Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yxe7My0NcRZq-SpiFdXNNwBJYL4.roa
File: yxe7My0NcRZq-SpiFdXNNwBJYL4.roa (raw, json)
Hash identifier: 0k/Fz33zsau4ewiit92jbfHfEKu+7iJrH4IQAHIlxUc=
Subject key identifier: CB:17:BB:33:2D:0D:71:16:6A:F9:2A:62:15:D5:CD:37:00:49:60:BE
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0198C84B716AC3531E0DF70932DCDEC53011
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yxe7My0NcRZq-SpiFdXNNwBJYL4.roa
Signing time: Wed 20 Aug 2025 16:24:04 +0000
ROA not before: Wed 20 Aug 2025 16:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 2001:30c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:4b:71:6a:c3:53:1e:0d:f7:09:32:dc:de:c5:30:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Aug 20 16:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb17bb332d0d71166af92a6215d5cd37004960be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:e4:e9:13:f0:71:80:0d:c4:4d:80:32:20:
27:17:e4:ba:d9:c0:e4:d0:7d:6e:e4:50:66:2f:ee:
23:90:fa:1b:d3:10:ed:a2:a0:0d:e0:0f:de:3e:84:
b1:02:df:0d:81:2f:14:40:bd:ae:a2:47:2d:33:5c:
81:5b:c4:04:da:b9:ff:dc:62:a9:12:61:f4:d6:fc:
31:ad:12:61:da:06:b7:3f:a9:53:dd:fb:22:fb:3a:
26:b5:4c:de:a1:5b:60:ba:f3:78:57:d1:0b:1c:7a:
72:90:64:5a:f1:e0:7c:19:9b:a4:ba:0f:56:0e:5a:
9f:a8:37:20:9d:29:79:69:db:ed:56:ee:57:38:da:
bb:0d:0d:a9:9c:51:d3:da:16:04:fe:25:d2:56:99:
9c:70:6f:81:ba:04:4e:5e:31:83:5e:54:23:d8:61:
3a:32:df:78:f0:80:fa:ef:9b:98:ee:5e:35:23:d5:
55:d7:7e:7a:dc:a4:e4:6d:07:10:5f:1d:87:aa:07:
38:48:e9:b9:1b:d5:5f:e4:83:f3:2c:30:29:74:c2:
f9:f7:3e:f8:9d:1f:48:a8:0a:42:a6:7d:fa:6c:ae:
4b:2e:4f:9b:54:09:80:21:33:7b:d5:90:62:20:de:
37:d2:8a:44:4d:42:bc:49:31:8e:39:0c:be:f3:c7:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:BB:33:2D:0D:71:16:6A:F9:2A:62:15:D5:CD:37:00:49:60:BE
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/yxe7My0NcRZq-SpiFdXNNwBJYL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2d:d8:9b:e4:c4:25:d1:37:5c:0b:a4:28:43:7e:80:b2:b7:
36:25:1b:93:05:f9:4d:c4:8f:06:e7:6c:6c:d1:4d:5e:da:8a:
44:ac:7e:11:43:1b:0e:b6:04:4e:a8:ab:b8:1e:3f:52:e2:bd:
e5:01:9b:ce:15:52:b9:3e:e2:90:91:46:ba:db:15:a7:7b:50:
20:54:cd:93:ee:bd:bd:36:71:ee:4d:d8:5e:0b:4e:97:d2:57:
60:91:0f:d7:54:52:93:3e:8b:ad:20:a8:60:81:7a:c7:50:67:
9c:34:8c:a6:76:20:d5:05:b3:e7:30:93:26:22:f8:62:8c:66:
ed:9b:d3:f6:71:f1:37:5d:1c:2a:00:66:e7:ba:6f:55:83:c1:
75:60:60:dc:1c:2a:8b:b7:9e:01:17:94:7b:94:62:15:09:18:
4d:43:c5:29:ac:14:8a:15:35:1f:56:2c:2f:5e:58:7f:7e:a8:
25:01:1b:9d:4e:d5:97:80:6f:1b:22:74:21:20:c0:49:04:00:
8c:73:86:de:31:3a:8f:62:6a:49:37:98:d6:7b:c7:78:18:b0:
32:f8:72:e4:1c:bd:b9:0c:5e:79:63:77:9c:31:e1:9e:16:1c:
5b:c8:19:64:39:fc:7a:38:a9:0e:73:bf:70:4f:a0:8a:c9:48:
46:ab:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:33 2025 by rpki-client