Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/1-P9lvfmiemB9HzTxt4D4jrOsLrQ.roa
File: 1-P9lvfmiemB9HzTxt4D4jrOsLrQ.roa (raw, json)
Hash identifier: xUeMthVXfDFuQrUfye6uMBGzaWwv/J93tFrIhBusvNM=
Subject key identifier: F8:FF:65:BD:F9:A2:7A:60:7D:1F:34:F1:B7:80:F8:8E:B3:AC:2E:B4
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 01999694DEE1649368811A9FEF3EA961AE46
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/1-P9lvfmiemB9HzTxt4D4jrOsLrQ.roa
Signing time: Mon 29 Sep 2025 17:46:02 +0000
ROA not before: Mon 29 Sep 2025 17:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0:30c0::/48 maxlen: 48
2001:30c0:ffff::/48 maxlen: 48
2001:30c1:30c1::/48 maxlen: 48
2001:30c2:30c2::/48 maxlen: 48
2001:30c3:30c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:94:de:e1:64:93:68:81:1a:9f:ef:3e:a9:61:ae:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Sep 29 17:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ff65bdf9a27a607d1f34f1b780f88eb3ac2eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:7b:e0:12:15:fa:46:81:81:f5:bf:58:1a:
18:75:83:0c:2a:18:f6:ca:16:5a:3e:ee:de:b1:54:
97:3f:32:c3:ea:52:9f:15:d4:7c:8b:d4:57:86:16:
9d:85:44:f7:c3:a4:78:2d:94:3a:47:bb:d0:74:b4:
bc:7c:cc:51:9b:b1:e9:db:4d:d2:31:47:07:db:49:
d0:85:da:a8:12:c3:8b:63:1e:c5:00:60:63:d9:fb:
0e:07:4e:f5:36:b7:04:03:39:92:15:3a:5d:d6:ee:
a6:88:0f:61:b5:b3:6e:6a:bc:2a:70:96:cc:ad:28:
46:79:6b:e4:59:a4:58:dc:0b:5d:66:d1:3d:cf:8a:
74:ad:09:13:6f:73:6f:1f:6a:b1:0d:0c:7c:72:57:
a7:0d:d4:42:50:39:90:0f:c8:28:51:20:d4:84:52:
6f:2e:d1:82:9c:fd:fb:73:37:b1:8e:74:c4:cf:1b:
ac:a1:14:f0:93:d9:26:27:14:dc:82:96:68:d4:65:
6b:2a:37:b1:c9:bc:87:18:71:20:10:73:a9:02:87:
56:a2:da:01:29:85:00:14:14:66:7a:4c:64:31:5a:
94:df:72:34:94:ce:50:c4:8d:53:a0:4e:52:d2:c3:
4f:0a:c4:36:99:73:8c:4b:bc:fa:54:c6:1b:2a:25:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:65:BD:F9:A2:7A:60:7D:1F:34:F1:B7:80:F8:8E:B3:AC:2E:B4
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/1-P9lvfmiemB9HzTxt4D4jrOsLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:30c0::/48
2001:30c0:ffff::/48
2001:30c1:30c1::/48
2001:30c2:30c2::/48
2001:30c3:30c3::/48
Signature Algorithm: sha256WithRSAEncryption
9c:2b:22:0c:b9:f9:75:b4:97:55:98:43:88:8b:d7:20:96:fa:
48:e8:f3:51:e7:5d:12:02:fd:ed:75:8f:a0:34:cb:3d:ab:01:
44:e1:9c:41:28:e9:3b:de:8f:da:17:66:71:27:06:2e:f6:be:
4b:b4:21:4a:2d:eb:4d:21:df:c6:df:74:43:8c:71:55:49:d0:
66:56:0f:ac:64:c5:8b:af:52:a8:d3:d5:fb:85:4f:55:89:37:
c0:20:4b:d3:06:f9:44:03:fd:0a:dd:7a:57:46:cf:00:74:cb:
62:c4:03:5c:9c:8e:f1:fd:99:a8:f4:3a:c4:89:0b:bb:69:a4:
71:74:ad:50:28:d8:1d:72:21:ca:7f:01:e7:ec:e8:47:42:d6:
a7:f1:bb:2a:dc:57:00:ff:7d:d6:39:58:bd:01:d8:af:d2:1b:
7b:30:b2:07:75:a0:6f:16:6c:7f:e1:e8:f4:93:84:81:16:29:
4e:2b:fd:b2:59:b0:06:12:4c:5f:a4:df:cb:c3:c2:e4:6f:4a:
a0:d1:dd:30:3c:42:78:ab:1d:6d:0e:e2:fd:02:02:f0:43:9a:
ef:cd:6e:a1:6b:15:d0:7d:64:5e:6a:2a:94:23:6f:46:ac:2b:
3f:4a:0c:0c:07:c4:5b:f9:a7:29:3c:7f:02:9e:3f:40:c9:27:
72:c5:1d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:13 2025 by rpki-client