Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/sKKUs7WTgE_j1KzFF_CIk7Xl7DQ.roa
File: sKKUs7WTgE_j1KzFF_CIk7Xl7DQ.roa (raw, json)
Hash identifier: Mugh/VwKG983PHzqRgSfyvZTukV9DLFCKP1UZ2SPmA0=
Subject key identifier: B0:A2:94:B3:B5:93:80:4F:E3:D4:AC:C5:17:F0:88:93:B5:E5:EC:34
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0198C3F314050F0C11E9E6B7727055A14924
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/sKKUs7WTgE_j1KzFF_CIk7Xl7DQ.roa
Signing time: Tue 19 Aug 2025 20:09:04 +0000
ROA not before: Tue 19 Aug 2025 20:09:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:8b87::/32 maxlen: 32
2a0e:6741::/32 maxlen: 32
2a12:3cc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:f3:14:05:0f:0c:11:e9:e6:b7:72:70:55:a1:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Aug 19 20:09:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a294b3b593804fe3d4acc517f08893b5e5ec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:e8:32:3f:69:65:fc:ff:cd:e9:37:61:b2:
c1:74:fd:f7:1e:74:9d:f3:ed:cc:9d:86:18:34:71:
33:29:42:bb:57:ce:de:7e:be:a3:fb:8c:3e:b4:0b:
de:b2:7c:2d:14:29:12:85:16:73:12:01:d4:78:0b:
e1:a8:76:d1:dc:c6:dd:8f:eb:bd:10:8a:52:42:3a:
e1:b5:0b:6e:5f:e0:70:57:cf:93:75:3d:96:8a:65:
e1:0a:d3:42:46:71:b3:77:7f:64:a0:51:bb:ea:aa:
f0:74:60:c6:84:c4:97:40:f1:45:5e:fe:1c:b6:bc:
50:70:63:e1:ee:44:87:77:64:11:c5:4e:e5:11:35:
9e:69:cb:cf:36:0b:c8:1b:8e:8f:8e:b5:51:56:88:
45:75:b4:d7:82:42:2d:ea:9d:eb:d7:9c:d5:d7:71:
a3:ae:ed:42:61:1c:b6:19:f3:d3:0a:51:d9:9a:3e:
33:17:83:d0:95:73:20:cd:70:78:de:fb:45:89:c2:
95:59:bd:7c:6c:8e:81:82:c0:3c:49:74:5c:82:c1:
c5:95:a2:19:34:24:c8:fe:7b:b9:95:a8:4b:90:81:
96:f4:1c:28:bd:71:0a:62:51:ac:cb:ee:54:ce:69:
54:10:be:a1:60:b4:6c:31:0c:29:25:ee:bc:48:33:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:94:B3:B5:93:80:4F:E3:D4:AC:C5:17:F0:88:93:B5:E5:EC:34
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/sKKUs7WTgE_j1KzFF_CIk7Xl7DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:8b87::/32
2a0e:6741::/32
2a12:3cc7::/32
Signature Algorithm: sha256WithRSAEncryption
b6:be:ea:8f:d7:c0:f7:e1:95:4a:6e:9c:1f:e8:74:75:5b:1d:
60:f2:a6:5a:ae:28:28:27:48:ad:79:ce:e9:32:3e:d1:22:2f:
e4:d7:1c:7e:f0:ca:b1:09:f3:56:e0:d0:42:9f:db:24:a7:b3:
14:e2:e4:76:7c:c5:f1:25:a3:eb:1b:b8:56:08:ce:34:fd:6d:
ff:06:dd:78:83:35:80:36:54:db:6e:b9:1b:36:8c:62:40:4c:
3f:6b:eb:de:61:18:ae:9a:6f:95:f4:56:fb:9c:1e:e5:e7:7d:
4c:36:6a:74:42:8f:e3:ea:71:dc:59:4f:36:b1:42:df:08:2d:
d7:56:82:9b:7a:8e:09:be:1c:ad:ff:5e:c9:9a:e2:3a:5c:41:
bf:6e:37:84:6b:eb:d4:81:92:5a:08:d3:31:22:ce:f5:7c:44:
f4:9b:b4:fc:34:41:16:f1:77:17:cd:c1:ce:e6:e7:ad:8a:13:
83:75:c6:58:2e:e9:2e:06:40:24:38:21:4d:00:e0:2a:77:8a:
48:c8:1c:e6:f6:21:a1:b8:35:91:08:cf:e1:09:4e:5b:b8:02:
e0:78:d9:95:24:31:b9:20:48:ab:fb:5d:bd:4f:42:06:aa:40:
13:7a:89:bd:bb:d2:df:9b:e0:ab:e0:77:3e:b7:df:80:98:66:
41:ef:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:06 2025 by rpki-client