Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zglVvIBAUKFghvFWHvO4A8ubofc.roa
File: zglVvIBAUKFghvFWHvO4A8ubofc.roa (raw, json)
Hash identifier: JVXnY38fGnzDKzNQWJ7DR+GB9U+StlomLNfNXga7igI=
Subject key identifier: CE:09:55:BC:80:40:50:A1:60:86:F1:56:1E:F3:B8:03:CB:9B:A1:F7
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0197EA63F64E0B49DA7358E1E4E17AE779C5
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zglVvIBAUKFghvFWHvO4A8ubofc.roa
Signing time: Tue 08 Jul 2025 14:15:09 +0000
ROA not before: Tue 08 Jul 2025 14:15:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214223
IP address blocks: 2a0c:9a40:80d0::/48 maxlen: 48
2a0c:9a40:8800::/48 maxlen: 48
2a0c:9a46:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:63:f6:4e:0b:49:da:73:58:e1:e4:e1:7a:e7:79:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 8 14:15:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce0955bc804050a16086f1561ef3b803cb9ba1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:6d:ea:5d:42:39:eb:00:5d:5f:11:e7:14:
eb:16:0f:46:31:19:7f:a1:2e:29:33:2f:f7:79:5d:
f5:36:f1:e8:db:e4:da:2d:82:ef:aa:6c:54:de:9a:
5b:9d:81:4a:f1:32:dd:88:24:a8:a4:fb:98:90:cd:
18:20:a7:68:57:2d:97:a7:41:a0:5e:5f:8f:ff:71:
f6:1d:c7:b8:a3:7a:e3:b0:a4:bd:2c:df:01:09:e2:
10:40:21:6a:e8:de:9b:33:97:53:b9:c9:4c:5d:14:
3d:a2:95:d7:70:75:35:e6:04:7e:f5:67:52:ff:c4:
6a:42:ef:09:36:15:98:3e:fc:59:21:f3:e0:25:df:
b1:64:19:34:72:a9:2a:16:15:24:5f:df:20:03:ac:
db:c2:ee:30:7e:b1:5e:65:ef:35:10:10:22:72:74:
0d:7e:80:e3:7d:a3:ee:30:db:dc:99:c1:d8:1a:f7:
be:a9:13:ed:9c:fb:30:4d:56:ff:b8:48:20:25:37:
e6:9f:6d:1d:b9:a7:da:03:ce:a8:e1:1b:71:03:3a:
b2:21:e8:e0:6e:cc:25:a4:3c:e5:93:20:e3:73:81:
0f:aa:fd:bc:78:7f:ca:cd:0a:7f:40:e8:75:0f:20:
e4:06:ef:5e:34:38:08:f6:45:cf:68:cc:6c:6b:c0:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:55:BC:80:40:50:A1:60:86:F1:56:1E:F3:B8:03:CB:9B:A1:F7
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zglVvIBAUKFghvFWHvO4A8ubofc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80d0::/48
2a0c:9a40:8800::/48
2a0c:9a46:1000::/40
Signature Algorithm: sha256WithRSAEncryption
59:3d:ab:d2:69:da:a7:7b:1d:c8:0d:92:74:13:ad:4a:23:2f:
7c:d3:d3:c4:4d:18:15:f9:69:ff:27:be:c5:7c:03:42:b1:6f:
37:fa:de:79:41:cf:32:5f:90:f3:3c:aa:8a:d3:e4:7f:7c:10:
0c:9d:bd:fd:00:9e:2c:c0:cf:7c:aa:7b:52:bb:6f:02:3f:53:
cc:fc:51:15:a8:82:c3:80:90:58:ca:11:b1:9f:b3:96:59:35:
35:11:75:63:d0:a4:e9:1f:f8:cb:59:26:87:ff:62:ea:78:c1:
26:51:85:b0:69:7d:2e:19:f6:2a:5a:89:8d:72:23:9b:24:ea:
27:ba:19:27:79:32:98:ce:23:d4:bc:5a:33:c6:34:53:ef:7f:
0a:77:9d:72:21:09:a3:9b:6c:01:64:ef:3d:24:42:19:fc:53:
7b:a3:df:4e:ec:ba:9b:54:93:e4:bf:c4:7b:1c:a7:21:09:d8:
b7:6e:28:cc:d3:a1:ea:7e:1a:c1:f2:df:96:59:0d:38:18:dc:
37:f4:79:6b:85:42:95:fb:9b:91:f8:80:91:71:bd:91:05:38:
8d:b0:bd:cc:5e:7d:df:01:32:fc:86:44:7a:22:21:39:75:11:
95:5d:db:14:12:ad:77:16:da:2d:eb:7a:d7:9e:0c:63:89:ea:
2e:ed:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:46 2025 by rpki-client