Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8436f674G4X05xvwP0C936HzFw0.roa
File: 8436f674G4X05xvwP0C936HzFw0.roa (raw, json)
Hash identifier: /J2oQYZ85KVDepCFbXpCbYaa0Oj460ejjf1xNXGW4Z8=
Subject key identifier: F3:8D:FA:7F:AE:F8:1B:85:F4:E7:1B:F0:3F:40:BD:DF:A1:F3:17:0D
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0199CD4B259CAFB1382FC840411BBE6D0F2A
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8436f674G4X05xvwP0C936HzFw0.roa
Signing time: Fri 10 Oct 2025 08:44:38 +0000
ROA not before: Fri 10 Oct 2025 08:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a09:9300::/29 maxlen: 29
2a09:ba40::/29 maxlen: 29
2a0b:9480::/29 maxlen: 29
2a11:34c3::/32 maxlen: 32
2a12:46c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:4b:25:9c:af:b1:38:2f:c8:40:41:1b:be:6d:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Oct 10 08:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38dfa7faef81b85f4e71bf03f40bddfa1f3170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:15:0e:69:07:ec:8d:7b:64:cf:a6:ef:80:
b3:13:e6:f3:80:7f:6b:31:64:d1:ad:88:9f:c3:db:
30:fb:18:09:da:d3:25:41:34:16:84:22:35:e3:4c:
3f:8f:80:d6:de:44:88:d0:e7:ca:1c:93:51:c4:70:
43:64:85:86:6c:c2:c3:71:d2:91:dc:dc:90:3f:6d:
05:0b:f1:cc:3b:86:92:a1:96:63:63:2d:43:e3:4f:
57:6d:21:1c:23:bc:c8:19:d8:5f:02:ed:6a:15:29:
26:6f:d0:1b:bf:56:d5:c6:ce:d3:cf:83:01:fd:f8:
ae:5b:35:17:3b:aa:a8:cc:98:d3:7e:57:9f:da:37:
1d:3f:d0:73:dc:0b:92:69:92:46:91:87:72:b7:f5:
51:16:70:09:4a:b0:36:b8:51:a2:02:d4:01:57:fb:
8f:70:b3:d5:15:c6:81:66:1d:56:98:f5:13:ae:23:
67:47:78:b2:1e:21:b4:e7:d0:fc:2b:85:42:9c:f5:
5b:fc:d7:8f:a3:40:3c:65:29:b4:b0:4c:73:09:1a:
44:e9:eb:0e:f5:dc:ee:12:15:11:5e:f9:b4:7c:6a:
43:dc:c5:bc:c6:12:0a:e9:7f:93:fc:7b:5c:51:d2:
e0:5e:ae:ed:ec:14:cb:e3:f6:3b:23:db:ab:82:ca:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:FA:7F:AE:F8:1B:85:F4:E7:1B:F0:3F:40:BD:DF:A1:F3:17:0D
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/8436f674G4X05xvwP0C936HzFw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9300::/29
2a09:ba40::/29
2a0b:9480::/29
2a11:34c3::/32
2a12:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
00:32:1f:af:5d:d0:28:c9:2d:07:80:ac:e8:95:12:6a:b1:ef:
72:a2:9a:e4:87:49:0a:54:88:f5:cf:34:72:14:1d:b3:c0:ed:
cf:c1:f0:3e:b4:9d:3b:3c:7a:6b:3d:db:ea:43:e7:69:e9:95:
8c:f4:c2:b5:ed:2c:6e:5b:8f:6d:91:26:64:e6:0d:98:b3:14:
59:8a:8b:d0:39:8f:82:1f:10:79:63:5f:e2:8c:46:53:e1:e2:
a0:59:77:e2:39:d9:e2:a8:42:1f:41:a0:f2:0a:b3:0a:f4:2a:
94:93:c9:b1:fe:12:e5:c1:d8:db:73:ad:83:e6:81:a7:cb:96:
93:8a:44:b8:f1:62:71:1b:9e:f1:d2:ec:9c:90:1c:08:ad:50:
ac:32:75:df:d9:ed:bf:c7:4d:0e:54:6e:8f:a9:19:ed:0f:66:
d6:4a:a8:f9:6a:8b:9e:94:33:66:4a:c7:07:67:46:c8:f4:34:
1c:8c:7f:64:c3:40:a4:67:db:da:7e:51:57:3e:db:3e:07:76:
0f:ce:2a:a2:70:30:21:04:3a:b1:28:9a:dc:0c:0a:4c:56:2a:
1a:20:68:86:f2:97:90:a4:c7:f1:b8:7a:c8:36:df:61:16:a5:
18:31:ee:f5:c5:a6:6d:70:3b:76:f6:c8:f9:f8:eb:8a:4c:65:
1a:0e:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:16 2025 by rpki-client