Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/m07e6_Z6kS56JVFoiRbJDvuGsTk.roa
File: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (raw, json)
Hash identifier: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=
Subject key identifier: 9B:4E:DE:EB:F6:7A:91:2E:7A:25:51:68:89:16:C9:0E:FB:86:B1:39
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 0197A6EDEFA5ECDBB96ABFB953CCE8E8E178
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/m07e6_Z6kS56JVFoiRbJDvuGsTk.roa
Signing time: Wed 25 Jun 2025 11:51:40 +0000
ROA not before: Wed 25 Jun 2025 11:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202496
IP address blocks: 2a02:e9c4::/32 maxlen: 32
2a13:6cc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:ed:ef:a5:ec:db:b9:6a:bf:b9:53:cc:e8:e8:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jun 25 11:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b4edeebf67a912e7a2551688916c90efb86b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:3f:53:07:ae:1e:5e:0c:ae:b7:49:eb:09:
f3:bd:58:76:81:59:f3:ac:16:04:86:e5:74:cd:72:
ea:c6:3e:43:9c:50:25:31:87:60:cc:fd:f9:62:6e:
d8:49:af:5e:dc:8c:68:84:f3:cc:5f:44:64:1c:29:
67:5d:ce:1a:ee:eb:41:13:a0:8a:b1:fd:6a:2f:ae:
f4:f6:bf:75:c1:a3:4a:9a:69:60:c8:f2:77:be:8d:
3f:4d:4c:08:b6:45:d5:bc:8d:dc:37:7d:65:e9:b6:
37:c0:d5:1d:b1:52:f6:56:4c:89:e7:30:ee:59:f2:
f0:4d:45:0c:78:c8:35:5a:fd:36:4b:f5:49:86:41:
4b:f9:9f:f7:1d:86:42:70:53:2b:a9:40:34:d5:0c:
17:1f:5a:48:6f:34:70:6a:bd:ce:03:3b:c6:db:99:
ef:df:9b:e6:c9:88:9f:ca:88:d2:f6:66:f8:57:46:
7d:c1:20:79:a5:79:84:11:48:f2:b1:8d:59:15:d1:
33:c7:b0:71:43:01:57:ca:83:b2:02:ac:40:1c:3f:
2c:f3:dc:34:ca:cd:79:f1:9e:df:7e:ff:c8:78:83:
74:72:b3:9a:32:bc:7e:61:4d:5c:17:cc:95:4c:ad:
1f:58:de:54:af:0c:20:ed:90:73:bc:65:e4:2d:4a:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:DE:EB:F6:7A:91:2E:7A:25:51:68:89:16:C9:0E:FB:86:B1:39
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/m07e6_Z6kS56JVFoiRbJDvuGsTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e9c4::/32
2a13:6cc4::/32
Signature Algorithm: sha256WithRSAEncryption
49:5e:4c:bb:96:00:76:8d:4e:a3:6c:6a:f3:f6:6a:a7:cc:ea:
a5:bb:a3:31:a8:69:03:6e:38:f8:ad:75:d9:ac:84:39:d7:2e:
4f:be:ea:4e:46:28:cf:b5:96:ed:20:24:f2:02:f8:91:6a:6a:
10:05:ad:a7:ea:93:67:d2:2a:24:49:0f:da:28:75:f7:aa:f1:
2f:84:62:62:50:70:65:51:66:16:1f:6e:9c:cc:ae:f8:46:13:
49:61:a2:06:3d:74:10:10:46:96:ca:58:01:6d:b1:a8:50:62:
c7:9f:67:7e:c2:aa:ea:31:e4:00:97:82:17:6b:d2:b8:89:30:
2a:5a:ae:53:72:94:40:3f:29:06:1f:5a:9e:b9:b7:fb:a8:a7:
76:ea:c5:7d:ef:ab:26:f0:4b:75:6e:64:5d:cb:92:93:fe:ae:
8f:3e:84:f3:e2:56:89:81:35:3d:fc:4f:f1:f2:48:0c:dd:67:
e3:30:70:56:c7:8d:72:5f:71:60:fb:06:f9:f4:4b:11:a6:bc:
dd:87:b2:6f:f1:f6:5a:63:f2:ff:50:7f:f1:e0:40:c7:6a:64:
8f:83:32:b2:ac:1e:b7:1b:1a:fc:fe:18:f0:d1:cc:ca:1c:97:
5f:7d:f6:95:aa:91:a9:c4:3b:c8:b4:ca:7c:c7:a3:85:c1:e4:
39:d3:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:28:12 2025 by rpki-client