Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/rtetBP97DUA2lCqt3_qex3wy1cw.roa
File: rtetBP97DUA2lCqt3_qex3wy1cw.roa (raw, json)
Hash identifier: wIFAeHjq7EkgeOiBpciajSkZ9QKt8Kq/92+zr7+OjbA=
Subject key identifier: AE:D7:AD:04:FF:7B:0D:40:36:94:2A:AD:DF:FA:9E:C7:7C:32:D5:CC
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 0199A9D8D0546BAF17427F6B24B8513F0893
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/rtetBP97DUA2lCqt3_qex3wy1cw.roa
Signing time: Fri 03 Oct 2025 11:33:02 +0000
ROA not before: Fri 03 Oct 2025 11:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33992
IP address blocks: 2a07:1740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:d8:d0:54:6b:af:17:42:7f:6b:24:b8:51:3f:08:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Oct 3 11:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aed7ad04ff7b0d4036942aaddffa9ec77c32d5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:63:fd:69:28:ea:64:44:72:8a:34:0e:fe:
24:af:88:3e:4e:6d:4d:97:49:5c:99:53:c9:42:82:
9a:83:e8:78:af:ab:f6:02:8a:e1:15:8e:b5:d3:d0:
d5:89:2d:8f:0d:cb:ef:e1:93:80:de:c4:8b:84:20:
a9:a6:c7:e8:ea:c8:01:b7:de:d5:05:61:c7:c7:b5:
98:5e:ea:82:bc:f7:95:62:18:ee:a4:bd:1c:6b:58:
5f:00:17:7e:28:66:07:4b:48:25:ff:41:76:50:a5:
0a:b5:30:23:1b:8a:d6:53:69:a6:04:29:6c:3e:85:
81:e7:9a:0d:5e:df:52:87:5b:a2:d3:2f:fc:4f:37:
7a:45:fc:1d:1c:2a:66:60:61:a4:bb:a3:08:06:58:
48:9b:5c:14:b1:d9:d4:aa:58:82:99:fa:ae:29:b6:
88:09:b9:03:1c:dc:e8:f2:76:00:93:62:77:a4:f1:
f3:fd:43:b7:54:20:18:1a:16:78:6f:2a:81:dd:4c:
1d:41:24:30:11:79:a3:65:ba:c7:4f:8a:a9:d8:3b:
60:4a:1c:05:ec:ad:f4:cf:3e:13:0a:91:c9:d3:4c:
91:49:e5:c5:05:ad:a8:fa:e7:13:e1:72:cf:a5:9b:
c3:d1:db:4d:36:72:02:43:05:d2:e5:6e:70:ba:d5:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:AD:04:FF:7B:0D:40:36:94:2A:AD:DF:FA:9E:C7:7C:32:D5:CC
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/rtetBP97DUA2lCqt3_qex3wy1cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:1740::/29
Signature Algorithm: sha256WithRSAEncryption
60:d3:83:4a:4f:ce:92:b4:2c:7b:d0:50:90:ce:42:07:0a:06:
dc:f0:22:b1:91:3b:25:b1:f7:48:3a:22:98:a9:d8:5e:13:e0:
a5:9c:44:5c:15:28:cf:64:a2:19:bb:14:13:91:26:01:ea:74:
f5:d5:c6:49:41:e6:a3:c5:5d:ef:ce:64:9a:51:8c:15:9f:23:
55:a1:2c:93:7b:8a:80:57:ca:f8:7e:e3:39:ad:56:9e:8d:3a:
10:56:68:cd:db:d7:cb:76:3b:93:da:0f:8d:08:51:f6:6e:08:
8f:0a:b0:74:8f:77:f0:cd:62:29:4d:73:78:9c:98:46:29:58:
99:a1:65:74:eb:2e:f7:c6:e5:20:85:c7:ce:ff:6d:d4:dc:dd:
65:f2:2d:93:36:93:ae:b9:14:2a:b9:82:8c:74:da:8e:f8:5d:
9c:ce:be:30:2a:22:6f:63:66:c6:68:c4:de:d0:b0:74:c8:8a:
02:d8:82:7f:19:67:83:71:73:b6:a2:b8:31:eb:19:3a:f6:e2:
82:19:fa:3e:9a:0f:cc:ab:cd:65:b7:f8:e0:37:26:bd:e8:c0:
75:58:1e:89:09:68:ed:2b:b3:8a:70:3e:8e:b9:28:20:07:a3:
96:30:b1:a9:5c:e7:35:52:b9:55:f6:7e:0c:2b:25:26:a6:4f:
72:42:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:45 2025 by rpki-client