Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa
File: Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa (raw, json)
Hash identifier: K5S02B/Gi2bHkxhJ8aF28VCnMZBi3s2rFauNCvnOiEw=
Subject key identifier: 1E:7E:AD:E7:03:79:0B:32:F6:4E:9A:51:6B:DC:AC:0A:95:31:10:9E
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 0198A371283150AB598F1DC877532944F337
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa
Signing time: Wed 13 Aug 2025 12:39:18 +0000
ROA not before: Wed 13 Aug 2025 12:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199553
IP address blocks: 2a09:2940::/29 maxlen: 48
2a0a:e5c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:71:28:31:50:ab:59:8f:1d:c8:77:53:29:44:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Aug 13 12:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e7eade703790b32f64e9a516bdcac0a9531109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:8f:60:0a:21:13:a5:f0:21:dc:92:bf:e1:
00:6c:5d:bf:52:da:a1:16:75:93:88:3f:de:2f:ab:
4c:6d:1f:5c:e4:13:1b:b9:43:ff:74:7e:e8:02:9d:
32:0e:81:09:ab:55:cd:0e:15:29:23:e1:73:cd:63:
ca:e7:e6:17:dd:f3:6a:a4:f7:2b:33:d7:36:e7:57:
73:6b:fb:5d:83:5f:39:42:f0:5b:b0:81:85:82:cc:
1c:c2:0a:6f:63:b4:2f:4b:c5:24:17:1f:06:a7:f8:
ff:bd:b2:87:c5:5f:dc:38:a4:94:26:aa:15:b0:a3:
4a:0d:db:d3:bb:24:06:9b:dc:b3:19:3b:68:a9:29:
ab:60:59:24:c8:83:82:77:fc:73:38:09:04:0c:5c:
36:f7:36:bc:d5:1e:22:af:08:f1:4d:ff:30:53:a1:
48:f1:c4:0d:6f:01:b6:6f:73:f8:bf:77:ad:a1:40:
1c:6c:25:7e:a4:c1:58:d7:b2:9a:e2:d6:8c:9b:cc:
15:91:72:2d:7b:c0:06:2b:49:fd:a1:e9:5a:e5:cb:
07:2a:5b:6f:bc:dc:56:77:28:da:87:df:3a:0f:96:
b5:84:97:42:42:ab:dc:ec:b5:19:88:92:8c:05:ce:
64:6b:05:c0:73:71:9e:97:a2:9f:ab:a7:8d:d1:81:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:AD:E7:03:79:0B:32:F6:4E:9A:51:6B:DC:AC:0A:95:31:10:9E
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:a1:94:4f:fe:5c:4a:6f:fc:5b:9a:59:72:56:22:5c:92:00:
bf:f0:63:ff:ce:1a:79:56:d7:fc:3f:22:83:d6:89:c0:a5:42:
73:22:b1:86:2d:f4:09:07:89:15:8d:30:0e:97:fb:93:cc:b8:
14:1f:71:23:0e:21:35:51:65:ee:df:da:bb:5b:df:c5:30:8e:
53:a9:00:aa:06:03:6b:61:42:d3:ec:b9:92:7b:80:73:93:2f:
70:14:9b:81:c9:e0:5b:f8:22:86:b3:96:02:d3:dc:62:a4:da:
a4:a8:fa:d2:c4:90:25:12:a2:71:13:00:f0:85:89:f5:b3:0f:
2e:26:a0:79:bd:1c:86:60:bd:06:45:f2:36:88:50:7f:fa:8a:
4b:30:fe:2c:e3:5e:ff:79:0e:ee:c9:1b:12:c0:c7:10:51:e1:
49:3b:8c:9c:82:da:14:50:47:db:c8:ce:42:18:a8:16:cb:46:
18:ea:75:76:b9:d0:17:bd:68:5f:c0:81:3b:3d:6f:05:79:04:
dd:20:fa:74:3d:6a:7a:d5:63:6a:22:75:43:5e:35:4a:5b:02:
b1:2f:e3:e7:57:ac:19:7b:b8:49:e2:42:c8:3b:22:53:27:3e:
44:e1:f7:c0:3b:0f:a4:35:ab:e4:ab:ca:ab:79:d8:97:dc:a6:
15:cb:86:f1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZijcSgxUKtZjx3Id1MpRPM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YmZjNWExNzI2NTRkZDYwMDlkYjFkODJkOTJmZmFmNzEy
MzQxMjAwHhcNMjUwODEzMTIzOTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTdlYWRlNzAzNzkwYjMyZjY0ZTlhNTE2YmRjYWMwYTk1MzExMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/+PYAohE6XwIdySv+EAbF2/Utqh
FnWTiD/eL6tMbR9c5BMbuUP/dH7oAp0yDoEJq1XNDhUpI+FzzWPK5+YX3fNqpPcr
M9c251dza/tdg185QvBbsIGFgswcwgpvY7QvS8UkFx8Gp/j/vbKHxV/cOKSUJqoV
sKNKDdvTuyQGm9yzGTtoqSmrYFkkyIOCd/xzOAkEDFw29za81R4irwjxTf8wU6FI
8cQNbwG2b3P4v3etoUAcbCV+pMFY17Ka4taMm8wVkXIte8AGK0n9oela5csHKltv
vNxWdyjah986D5a1hJdCQqvc7LUZiJKMBc5kawXAc3Gel6Kfq6eN0YGRWQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB5+recDeQsy9k6aUWvcrAqVMRCeMB8GA1UdIwQY
MBaAFJa/xaFyZU3WAJ2x2C2S/69xI0EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmIt
YmZmYjc1N2MzMTM0LzEvSG42dDV3TjVDekwyVHBwUmE5eXNDcFV4RUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zNjMwY2ItZWJlYy00ZDg2LWIxMmItYmZmYjc1N2MzMTM0
LzEvbHJfRm9YSmxUZFlBbmJIWUxaTF9yM0VqUVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgkpQAMF
AyoK5cAwDQYJKoZIhvcNAQELBQADggEBAE+hlE/+XEpv/FuaWXJWIlySAL/wY//O
GnlW1/w/IoPWicClQnMisYYt9AkHiRWNMA6X+5PMuBQfcSMOITVRZe7f2rtb38Uw
jlOpAKoGA2thQtPsuZJ7gHOTL3AUm4HJ4Fv4IoazlgLT3GKk2qSo+tLEkCUSonET
APCFifWzDy4moHm9HIZgvQZF8jaIUH/6iksw/izjXv95Du7JGxLAxxBR4Uk7jJyC
2hRQR9vIzkIYqBbLRhjqdXa50Be9aF/AgTs9bwV5BN0g+nQ9anrVY2oidUNeNUpb
ArEv4+dXrBl7uEniQsg7IlMnPkTh98A7D6Q1q+Sryqt52JfcphXLhvE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:50 2025 by rpki-client