Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
File: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (raw, json)
Hash identifier: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=
Subject key identifier: 68:45:2F:77:B1:94:62:3E:14:FA:E1:A1:58:5E:78:27:AD:AD:45:19
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 372DFCE8B39018ED1A8EE7FA03E97848505A82A8
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
Signing time: Sun 05 Oct 2025 22:31:10 +0000
ROA not before: Sun 05 Oct 2025 22:26:10 +0000
ROA not after: Sun 04 Oct 2026 22:31:10 +0000
asID: 57196
IP address blocks: 2a13:7a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2d:fc:e8:b3:90:18:ed:1a:8e:e7:fa:03:e9:78:48:50:5a:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Oct 5 22:26:10 2025 GMT
Not After : Oct 4 22:31:10 2026 GMT
Subject: CN=68452F77B194623E14FAE1A1585E7827ADAD4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:c5:f5:1d:5f:32:76:e0:f2:70:f4:d5:44:
97:d2:05:0d:de:0c:77:74:e5:b5:b9:8a:13:ea:e7:
4c:1b:07:c9:2f:22:02:90:25:d6:16:b0:6c:59:5a:
fe:f0:df:31:94:52:e1:8b:3e:27:72:64:05:eb:67:
6a:9a:ff:dd:0b:92:30:e4:53:c0:84:e7:7d:d8:64:
24:9c:e0:22:17:6e:fe:5d:bf:5e:f8:5f:f6:d5:63:
ee:87:82:59:41:8f:9b:e5:89:12:6c:fc:05:d3:0d:
eb:da:81:10:2b:11:38:eb:16:6d:a8:c0:79:35:8a:
31:78:e6:d6:6c:8e:bb:49:6d:79:b7:31:6c:8e:58:
bf:02:98:5b:02:16:10:14:69:12:f1:80:da:04:f6:
45:9c:a2:81:d5:89:82:dd:1a:00:e4:f4:06:25:c5:
ff:b8:fa:f2:32:4e:86:a4:55:f8:4e:87:20:9d:30:
2f:60:32:da:7e:87:79:4a:6f:29:f4:44:ab:54:29:
1f:6c:37:6e:9a:5e:08:79:06:e0:c4:83:2b:39:65:
45:64:82:71:25:47:4b:2c:1b:97:fd:ac:ee:34:67:
6f:09:cd:23:b9:67:9f:a9:7b:91:91:ef:6e:f8:5d:
42:ac:cf:a2:34:89:cb:41:0e:b7:ba:7f:85:68:98:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:2F:77:B1:94:62:3E:14:FA:E1:A1:58:5E:78:27:AD:AD:45:19
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134303a3a2f32392d3438203d3e203537313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
1d:f6:f0:96:a8:76:d7:80:d5:33:85:2d:2f:57:42:83:4e:ae:
3d:9e:d2:03:f1:8f:8a:e2:14:b4:39:82:52:ce:1e:0b:4e:20:
a1:f8:5e:1e:47:8d:a2:e1:4c:f9:6d:67:f1:50:d9:b3:2a:14:
cf:80:24:22:2f:53:a5:f1:5f:2a:67:86:67:d8:2b:80:85:0b:
7f:22:d0:c0:d4:80:ab:f1:74:78:2f:2f:b8:59:95:89:aa:83:
ee:04:06:c4:73:5e:d7:cd:1c:2f:14:a1:57:a0:36:9f:db:76:
11:ae:d5:da:c6:c4:b0:f8:96:90:62:45:66:e6:04:98:24:48:
3d:0c:83:28:d4:26:15:54:19:f0:56:c8:2f:18:09:6c:cd:d6:
be:6c:e9:4d:bd:14:bd:73:4d:ab:31:16:e5:3f:18:f2:8f:34:
e6:60:35:48:c4:f1:fa:34:f2:4a:f3:93:96:b5:25:ba:f9:2e:
fb:31:d7:bb:2a:04:a3:f8:f6:36:f0:3d:71:85:7b:e4:b6:ed:
c3:b7:ae:be:f0:7e:eb:0a:4b:99:50:f8:7e:0d:8d:a2:20:ea:
37:0f:88:fc:5d:43:3f:e1:d5:5b:83:aa:06:17:0a:5f:75:26:
22:31:b0:85:6a:be:f7:10:1b:c6:8b:4f:61:a9:79:1c:8c:29:
e2:13:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:04 2025 by rpki-client