Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa
File: xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa (raw, json)
Hash identifier: +qRt4PQpWMMvJjygxcf9dSJhb+lYPMjbz4U/lEmLHfc=
Subject key identifier: C6:98:0E:DD:90:81:63:EA:A3:37:CA:05:B0:E5:84:3E:F5:02:BE:D1
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0199B81B0457836D6F19B0CD926ECE4F575A
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa
Signing time: Mon 06 Oct 2025 06:00:02 +0000
ROA not before: Mon 06 Oct 2025 06:00:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215283
IP address blocks: 2a07:5680:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:1b:04:57:83:6d:6f:19:b0:cd:92:6e:ce:4f:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Oct 6 06:00:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6980edd908163eaa337ca05b0e5843ef502bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5c:c6:2c:0e:61:b6:d6:c7:ab:30:8a:fe:52:
42:fb:ca:7c:ff:18:cc:31:a9:89:9c:97:67:30:30:
64:ca:25:cb:5e:af:35:46:0f:ef:7d:d5:92:da:1d:
9a:12:61:c0:0d:7f:e3:e3:ab:ff:2b:1d:62:06:da:
4b:e3:a5:7a:58:1e:e5:fc:24:90:ed:4d:c2:0b:17:
90:16:80:47:f8:67:b3:ca:7f:22:5c:6b:61:52:4e:
33:d0:58:b8:83:b3:9b:6a:b2:ad:40:f6:a6:3d:c9:
64:c8:7c:a5:c9:8c:12:d1:02:3c:82:ea:8b:9b:3f:
72:2a:25:94:75:bf:a5:d3:f2:0d:ec:2f:5a:65:7a:
85:f4:95:41:5f:93:db:e3:e0:2f:b1:fc:18:42:71:
88:03:d5:21:80:b5:69:46:02:98:52:26:04:bd:9d:
7f:81:b9:f0:aa:11:aa:3d:e5:e9:1a:88:c7:c7:0b:
c2:60:2e:70:dc:19:8f:4f:d3:05:b3:e6:8d:9b:51:
60:7a:73:48:d5:ca:6e:11:e5:e7:fa:e7:7a:a8:74:
be:4a:e1:f1:63:d4:cd:32:d2:68:f8:23:22:94:2f:
ad:45:c3:50:50:1c:10:5b:98:48:ed:d2:37:ac:1c:
c0:8a:ac:1e:08:0f:b6:55:8c:c2:6d:f8:b2:96:de:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:0E:DD:90:81:63:EA:A3:37:CA:05:B0:E5:84:3E:F5:02:BE:D1
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/xpgO3ZCBY-qjN8oFsOWEPvUCvtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5680:3::/48
Signature Algorithm: sha256WithRSAEncryption
21:8c:b6:d8:d2:76:30:25:34:90:89:b8:92:ad:47:36:c8:27:
68:97:b4:df:af:ee:7d:fe:6e:9a:88:d1:e9:07:6a:b9:58:cc:
ae:e0:f0:c4:b2:9e:47:f4:55:88:ab:1e:82:31:cd:10:5f:ee:
2d:ab:11:0d:ac:f6:0d:de:91:b4:9e:fe:62:92:98:e4:6a:2f:
25:fe:b0:b2:f1:b7:53:32:1b:1c:ec:c6:0d:0d:c6:b8:1b:97:
a2:fe:f0:39:67:c8:13:df:a0:29:d0:40:8e:9d:39:33:87:1a:
af:07:29:54:32:da:51:43:c6:bb:04:9b:26:ef:88:31:28:b6:
32:c2:80:17:25:2c:46:1c:b7:af:a5:3b:76:b3:dc:4e:30:f7:
ec:06:94:f6:06:b3:c0:02:e2:3f:bb:98:43:b8:40:92:a8:a0:
f3:35:eb:8a:dd:a9:9f:3f:f2:5f:cd:a8:47:d6:8f:f8:c0:c7:
16:75:f6:6f:e9:4e:2b:3c:ba:12:7f:4e:7f:95:73:cb:53:dc:
34:f1:db:8e:bc:7f:84:32:f3:8d:3c:32:28:cc:0d:b3:1f:fa:
8a:ca:5b:62:bf:ca:82:1b:b8:04:70:3b:50:7c:de:e3:e0:2a:
58:fa:13:f3:3d:0d:7c:e7:70:3b:f8:4e:b6:9a:90:43:98:93:
02:45:d7:48
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZm4GwRXg21vGbDNkm7OT1daMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm
ZTAzMWYwHhcNMjUxMDA2MDYwMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjk4MGVkZDkwODE2M2VhYTMzN2NhMDViMGU1ODQzZWY1MDJiZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91zGLA5httbHqzCK/lJC+8p8/xjM
MamJnJdnMDBkyiXLXq81Rg/vfdWS2h2aEmHADX/j46v/Kx1iBtpL46V6WB7l/CSQ
7U3CCxeQFoBH+Gezyn8iXGthUk4z0Fi4g7ObarKtQPamPclkyHylyYwS0QI8guqL
mz9yKiWUdb+l0/IN7C9aZXqF9JVBX5Pb4+AvsfwYQnGIA9UhgLVpRgKYUiYEvZ1/
gbnwqhGqPeXpGojHxwvCYC5w3BmPT9MFs+aNm1FgenNI1cpuEeXn+ud6qHS+SuHx
Y9TNMtJo+CMilC+tRcNQUBwQW5hI7dI3rBzAiqweCA+2VYzCbfiylt7BUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMaYDt2QgWPqozfKBbDlhD71Ar7RMB8GA1UdIwQY
MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt
ZDE4YmFiOTUxNWJmLzEveHBnTzNaQ0JZLXFqTjhvRnNPV0VQdlVDdnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm
LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdWgAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAhjLbY0nYwJTSQibiSrUc2yCdol7Tfr+59/m6a
iNHpB2q5WMyu4PDEsp5H9FWIqx6CMc0QX+4tqxENrPYN3pG0nv5ikpjkai8l/rCy
8bdTMhsc7MYNDca4G5ei/vA5Z8gT36Ap0ECOnTkzhxqvBylUMtpRQ8a7BJsm74gx
KLYywoAXJSxGHLevpTt2s9xOMPfsBpT2BrPAAuI/u5hDuECSqKDzNeuK3amfP/Jf
zahH1o/4wMcWdfZv6U4rPLoSf05/lXPLU9w08duOvH+EMvONPDIozA2zH/qKylti
v8qCG7gEcDtQfN7j4CpY+hPzPQ1853A7+E62mpBDmJMCRddI
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:03 2025 by rpki-client