Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/R-6gZG6Qkp3ae09ud4PH3JpfB80.roa
File: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (raw, json)
Hash identifier: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=
Subject key identifier: 47:EE:A0:64:6E:90:92:9D:DA:7B:4F:6E:77:83:C7:DC:9A:5F:07:CD
Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial: 01981845843FBCBF1E270DDF3D1EB3B322E7
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/R-6gZG6Qkp3ae09ud4PH3JpfB80.roa
Signing time: Thu 17 Jul 2025 12:04:25 +0000
ROA not before: Thu 17 Jul 2025 12:04:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59723
IP address blocks: 217.9.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:45:84:3f:bc:bf:1e:27:0d:df:3d:1e:b3:b3:22:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Validity
Not Before: Jul 17 12:04:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47eea0646e90929dda7b4f6e7783c7dc9a5f07cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:b8:46:8d:de:a6:1a:4d:bf:f4:25:75:9c:
c4:8b:6b:cb:04:06:9f:38:50:3e:92:95:d4:ff:61:
be:e9:3d:57:04:93:ad:9d:92:26:9e:4b:7c:70:48:
bd:5f:b5:10:36:a3:a7:16:54:17:13:98:51:18:e9:
da:6c:68:6f:3d:89:a4:6b:d2:00:90:1c:f7:f1:ae:
0c:85:7c:e3:88:68:78:7d:0d:4f:f7:53:0b:6c:bc:
74:95:e2:20:ff:67:9d:82:35:2f:e9:82:e2:29:2f:
44:d3:17:33:cf:4c:65:09:8e:c0:ea:7a:af:97:3f:
3b:9c:00:17:83:33:24:5a:e4:71:82:ab:59:75:5c:
6a:2d:d2:ec:61:87:fd:5c:c7:62:ac:79:3d:b2:90:
d5:7a:80:49:84:57:c3:31:6b:5f:de:4a:32:2a:25:
8a:0a:34:f8:9c:b8:09:ef:84:a8:26:19:67:6f:a9:
a5:4a:92:39:f0:bd:0c:58:f8:87:a0:d2:18:44:09:
e3:2c:34:65:93:07:0e:a8:7d:c8:84:bf:c2:cd:3b:
dc:09:5f:22:ef:1c:5c:80:6c:46:03:91:2c:0f:2d:
98:11:a5:d2:a5:f7:c3:73:75:35:2c:36:d9:b8:97:
03:ff:13:c2:5e:54:eb:e6:4f:06:1d:a4:31:ff:14:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:A0:64:6E:90:92:9D:DA:7B:4F:6E:77:83:C7:DC:9A:5F:07:CD
X509v3 Authority Key Identifier:
keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/R-6gZG6Qkp3ae09ud4PH3JpfB80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.28.0/22
Signature Algorithm: sha256WithRSAEncryption
20:22:bd:12:0d:4c:d7:30:91:29:8c:f3:83:43:97:54:bf:fa:
cb:0d:9f:e2:f8:2b:ea:9e:3d:ff:63:5d:05:53:23:2f:72:38:
6b:32:59:87:15:e2:c0:bb:16:f6:e8:c6:1a:0d:45:27:9b:0c:
d3:33:ec:a4:3e:d7:3d:e7:97:94:ac:96:d6:42:46:7e:1e:09:
c3:87:cd:eb:75:ad:4b:ab:d7:ce:a4:a1:8f:c6:ee:d2:b5:c6:
18:0b:c0:bc:2c:50:f2:1a:12:51:3f:4e:f8:65:83:f6:8b:48:
86:ca:ea:a4:ad:59:bb:a6:be:dc:56:6d:64:70:ef:00:38:25:
04:a3:ae:47:8c:5e:6e:bf:96:ba:55:62:75:6d:7d:34:f9:70:
b6:6a:81:98:f7:93:99:b6:92:9c:b9:f6:c4:46:c9:06:00:35:
7c:f3:22:86:c1:e2:38:9d:15:b6:14:87:12:ee:f7:be:66:f8:
84:98:a2:ad:98:41:a0:65:2e:d5:0b:62:4e:ff:26:b5:d9:8f:
7b:23:ab:26:86:7d:4f:bd:28:1b:d3:7b:17:1b:77:24:9e:12:
d3:26:ab:43:f5:af:9a:d4:d4:40:06:f0:e5:b3:4a:b6:a3:91:
08:1c:e9:45:83:48:d8:b0:07:ba:f7:67:da:05:fb:15:57:16:
9b:6c:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:16 2025 by rpki-client