRSAEncryption
58:fe:78:36:14:6e:49:0e:92:29:00:6f:d5:66:3b:f0:2a:e4:
c1:5f:9c:51:d6:e9:d9:61:5a:0d:a0:33:64:02:5d:68:41:20:
2f:b2:e1:56:78:2f:ab:2d:49:e8:2e:c6:46:4e:ea:bf:04:cf:
d2:90:d2:26:8c:7a:a6:44:34:2d:60:2a:1a:92:a1:8e:32:f8:
71:c1:2b:86:65:80:6c:b6:d1:0b:d9:cd:cf:0e:3d:3b:a1:96:
ab:a1:a8:2e:0e:fa:4f:5d:d4:c3:5e:c7:2f:2f:f1:78:f8:1d:
4e:b5:f6:0c:f0:27:ae:dc:b7:a9:5c:66:b7:3a:90:22:e0:5d:
ab:0b:5b:72:d6:69:06:df:7d:3d:75:45:8d:4d:95:ae:61:d2:
2e:ac:ce:74:bf:b5:2e:23:62:b9:07:7d:58:79:05:e0:27:27:
03:5b:ca:5e:a9:67:e6:58:a9:bf:38:13:b4:ba:a1:72:c0:10:
e8:13:b4:f8:26:fa:a1:15:9a:19:15:2e:df:04:d4:9d:28:f5:
6d:e1:dc:18:f9:83:b5:dc:d4:e7:f6:25:ad:de:93:bd:54:9c:
d9:4d:87:46:fa:19:4d:1b:20:4f:9a:d8:d6:ec:7b:53:e9:99:
d5:6d:04:80:92:c2:66:19:87:a7:a5:d1:8a:a0:fe:5d:e2:71:
ff:ab:72:d8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZlhZmIwf2utB3NLS6DARogEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwOTE5MDk1NTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTViM2ZjZTNhM2MxMGYzMDY0OTRkZGFmNGExMjhmMTI2OWE0NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI37RhDlRWzhwuL4zbUDg8esRH6n
99vnH7nwHoCBmEAQ3S0TzFWutt7AsVyuGjabDBnUIDFqink0OxA7kC+zvw9+WLeS
RgpTCJsQAwi9Mx4VeKCmkrIIJ0nwuy0+X+gsL2mUaco9SuO+g+yWO2s2FUykhPM7
Aey9uS1A2gO4W6ryTqI5T025HZBtc3Uw0wcH4Sl7nldFyV4ssP3K+I3YmUxNjzX+
9HJkBsClPwTuQ2AEfocAOwJxxyqry00z8SAZRgteU/3xbjIQ+e7JbNnfIv9c/nrK
nSgSSwBoqnhbz2CmAuiMGyyfRq0dHmc0r1wEQZ6jyg9k9qNLR+ReerRxUwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNFbP846PBDzBklN2vShKPEmmkbSMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvMFZzX3pqbzhFUE1HU1UzYTlLRW84U2FhUnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPwhDAN
BgkqhkiG9w0BAQsFAAOCAQEAWP54NhRuSQ6SKQBv1WY78CrkwV+cUdbp2WFaDaAz
ZAJdaEEgL7LhVngvqy1J6C7GRk7qvwTP0pDSJox6pkQ0LWAqGpKhjjL4ccErhmWA
bLbRC9nNzw49O6GWq6GoLg76T13Uw17HLy/xePgdTrX2DPAnrty3qVxmtzqQIuBd
qwtbctZpBt99PXVFjU2VrmHSLqzOdL+1LiNiuQd9WHkF4CcnA1vKXqln5lipvzgT
tLqhcsAQ6BO0+Cb6oRWaGRUu3wTUnSj1beHcGPmDtdzU5/Ylrd6TvVSc2U2HRvoZ
TRsgT5rY1ux7U+mZ1W0EgJLCZhmHp6XRiqD+XeJx/6ty2A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:08 2025 by rpki-client