Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/_t__zY_9WpX63Gp4LTiVH5H9ryg.roa
File: _t__zY_9WpX63Gp4LTiVH5H9ryg.roa (raw, json)
Hash identifier: nj6giKFeqoubHj5qNRIQ+oa0ZCbVP6J0y1z/i8p44g8=
Subject key identifier: FE:DF:FF:CD:8F:FD:5A:95:FA:DC:6A:78:2D:38:95:1F:91:FD:AF:28
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019831701569C467F45AADE5E3CAB195C7DC
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/_t__zY_9WpX63Gp4LTiVH5H9ryg.roa
Signing time: Tue 22 Jul 2025 09:21:25 +0000
ROA not before: Tue 22 Jul 2025 09:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a09:a800::/32 maxlen: 32
2a09:a805::/32 maxlen: 32
2a09:af81::/32 maxlen: 32
2a09:d700::/32 maxlen: 32
2a09:dd01::/32 maxlen: 32
2a0d:3c43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:70:15:69:c4:67:f4:5a:ad:e5:e3:ca:b1:95:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 22 09:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fedfffcd8ffd5a95fadc6a782d38951f91fdaf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:05:1d:e7:1e:f9:44:e4:39:73:0e:dd:54:
21:93:b4:5e:3f:82:d2:80:d5:e2:a6:8f:65:56:eb:
61:3f:c4:38:d4:26:2f:eb:46:90:ec:0c:6d:b5:ba:
0f:f1:3c:d6:ac:13:64:a0:42:08:de:b6:3e:7a:23:
2e:04:29:7b:a0:ed:68:96:a3:82:4f:03:7f:68:60:
f2:73:6d:92:78:2a:8f:cc:2c:86:ea:26:3b:4c:78:
be:e5:96:59:a2:76:8a:d9:e7:1a:1b:0a:cb:72:6a:
9d:7a:b0:25:f0:eb:c9:01:19:74:53:d0:98:71:1e:
4c:dd:e5:73:15:1a:52:08:97:41:7a:10:79:88:b7:
59:4d:98:17:64:f7:9f:6a:6e:b1:76:ac:14:c6:2a:
01:a7:f3:9c:cd:d3:24:15:1e:72:a1:43:ac:33:0b:
ff:d1:4f:10:e9:8e:ea:44:5f:09:b8:c3:98:67:42:
2f:f8:cc:a4:e5:cd:33:80:79:2e:63:40:d4:8d:33:
fe:51:71:8b:b8:84:2c:d1:1b:55:b2:55:8e:9c:b6:
f7:a5:34:a8:4f:10:3c:c4:70:af:67:58:49:fb:07:
86:db:50:a6:94:52:68:9d:1f:29:66:f0:f1:86:3d:
c2:3e:8f:41:bc:1b:36:40:81:d7:3a:2b:11:c1:d3:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:FF:CD:8F:FD:5A:95:FA:DC:6A:78:2D:38:95:1F:91:FD:AF:28
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/_t__zY_9WpX63Gp4LTiVH5H9ryg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a800::/32
2a09:a805::/32
2a09:af81::/32
2a09:d700::/32
2a09:dd01::/32
2a0d:3c43::/32
Signature Algorithm: sha256WithRSAEncryption
17:1b:78:4f:aa:b7:2e:ac:ee:56:c8:3b:d9:64:93:7e:cf:e6:
58:02:51:46:01:2e:49:21:21:2e:ab:58:18:ab:a0:4f:97:fe:
db:b7:53:f2:b7:a9:48:b5:7c:29:6b:a3:d3:76:d6:55:f5:9d:
a7:35:43:4d:ca:27:42:18:62:f2:e0:3a:b9:31:1c:fb:13:72:
56:22:16:8e:22:96:15:b4:19:fa:9d:e4:b3:11:13:f8:21:37:
a7:d7:ec:b4:85:5e:fc:41:63:d6:99:1e:ab:a8:ed:3f:43:c7:
e3:7f:26:ec:52:8f:7a:75:27:83:d1:e4:b8:d7:b9:dd:34:fc:
5b:e9:70:d5:82:64:70:df:ed:0a:b6:fd:fd:2a:98:ca:70:41:
c8:8c:e3:63:4d:85:37:a9:15:d2:ff:49:3a:af:a2:ff:5b:04:
0c:6f:68:b3:62:e9:77:cf:43:05:36:6f:db:aa:e5:cd:ad:90:
22:15:c3:27:76:60:b5:bf:a1:74:76:ae:6b:54:c1:86:b7:cf:
a8:65:44:a0:91:ef:28:eb:a1:05:0a:b3:c9:88:bf:cb:0f:11:
4c:4f:d4:7e:58:46:7c:f1:98:78:c6:38:e2:1b:6b:2a:38:0e:
59:93:cb:7c:d7:ab:c2:b7:f4:75:c2:8a:69:0e:fb:9b:0c:99:
c5:a9:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:40 2025 by rpki-client