Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/E8-O6qTkHvseSI_wtIvJ6wYXX3k.roa
File: E8-O6qTkHvseSI_wtIvJ6wYXX3k.roa (raw, json)
Hash identifier: uXi+MjDyT65g7z2V+dZfdFCKu9m94/6YNXPqF3nP/fc=
Subject key identifier: 13:CF:8E:EA:A4:E4:1E:FB:1E:48:8F:F0:B4:8B:C9:EB:06:17:5F:79
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0198CAE5F282C66F37E82DAA5AF06C80484D
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/E8-O6qTkHvseSI_wtIvJ6wYXX3k.roa
Signing time: Thu 21 Aug 2025 04:32:04 +0000
ROA not before: Thu 21 Aug 2025 04:32:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0:30c0::/48 maxlen: 48
2001:30c1:30c1::/48 maxlen: 48
2001:30c2:30c2::/48 maxlen: 48
2001:30c3:30c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:e5:f2:82:c6:6f:37:e8:2d:aa:5a:f0:6c:80:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Aug 21 04:32:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13cf8eeaa4e41efb1e488ff0b48bc9eb06175f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:9a:c1:fb:6f:7d:e0:f6:5e:ee:8f:6a:16:
9a:e3:cf:66:c5:66:83:f0:bf:71:b7:99:f6:ee:26:
d5:9c:f9:af:77:1a:2b:00:60:17:fc:94:f2:ee:0b:
1f:a4:6e:c0:3d:93:26:af:df:87:62:d5:2c:2e:e9:
86:bd:82:1a:df:cd:f7:0a:26:e5:f4:2c:d8:5e:bc:
77:71:36:ca:5f:8d:63:d3:60:f3:47:2e:34:c1:b4:
bb:aa:92:d6:0a:bb:1e:6c:06:59:3f:e6:be:8e:50:
16:e2:88:ea:99:7c:86:fa:c3:ad:fb:46:33:cf:fb:
56:a0:36:73:0b:d4:3e:9e:7e:83:9b:d5:5f:79:2b:
f2:0e:58:61:6a:23:8d:7d:44:bd:40:de:97:e7:50:
98:59:59:f4:f0:79:2f:c7:47:9b:55:ef:05:8a:9e:
1c:14:07:d1:6f:01:fd:40:b6:1c:c3:a2:76:f8:63:
05:93:67:e1:fd:9a:68:da:d4:62:e0:3f:d1:c5:a6:
ee:1b:b3:c4:0d:13:7b:aa:db:4f:0d:d9:e0:51:92:
b3:8f:99:f5:17:7f:65:48:cd:19:55:97:cf:c1:67:
fa:76:b8:87:c2:6d:f7:9b:63:af:5a:c6:05:db:a2:
aa:f2:5d:df:e9:2d:c9:db:55:a7:b0:bb:37:90:1f:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:8E:EA:A4:E4:1E:FB:1E:48:8F:F0:B4:8B:C9:EB:06:17:5F:79
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/E8-O6qTkHvseSI_wtIvJ6wYXX3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:30c0::/48
2001:30c1:30c1::/48
2001:30c2:30c2::/48
2001:30c3:30c3::/48
Signature Algorithm: sha256WithRSAEncryption
66:16:27:a7:63:aa:57:db:f8:18:c9:f1:a3:36:9a:68:61:76:
d3:a5:e3:de:f4:db:c3:ab:9d:37:66:e0:fa:1e:31:eb:f1:48:
99:bc:ea:86:e6:81:e8:4f:5b:8e:26:ba:5f:ae:ae:df:18:8f:
c8:17:7d:02:a5:37:a4:f4:fa:57:9c:2f:cc:e0:9d:f9:c8:9f:
a6:68:5e:c4:66:f6:9d:1a:f9:9f:7e:e1:ab:a4:cc:7c:ac:02:
7c:e8:c7:64:27:c9:1f:69:48:8a:e9:79:59:e9:b0:2d:75:dd:
7f:80:2b:b5:bf:11:fb:24:1c:f6:8b:1c:d7:60:39:5c:39:de:
8f:25:1e:9d:0f:7a:1a:8b:0c:45:e9:6a:26:6d:42:b2:ac:26:
48:27:82:94:cf:bb:f0:ae:1b:88:e0:95:4a:75:b7:97:56:75:
52:ed:5a:4c:e1:33:f8:96:eb:3e:55:a3:9a:a7:fd:d3:cc:98:
6a:a6:3c:b9:7a:8b:3e:c0:58:b8:a1:e9:ce:56:14:2c:14:36:
43:aa:d8:28:84:44:65:f1:6f:cd:ee:3e:6b:67:77:4c:c3:43:
13:d6:12:6f:4c:70:79:1c:2f:8e:ee:dd:97:c5:95:cf:e0:69:
a3:42:8f:11:dd:10:e1:31:33:45:d0:b6:4d:03:92:aa:54:bd:
51:a1:71:2c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZjK5fKCxm836C2qWvBsgEhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi
YjllODEwHhcNMjUwODIxMDQzMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2NmOGVlYWE0ZTQxZWZiMWU0ODhmZjBiNDhiYzllYjA2MTc1Zjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LOawftvfeD2Xu6Pahaa489mxWaD
8L9xt5n27ibVnPmvdxorAGAX/JTy7gsfpG7APZMmr9+HYtUsLumGvYIa3833Cibl
9CzYXrx3cTbKX41j02DzRy40wbS7qpLWCrsebAZZP+a+jlAW4ojqmXyG+sOt+0Yz
z/tWoDZzC9Q+nn6Dm9VfeSvyDlhhaiONfUS9QN6X51CYWVn08Hkvx0ebVe8Fip4c
FAfRbwH9QLYcw6J2+GMFk2fh/Zpo2tRi4D/RxabuG7PEDRN7qttPDdngUZKzj5n1
F39lSM0ZVZfPwWf6driHwm33m2OvWsYF26Kq8l3f6S3J21WnsLs3kB/hSwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBPPjuqk5B77HkiP8LSLyesGF195MB8GA1UdIwQY
MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct
YjM0ZDY0OWNmYjdiLzEvRTgtTzZxVGtIdnNlU0lfd3RJdko2d1lYWDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi
LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEwwDDA
AwcAIAEwwTDBAwcAIAEwwjDCAwcAIAEwwzDDMA0GCSqGSIb3DQEBCwUAA4IBAQBm
FienY6pX2/gYyfGjNppoYXbTpePe9NvDq503ZuD6HjHr8UiZvOqG5oHoT1uOJrpf
rq7fGI/IF30CpTek9PpXnC/M4J35yJ+maF7EZvadGvmffuGrpMx8rAJ86MdkJ8kf
aUiK6XlZ6bAtdd1/gCu1vxH7JBz2ixzXYDlcOd6PJR6dD3oaiwxF6WombUKyrCZI
J4KUz7vwrhuI4JVKdbeXVnVS7VpM4TP4lus+VaOap/3TzJhqpjy5eos+wFi4oenO
VhQsFDZDqtgohERl8W/N7j5rZ3dMw0MT1hJvTHB5HC+O7t2XxZXP4GmjQo8R3RDh
MTNF0LZNA5KqVL1RoXEs
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:29 2025 by rpki-client