Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1TO3wwmstlJI_xpUfl9kicvHbH8.roa
File: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (raw, json)
Hash identifier: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=
Subject key identifier: D5:33:B7:C3:09:AC:B6:52:48:FF:1A:54:7E:5F:64:89:CB:C7:6C:7F
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0198CD5AEAA5C9D14C1FFA61EB0BD66D2467
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1TO3wwmstlJI_xpUfl9kicvHbH8.roa
Signing time: Thu 21 Aug 2025 15:59:04 +0000
ROA not before: Thu 21 Aug 2025 15:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 2a03:9381::/48 maxlen: 48
2a03:9381:5::/48 maxlen: 48
2a03:9381:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:5a:ea:a5:c9:d1:4c:1f:fa:61:eb:0b:d6:6d:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 21 15:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d533b7c309acb65248ff1a547e5f6489cbc76c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:d7:8b:cb:b9:b0:7a:fc:99:ea:8b:55:b7:
b8:af:55:c8:70:70:d9:19:ad:d6:6b:0d:c2:33:4e:
de:8e:88:b7:28:f7:6a:f9:78:58:8c:45:99:8b:81:
ee:b6:be:28:d9:4d:1d:ba:17:0b:d1:79:e6:80:73:
75:67:6f:ab:33:d1:f3:63:fe:d4:d0:10:fc:a3:71:
64:09:f3:12:bb:ca:10:c4:c0:84:d7:9a:a8:3b:f6:
f8:68:e3:be:3e:69:49:58:3f:5c:7a:8b:3f:52:76:
7f:93:71:fc:a9:c1:d4:b3:bf:8d:dd:79:42:b0:ff:
73:87:8f:c5:36:e3:2e:43:7e:1e:00:76:58:a4:18:
f8:6b:7f:ba:6a:35:d1:5c:8f:ee:2a:3e:ac:55:b3:
b2:f5:1e:77:fd:bb:6c:ff:5e:2b:fc:12:1b:ea:da:
77:7b:76:b9:85:12:60:15:e8:95:6f:8f:4f:d3:6c:
12:c6:56:08:06:0a:55:fb:9f:52:f1:2d:a1:6b:05:
90:03:27:f9:5c:7d:1d:ec:b8:9e:6e:ab:ed:c4:2e:
11:6b:8b:56:d0:5c:54:21:ac:49:42:3b:76:fc:89:
c7:29:2e:75:39:4b:60:63:1a:f3:30:fa:13:18:34:
f0:3e:72:ba:58:0a:5c:e4:96:3f:04:3a:71:6c:5a:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:B7:C3:09:AC:B6:52:48:FF:1A:54:7E:5F:64:89:CB:C7:6C:7F
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/1TO3wwmstlJI_xpUfl9kicvHbH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9381::/48
2a03:9381:5::-2a03:9381:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:db:8b:c2:73:b5:43:db:1a:0f:b9:97:29:ab:38:25:28:fa:
13:bb:78:b3:72:32:dc:ea:1c:70:d1:bc:b6:40:06:a2:1e:da:
42:98:27:a2:10:18:c7:7b:0d:b4:30:d8:bf:8b:d7:84:dd:71:
1c:da:54:b9:45:54:6a:51:9b:e8:5a:ff:cf:29:34:ae:df:56:
9e:1f:a5:2f:73:fe:e5:a1:43:0a:72:4f:4b:e8:8d:1a:e2:6b:
04:4e:50:e3:71:31:ba:4a:87:01:2c:66:a0:0e:24:24:e0:0d:
93:ec:cd:91:9e:40:9a:68:6e:b8:a3:86:43:79:91:74:48:53:
db:31:09:85:e3:05:db:12:15:12:3d:b0:6e:b1:46:23:7f:ec:
1b:10:25:de:43:da:4d:61:dc:be:93:01:a4:d5:85:b9:e1:01:
ce:b1:64:ae:32:5b:cb:ee:4d:86:79:f4:55:78:fe:a0:f9:93:
63:29:30:37:f0:16:e6:eb:ee:e0:67:43:9d:79:20:6e:cc:0a:
c8:22:ef:b5:85:47:c7:6b:7e:8f:ae:dc:88:c8:df:17:f9:f6:
ed:ec:f0:98:ce:56:cc:96:4a:72:f1:14:a1:d3:89:7b:44:b1:
47:26:73:4c:0b:7f:96:ae:d6:bd:e1:d4:b6:de:ee:d5:db:e0:
71:c4:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:09 2025 by rpki-client