Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2agkXyHYLavy52GOnasZCi4iRJU.roa
File: 2agkXyHYLavy52GOnasZCi4iRJU.roa (raw, json)
Hash identifier: /8hJlOhKQEZNQ7GxeihGGgIOb6cTUP3xxsaJyU7K0Dw=
Subject key identifier: D9:A8:24:5F:21:D8:2D:AB:F2:E7:61:8E:9D:AB:19:0A:2E:22:44:95
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0198CD59FFE990C88D688B3B5755E09B571E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2agkXyHYLavy52GOnasZCi4iRJU.roa
Signing time: Thu 21 Aug 2025 15:58:04 +0000
ROA not before: Thu 21 Aug 2025 15:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216061
IP address blocks: 2a03:9381:3::/48 maxlen: 48
2a03:9381:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:59:ff:e9:90:c8:8d:68:8b:3b:57:55:e0:9b:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 21 15:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9a8245f21d82dabf2e7618e9dab190a2e224495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:27:97:e8:1d:ab:de:19:9f:ee:24:df:83:
c7:ba:90:43:d2:44:18:4c:a8:d8:71:12:dc:ee:88:
cd:02:5a:3d:0e:89:47:d1:a3:3a:ad:cb:2d:ba:5d:
34:02:cb:b9:c1:ac:ad:c0:61:59:5a:99:98:18:b1:
01:7b:37:f5:62:80:77:b3:55:44:5b:93:5d:5b:9b:
d4:cf:7b:0f:06:65:b5:d1:ad:ed:df:3a:36:7f:57:
99:cf:86:35:28:1a:ef:3a:a4:bb:18:52:55:e8:ec:
b7:38:f8:02:d6:1a:82:bc:17:ca:dd:99:94:d2:b2:
fc:d2:b2:d8:97:e0:5c:04:7e:93:3f:54:8b:df:55:
e7:80:d2:26:96:be:ca:6a:87:eb:81:f5:00:8a:b2:
4d:8b:64:ca:f1:53:29:60:38:50:7d:42:27:04:69:
fe:7b:ca:6b:62:e2:e6:00:02:e7:70:5d:55:f9:df:
e2:91:27:c9:8d:a0:72:af:4b:9a:27:ed:bf:61:49:
90:a0:f0:f4:52:49:1f:05:95:ad:8f:86:be:cf:cf:
54:86:74:0f:d5:d4:bb:1e:fe:46:24:19:71:b4:56:
ff:3a:71:6c:1d:7f:5b:fc:93:e6:18:c1:b4:b9:5c:
40:48:b4:f8:2d:62:15:c6:22:11:47:a0:03:52:f2:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A8:24:5F:21:D8:2D:AB:F2:E7:61:8E:9D:AB:19:0A:2E:22:44:95
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/2agkXyHYLavy52GOnasZCi4iRJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9381:3::-2a03:9381:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:0d:9c:9f:d1:31:c3:b4:7a:b9:1b:dc:94:fc:49:2c:9d:a9:
5e:f8:03:82:09:5f:40:41:73:c9:2f:2c:9d:38:dd:ce:a6:5d:
31:90:52:f1:c8:d7:45:9f:ae:fd:2d:7c:41:d8:79:2c:5f:8f:
10:35:e2:c7:49:96:b4:bf:a8:c5:d5:76:72:f9:4c:00:c5:05:
7b:01:15:cc:6c:35:c9:a7:9b:20:9b:e4:b2:07:04:35:31:09:
3b:e4:d6:99:3c:2b:83:33:f6:76:64:e0:3b:29:ab:b9:14:9e:
75:af:03:6f:4d:3b:f8:a7:91:c2:35:ef:ca:b8:5a:a6:48:a1:
27:a1:81:53:98:12:f4:62:09:69:ff:9e:b5:ef:42:e2:af:be:
69:8b:94:d8:c7:df:ed:ca:11:df:73:d4:cf:38:25:97:38:c8:
b1:57:62:d9:ff:92:83:af:a3:c1:d9:5c:ff:28:50:cb:67:cd:
5c:36:0b:04:62:3d:21:15:d6:b8:e7:60:c1:e8:60:98:6b:29:
7e:bc:c8:63:f0:51:66:34:d2:3e:d1:10:d5:3e:ea:7b:47:3a:
ee:ec:aa:76:36:2f:9c:f5:1d:a5:81:b6:aa:a1:b7:a6:76:e1:
3e:bb:22:23:21:68:28:5c:0c:11:46:49:7f:c7:4c:9c:ed:7c:
9e:b7:49:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:35 2025 by rpki-client