Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xy_J0ROxeO0huKk7onCsjN7UNOQ.roa
File: xy_J0ROxeO0huKk7onCsjN7UNOQ.roa (raw, json)
Hash identifier: R5m+5yIeBjbxBtHtLNr/BLRLpreLmmWcMrdmSiu877E=
Subject key identifier: C7:2F:C9:D1:13:B1:78:ED:21:B8:A9:3B:A2:70:AC:8C:DE:D4:34:E4
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01999975E061E870A80B70C2D3DAB0668E51
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xy_J0ROxeO0huKk7onCsjN7UNOQ.roa
Signing time: Tue 30 Sep 2025 07:11:03 +0000
ROA not before: Tue 30 Sep 2025 07:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201341
IP address blocks: 2a06:fe43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:75:e0:61:e8:70:a8:0b:70:c2:d3:da:b0:66:8e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 30 07:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c72fc9d113b178ed21b8a93ba270ac8cded434e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:0a:d3:db:24:c3:f6:6a:d8:b6:53:fd:d4:
c0:8c:9a:d5:eb:c2:e0:ff:c9:d7:8c:cf:8b:4a:c4:
23:e1:ee:01:12:67:57:23:76:80:7a:42:a3:2c:4c:
cc:a6:3e:73:8e:65:91:02:ae:02:45:03:f0:78:a6:
fe:51:3c:12:0c:9f:c2:37:57:5e:8b:e8:ad:65:c3:
ed:50:64:df:50:83:43:ac:68:fc:69:57:ae:79:4b:
f1:d3:93:7b:a7:60:4b:56:74:dd:e7:f6:6b:46:81:
77:70:30:7c:e1:fe:35:33:b4:1a:c4:56:9c:f1:ab:
94:f5:e6:9f:1e:7d:ee:1f:c5:ff:59:7a:79:b9:44:
c3:9b:2b:1c:b2:7c:b7:64:38:b4:87:d8:78:88:cf:
71:d6:40:bf:a4:2d:6f:49:d9:08:9f:26:4b:aa:ce:
99:fb:0e:f6:d4:41:bf:72:83:ae:46:10:da:21:f9:
51:73:3b:61:51:a1:cd:26:cf:49:a4:3d:e0:37:e6:
40:b2:58:03:35:aa:aa:f1:af:e4:39:9d:b4:f2:71:
c3:ba:c2:f7:89:9d:3c:67:39:bb:10:22:49:da:39:
64:ce:de:75:cd:bc:7a:6c:a2:6a:86:98:76:f1:0d:
a7:94:33:3b:24:dc:31:11:25:82:14:f8:a7:b9:48:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:C9:D1:13:B1:78:ED:21:B8:A9:3B:A2:70:AC:8C:DE:D4:34:E4
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xy_J0ROxeO0huKk7onCsjN7UNOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe43::/32
Signature Algorithm: sha256WithRSAEncryption
61:a4:d2:e2:a5:3b:c8:10:80:32:46:91:5d:d4:37:44:0f:9d:
5b:0c:9f:13:76:86:de:62:37:43:e3:6a:97:8b:ff:d0:95:35:
d1:e5:4b:3f:f3:b1:22:23:1f:52:cb:b0:d4:83:73:cc:88:78:
25:a3:97:eb:3a:8c:21:9a:41:50:dd:ab:bb:d0:50:d5:1c:f4:
2d:e3:d4:5d:58:a8:03:26:ce:db:f2:6e:4b:29:9a:bc:46:dc:
bb:a6:cf:48:de:0b:76:ef:3c:de:6d:9e:f1:ab:a5:70:c3:d8:
13:c3:6b:a6:a8:1d:3a:61:59:73:d8:7b:6e:4f:68:dc:1d:74:
f4:e6:9b:83:be:e1:e6:ba:2f:e7:7e:2a:1e:50:16:24:96:69:
e4:fb:59:61:c3:be:e9:1c:c7:62:84:66:e7:91:0f:93:4d:5b:
71:3e:b0:b3:81:fe:9c:5f:14:11:9d:8b:48:ac:8c:48:34:89:
3d:f0:ee:7a:8e:60:86:30:76:6c:d3:03:32:60:a6:9f:0e:76:
08:cf:88:ec:16:22:53:69:26:8a:89:55:53:12:15:47:26:55:
54:b9:6f:e0:a5:b6:a7:63:4d:e2:ff:36:e2:f8:35:84:3f:b5:
cb:32:80:ca:1f:93:3a:fb:29:67:1e:f3:3c:0c:ee:23:99:2e:
27:1b:ee:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZmZdeBh6HCoC3DC09qwZo5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwOTMwMDcxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzJmYzlkMTEzYjE3OGVkMjFiOGE5M2JhMjcwYWM4Y2RlZDQzNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgK09skw/Zq2LZT/dTAjJrV68Lg
/8nXjM+LSsQj4e4BEmdXI3aAekKjLEzMpj5zjmWRAq4CRQPweKb+UTwSDJ/CN1de
i+itZcPtUGTfUINDrGj8aVeueUvx05N7p2BLVnTd5/ZrRoF3cDB84f41M7QaxFac
8auU9eafHn3uH8X/WXp5uUTDmyscsny3ZDi0h9h4iM9x1kC/pC1vSdkInyZLqs6Z
+w721EG/coOuRhDaIflRczthUaHNJs9JpD3gN+ZAslgDNaqq8a/kOZ208nHDusL3
iZ08Zzm7ECJJ2jlkzt51zbx6bKJqhph28Q2nlDM7JNwxESWCFPinuUi+4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMcvydETsXjtIbipO6JwrIze1DTkMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEveHlfSjBST3hlTzBodUtrN29uQ3NqTjdVTk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgb+QzAN
BgkqhkiG9w0BAQsFAAOCAQEAYaTS4qU7yBCAMkaRXdQ3RA+dWwyfE3aG3mI3Q+Nq
l4v/0JU10eVLP/OxIiMfUsuw1INzzIh4JaOX6zqMIZpBUN2ru9BQ1Rz0LePUXVio
AybO2/JuSymavEbcu6bPSN4Ldu883m2e8aulcMPYE8NrpqgdOmFZc9h7bk9o3B10
9Oabg77h5rov534qHlAWJJZp5PtZYcO+6RzHYoRm55EPk01bcT6ws4H+nF8UEZ2L
SKyMSDSJPfDueo5ghjB2bNMDMmCmnw52CM+I7BYiU2kmiolVUxIVRyZVVLlv4KW2
p2NN4v824vg1hD+1yzKAyh+TOvspZx7zPAzuI5kuJxvu4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:10 2025 by rpki-client