Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/gZwoW0uAXZK4DX_Wy3nMqlSOvCI.roa
File: gZwoW0uAXZK4DX_Wy3nMqlSOvCI.roa (raw, json)
Hash identifier: ZCTQvCKBuIo0GGFQA8KHz6JcfL7b6NLo0kaXAGgZn00=
Subject key identifier: 81:9C:28:5B:4B:80:5D:92:B8:0D:7F:D6:CB:79:CC:AA:54:8E:BC:22
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0199BF1DFECD2A10AF2EDE219F835533FC53
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/gZwoW0uAXZK4DX_Wy3nMqlSOvCI.roa
Signing time: Tue 07 Oct 2025 14:40:38 +0000
ROA not before: Tue 07 Oct 2025 14:40:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a09:6800::/29 maxlen: 29
2a0c:1240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bf:1d:fe:cd:2a:10:af:2e:de:21:9f:83:55:33:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Oct 7 14:40:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819c285b4b805d92b80d7fd6cb79ccaa548ebc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:81:96:d7:dd:32:b8:1e:20:31:86:4d:1b:
a4:6e:85:8a:a7:de:c6:2d:65:fe:3f:73:4b:a4:83:
4b:b9:96:c9:0a:09:fd:58:4f:c5:f8:50:e7:f9:e9:
db:21:eb:46:84:9e:1d:7a:f6:c4:ee:cc:a1:44:22:
30:90:0d:4e:7f:65:b1:e0:99:98:af:1a:32:d3:22:
ac:18:a4:df:5f:cb:14:14:e0:e5:49:62:48:57:c6:
d1:be:78:0b:62:8f:60:94:9a:35:73:bc:a8:a3:2f:
80:27:3b:9a:3e:21:a6:c0:ea:cd:a8:c6:04:b6:eb:
85:73:27:0a:b2:ad:d5:24:9b:51:0b:e0:0c:24:87:
50:c0:f8:58:52:04:62:d0:b5:3f:3f:6a:02:f0:15:
24:0c:0d:00:ea:d1:94:f4:74:ee:a0:00:78:25:7b:
e5:10:79:85:ad:e7:7f:e5:0b:1f:42:df:5e:87:a5:
12:aa:8f:14:77:d8:57:63:64:91:b7:a7:3b:de:1e:
f1:0c:53:65:60:18:2b:de:fb:f4:c6:c5:bd:8b:e8:
6a:e9:80:21:8f:7e:5e:47:1b:96:ed:24:8e:32:ec:
b0:6f:50:57:f9:88:6a:66:ff:2e:7d:28:f1:b2:53:
7b:dd:ef:d3:1b:6b:f9:04:5a:f4:a1:00:15:9b:c8:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:28:5B:4B:80:5D:92:B8:0D:7F:D6:CB:79:CC:AA:54:8E:BC:22
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/gZwoW0uAXZK4DX_Wy3nMqlSOvCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6800::/29
2a0c:1240::/29
Signature Algorithm: sha256WithRSAEncryption
9a:53:ca:c3:8b:52:55:62:67:d6:04:a0:43:44:dd:0a:08:1d:
7d:f6:9e:6f:c6:a4:39:63:69:75:c8:f2:cf:a4:ad:57:0d:1f:
18:58:4d:6d:71:07:63:d7:a1:ac:c6:c6:38:37:5b:8d:81:22:
79:30:d3:09:1b:1e:4e:64:bc:b8:39:83:27:43:9d:7b:7f:5a:
9c:08:16:28:b4:d2:1b:0b:31:15:7b:55:3a:53:5f:01:a9:87:
37:5d:fd:db:7c:6a:64:22:78:c7:b4:fe:19:0c:0f:21:06:7d:
35:b0:c6:00:04:65:fa:0b:9a:17:c0:99:ae:a6:84:a7:5c:17:
c6:94:da:3c:a1:f2:42:b0:c5:6e:10:2e:b0:b7:53:43:58:56:
d4:fe:55:3f:84:97:fe:c2:f9:4e:9a:07:e1:cf:55:59:99:28:
c8:da:fe:e1:0f:80:cc:59:3c:93:db:e5:38:b3:66:49:6f:84:
55:28:4a:85:71:25:e8:18:38:dc:9f:17:99:51:a0:23:b1:4f:
bf:97:ac:d3:d8:bf:5a:d3:44:47:18:21:73:b8:4d:f1:b1:cd:
7e:2a:15:33:84:4b:e2:89:2a:52:a7:a1:66:59:69:bb:2e:e6:
72:e9:92:66:61:9b:74:11:53:28:67:e9:22:8c:ec:e9:19:a8:
eb:a0:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:45 2025 by rpki-client