Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ALBRrcTEukK1NRbj8n95k8XMqbk.roa
File: ALBRrcTEukK1NRbj8n95k8XMqbk.roa (raw, json)
Hash identifier: i7FtxbzvIhyCBwU5IfPvb7KtFoGDTdzq/sC6LLypx7k=
Subject key identifier: 00:B0:51:AD:C4:C4:BA:42:B5:35:16:E3:F2:7F:79:93:C5:CC:A9:B9
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0199343419B13B181BDB33D03ECAAB828139
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ALBRrcTEukK1NRbj8n95k8XMqbk.roa
Signing time: Wed 10 Sep 2025 15:17:33 +0000
ROA not before: Wed 10 Sep 2025 15:17:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209944
IP address blocks: 2a11:4b41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:34:19:b1:3b:18:1b:db:33:d0:3e:ca:ab:82:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 10 15:17:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00b051adc4c4ba42b53516e3f27f7993c5cca9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:2a:51:7b:c5:45:56:9a:d7:3c:8b:28:a2:
14:90:0b:af:dc:e5:cd:9b:f5:37:b6:89:fa:b8:b6:
6d:08:34:30:e8:ec:34:2f:f2:53:77:92:ef:83:ba:
1f:ef:a4:82:f4:0e:c6:aa:fc:2c:d5:02:03:40:5b:
57:97:b6:bc:1f:93:de:62:c5:04:f0:bf:b6:d9:b6:
d7:94:15:96:09:f4:fa:8e:40:8f:53:7f:32:51:a1:
85:23:a1:d3:4b:11:70:48:a7:a0:99:a3:2b:17:aa:
37:03:57:97:0b:0a:36:11:50:07:4c:13:04:29:54:
ed:2e:ad:8e:27:cb:33:dd:83:35:26:c6:2f:77:bb:
87:36:f1:df:17:46:38:75:7e:9d:17:d0:a6:6c:bd:
5e:d8:20:f0:09:17:28:21:b0:9c:bb:a8:26:c2:d1:
ec:8f:79:0b:5f:a9:29:20:a4:f2:b5:7d:50:09:72:
78:6d:a1:b7:34:9a:6a:c6:df:bf:aa:fa:ff:ec:27:
b7:89:0b:cc:da:e1:52:69:7e:1b:76:2f:d4:ea:7e:
f3:8a:f8:36:4c:d3:e2:7e:48:df:d7:0c:fd:91:52:
d6:8f:0d:24:ff:59:1d:45:44:37:97:45:9b:85:51:
2c:87:cc:b8:c2:8b:38:dc:e1:71:b6:23:f9:fa:94:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:51:AD:C4:C4:BA:42:B5:35:16:E3:F2:7F:79:93:C5:CC:A9:B9
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ALBRrcTEukK1NRbj8n95k8XMqbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b41::/32
Signature Algorithm: sha256WithRSAEncryption
09:d6:f8:05:fe:9b:f2:b2:73:a4:15:53:46:4f:1e:1d:81:0a:
dd:5c:c9:88:c9:b6:44:08:b5:76:07:1e:51:e2:07:4f:8c:27:
8a:b1:8e:f1:3f:28:04:76:43:95:4b:be:d5:81:a9:18:a7:c2:
66:c7:ce:44:fe:6b:ff:33:90:ea:26:7a:84:69:a1:f8:fe:89:
77:24:12:2c:e1:63:a1:d3:d5:bb:0c:35:76:f7:77:83:37:d0:
92:40:98:dd:92:d5:a0:75:55:db:78:94:ff:b6:46:7c:d2:40:
35:08:c9:a9:6c:1c:71:82:b0:f1:68:26:46:66:78:b7:87:34:
6c:5b:e0:a1:1e:5d:d9:e8:ac:e1:3a:13:05:61:a1:21:ec:32:
ca:da:bb:66:06:94:40:b8:47:fa:b8:ec:af:50:e3:7e:94:25:
cb:25:a8:19:0c:cc:ea:fd:2d:d6:7e:20:04:42:63:b9:ab:ef:
9e:7f:65:39:aa:a5:c2:99:1e:56:ac:c1:05:be:21:35:ad:c2:
26:c8:ae:12:06:b7:2d:21:4a:db:b8:08:f3:41:5b:86:3b:d3:
07:77:82:79:bb:b1:6a:f9:8c:71:f3:c8:ec:2b:77:c8:ee:4b:
cc:8a:6a:1d:b2:30:f8:d7:12:bb:df:f9:7b:24:5c:89:4b:4f:
fd:b3:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:26 2025 by rpki-client