Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/a3komgsCxLhRcmMKYo5GI6ShhVs.roa
File: a3komgsCxLhRcmMKYo5GI6ShhVs.roa (raw, json)
Hash identifier: fM/pkR6hc+Rk8Y4Pv5WiOCAvHuO8a4L/ZF4n+86Y4cU=
Subject key identifier: 6B:79:28:9A:0B:02:C4:B8:51:72:63:0A:62:8E:46:23:A4:A1:85:5B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01999976C9078594C8801E7EB8BCC5074A3F
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/a3komgsCxLhRcmMKYo5GI6ShhVs.roa
Signing time: Tue 30 Sep 2025 07:12:02 +0000
ROA not before: Tue 30 Sep 2025 07:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205659
IP address blocks: 2a06:fe46::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:76:c9:07:85:94:c8:80:1e:7e:b8:bc:c5:07:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 30 07:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b79289a0b02c4b85172630a628e4623a4a1855b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:df:d9:0d:2e:e9:99:b6:0c:ca:63:47:e6:
93:05:e0:ea:34:54:c1:f9:23:5f:e0:2b:90:df:ab:
80:72:1c:32:8b:bc:9a:a6:72:4b:f2:05:89:93:15:
0d:81:55:53:b1:d6:67:cc:e8:a7:62:00:6a:72:a8:
49:7e:5c:95:32:9c:5b:d0:b1:db:40:39:b6:31:70:
79:38:3b:e7:d1:f1:ac:8b:f4:7a:f7:cf:60:53:06:
0f:09:e2:8f:15:59:2e:c5:1c:65:cd:1f:04:ef:d3:
5e:c7:ea:de:19:15:24:36:d1:88:76:91:0e:94:af:
3a:94:87:d6:e3:ff:87:bf:96:18:a9:b6:79:d2:4d:
33:95:3c:d4:32:22:0a:e0:8f:20:47:87:54:1b:34:
91:9b:e2:4d:f2:c8:c8:d5:09:a3:fa:9c:c0:a3:9d:
db:54:ec:76:8a:6c:b9:64:61:cf:c2:d7:c9:c3:d2:
ed:aa:06:a5:27:ee:c0:86:5e:8a:76:56:3a:e5:5a:
ce:43:e4:62:b7:9d:69:eb:3b:53:9d:93:c1:fd:01:
41:83:28:68:9e:94:52:61:f4:59:b8:23:85:9e:dd:
2a:df:93:c2:96:74:0a:3f:14:b9:b3:d4:4d:b0:75:
db:82:f8:ec:8b:46:6c:2a:ff:8d:3f:bc:9e:c5:c7:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:28:9A:0B:02:C4:B8:51:72:63:0A:62:8E:46:23:A4:A1:85:5B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/a3komgsCxLhRcmMKYo5GI6ShhVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe46::/32
Signature Algorithm: sha256WithRSAEncryption
80:f2:2d:92:23:92:a8:a7:47:d5:30:c3:45:f9:ab:da:1c:30:
40:eb:6c:69:bc:bb:fc:ea:f5:3b:f8:32:d3:e0:3c:4c:e2:57:
e9:40:48:16:c0:17:1d:17:dd:af:cc:f8:41:a5:8c:3a:f6:d4:
04:bb:1f:e7:0a:07:fe:03:7b:c5:7a:db:c1:a1:b0:14:5f:00:
a2:aa:80:bd:14:b6:8b:52:5a:f0:82:61:20:ec:bd:a3:9c:da:
bf:90:8b:c5:ed:1e:80:06:da:27:b2:83:fb:c6:7b:f3:c0:67:
18:df:7b:52:3e:f3:ec:29:df:a2:65:af:cc:f6:ee:e9:48:dc:
2c:9f:79:71:78:36:ab:b5:eb:a4:57:ef:e4:68:54:51:d5:a8:
f4:e9:a6:78:cb:3f:da:15:d9:9d:71:95:1a:86:b4:24:8d:e1:
96:86:1e:ab:fd:9f:43:b1:02:37:bf:87:df:d9:81:a2:10:60:
71:9e:1c:19:c2:d3:06:1e:b7:78:ac:c0:46:04:03:7c:ed:23:
4b:dc:e7:b4:76:0b:7c:59:ed:ac:30:e2:ae:a0:99:2a:f1:ea:
42:70:c0:34:3d:c5:b4:47:e2:e9:ef:ec:26:7e:21:ec:35:76:
03:0d:6e:ff:3a:73:a2:1f:4e:14:40:63:15:28:f8:47:33:53:
0d:d4:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:03 2025 by rpki-client