Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V0NaliFAeCzl23xzqijO2k80Xx0.roa
File: V0NaliFAeCzl23xzqijO2k80Xx0.roa (raw, json)
Hash identifier: KuUSIniQJOTJ6OijNOaEhx733O+EVokk2J1NS94h0Ws=
Subject key identifier: 57:43:5A:96:21:40:78:2C:E5:DB:7C:73:AA:28:CE:DA:4F:34:5F:1D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199A3A809BA25F6AE0DF5A9977B9FF3CEA3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V0NaliFAeCzl23xzqijO2k80Xx0.roa
Signing time: Thu 02 Oct 2025 06:42:02 +0000
ROA not before: Thu 02 Oct 2025 06:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212294
IP address blocks: 2a0f:b240:700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a3:a8:09:ba:25:f6:ae:0d:f5:a9:97:7b:9f:f3:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 2 06:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57435a962140782ce5db7c73aa28ceda4f345f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:55:cc:a1:61:73:cf:3f:2b:40:3a:37:80:
8f:b7:aa:01:d0:f2:ad:9e:28:54:f9:b3:6e:43:61:
76:6a:67:fc:42:57:cb:40:66:a3:16:62:4a:fb:71:
b0:d6:6f:16:c0:70:71:09:f5:9a:8e:ee:f9:ea:e3:
0b:b3:1a:48:a5:66:e0:fe:9c:b2:f7:4f:f1:28:91:
d4:9b:7e:07:c1:4f:c5:33:14:07:5a:c8:fb:0a:f2:
e3:af:58:63:bd:08:cf:22:3f:27:fc:6b:02:12:ae:
28:44:d4:0c:24:0e:ea:d8:ac:ed:e8:11:cd:3f:9e:
51:8a:d3:fa:40:b3:32:3b:1e:c9:f7:75:31:99:7d:
f1:a5:15:e9:c9:48:44:1e:20:fb:ef:a0:52:78:fe:
1b:13:30:d1:1e:5b:d2:7d:2c:11:c8:0e:4c:78:23:
f7:96:df:dd:46:28:96:5b:1b:c3:10:e4:a0:93:6c:
9f:0e:45:ed:38:22:c1:cc:0d:99:21:68:b7:4a:56:
8f:e6:e9:12:87:c4:3c:05:f7:fd:8b:ca:a3:36:f3:
57:8e:6f:94:53:fc:0b:92:d1:ef:b6:57:90:25:04:
35:46:a4:b9:f9:b0:1d:2b:d4:0c:d1:02:0c:46:e1:
42:cf:9f:f4:60:a9:58:e8:aa:2c:d3:4e:8f:38:f7:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:5A:96:21:40:78:2C:E5:DB:7C:73:AA:28:CE:DA:4F:34:5F:1D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/V0NaliFAeCzl23xzqijO2k80Xx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:700::/40
Signature Algorithm: sha256WithRSAEncryption
2e:d7:d5:8e:60:67:8f:2d:fa:a4:d6:d8:3f:08:93:cd:28:c9:
a1:a7:f0:bc:9f:1a:d5:56:c5:94:7f:8c:f0:e2:37:77:d8:88:
35:8a:fa:e4:7b:35:34:f8:72:93:9c:88:31:b9:2a:29:46:5f:
a8:ef:24:37:61:00:a1:85:5d:5a:e3:79:36:99:01:c9:ec:3a:
a8:10:36:3c:26:5a:40:06:00:72:16:31:d9:97:5d:0f:2c:7e:
1b:4d:e4:98:fe:5a:48:54:f7:b2:76:d5:33:69:01:16:c3:3d:
da:c2:54:32:fb:52:37:cd:0e:4f:db:27:32:b4:dc:40:81:d7:
e9:dc:fe:7f:55:5f:4a:6b:e1:17:f1:a4:ea:9a:12:e0:74:61:
97:82:83:0f:c3:60:fe:d0:74:77:7f:a7:41:3d:06:f8:56:60:
ed:57:b8:c0:aa:5c:27:92:80:02:3d:f0:70:d5:c2:53:54:47:
06:15:35:c8:9e:66:b1:d7:8f:df:b3:62:16:2a:e1:6b:54:90:
de:e0:8f:f2:f4:89:eb:af:94:8c:45:7a:66:91:6e:6d:5d:a4:
89:14:25:29:1a:9e:07:59:ff:86:10:9d:cb:1d:6f:85:55:b8:
00:19:83:13:2d:82:d7:82:b8:b2:5b:7e:91:5a:6e:6e:d8:54:
8c:4c:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:35 2025 by rpki-client