Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa
File: J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa (raw, json)
Hash identifier: 1VJlid4hfVo+Bv+c5fIKw8LhPKdHBzjl0S3JZl+3O5c=
Subject key identifier: 27:C6:BC:98:CC:EC:06:29:AC:AB:AA:07:C0:7C:79:6C:81:D6:0F:86
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0199B81B052422FA91DC6A78A29BFDDD0237
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa
Signing time: Mon 06 Oct 2025 06:00:02 +0000
ROA not before: Mon 06 Oct 2025 06:00:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216429
IP address blocks: 2a07:5680:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:1b:05:24:22:fa:91:dc:6a:78:a2:9b:fd:dd:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Oct 6 06:00:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c6bc98ccec0629acabaa07c07c796c81d60f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:0e:3d:85:d1:18:ca:35:f1:7e:ab:41:a8:
06:28:0a:c4:ab:63:5b:21:4e:11:89:c1:b0:fe:3f:
91:df:ee:a9:38:63:e8:a7:48:79:e0:96:18:7e:ee:
61:79:60:d5:3a:ee:57:60:8a:64:c6:c2:66:47:51:
46:27:10:58:7a:ee:65:9e:e5:3a:c6:c6:fa:de:1e:
8e:f2:f7:80:40:d5:7a:c5:39:9e:db:c6:cf:93:57:
2b:c0:8e:71:a8:a9:72:d0:88:ef:e2:d4:f1:43:9a:
15:84:40:39:e9:36:30:99:ea:a3:39:4b:6c:ab:5b:
04:bc:7c:41:5f:3e:e9:8c:e0:0c:7e:40:02:45:b4:
35:db:08:94:ea:87:58:6a:93:37:91:03:9b:d3:6e:
71:c3:d3:78:87:a7:c6:c9:6d:cb:de:e1:c5:3c:f8:
86:a9:a7:bf:71:a0:52:32:8e:9b:0b:c7:fa:f2:69:
78:a2:d2:ea:ff:87:af:ef:1f:cf:4c:4e:50:8d:16:
39:50:4e:db:a8:d6:23:12:f3:3a:39:3d:e5:28:79:
f3:6c:77:c0:03:39:db:29:38:64:5a:06:9a:05:b9:
3a:6a:4b:35:5d:6e:f6:1f:90:2b:ed:eb:72:0f:64:
93:04:84:0f:e9:a4:24:10:21:7f:a5:fc:1d:6f:3f:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C6:BC:98:CC:EC:06:29:AC:AB:AA:07:C0:7C:79:6C:81:D6:0F:86
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/J8a8mMzsBimsq6oHwHx5bIHWD4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5680:4::/48
Signature Algorithm: sha256WithRSAEncryption
74:53:df:ae:3f:ea:51:79:0f:ce:32:eb:6b:26:78:58:52:7e:
34:97:5f:91:ef:e3:f9:e5:21:9c:74:f0:b9:53:4f:fe:20:23:
4b:bd:1e:67:99:ce:3f:3a:14:28:07:98:a7:6a:cf:93:96:5b:
c1:90:15:e2:67:e7:0e:01:eb:b8:ce:c3:20:cf:53:cc:e0:cb:
2b:69:fb:c1:c0:f5:0d:a4:54:5f:1c:a4:db:7e:ac:13:1f:7c:
f4:a4:6d:b2:2e:ac:86:f6:ee:5c:14:99:ae:51:dd:a7:ea:bb:
9b:a5:01:eb:27:2d:02:5c:b7:ef:33:f1:99:91:29:03:7d:98:
d8:70:00:d8:4e:08:e3:68:88:ac:85:ff:78:e6:81:74:17:30:
67:f6:3d:47:86:dc:13:6f:e5:c3:31:32:7f:14:2b:39:a4:83:
3c:21:fe:c3:4b:35:31:f4:6d:e7:8a:0a:51:d9:a7:d5:53:98:
c3:ac:4d:10:b4:42:34:6d:ca:cb:a0:12:16:7b:1d:84:70:ae:
b7:8b:d6:0e:38:e5:7e:ce:51:ac:6d:ac:ba:a8:b7:51:9d:f8:
c3:98:36:87:34:ef:e4:6a:f8:8c:ef:17:68:d3:8e:22:bc:2a:
bf:04:f4:cf:3e:d1:59:0e:a0:22:c1:65:f3:9a:08:0d:f5:4b:
3b:6b:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:05 2025 by rpki-client