Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/6ErfCPwAmfbVMHf0WQijaX8o94o.roa
File: 6ErfCPwAmfbVMHf0WQijaX8o94o.roa (raw, json)
Hash identifier: xIsd+voDU6heAFU10HoQQ5mHLbMtmpQhpDpDanQQkwY=
Subject key identifier: E8:4A:DF:08:FC:00:99:F6:D5:30:77:F4:59:08:A3:69:7F:28:F7:8A
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 0197EEF8BF26345A3EB031B4B18834C0AD6B
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/6ErfCPwAmfbVMHf0WQijaX8o94o.roa
Signing time: Wed 09 Jul 2025 11:36:08 +0000
ROA not before: Wed 09 Jul 2025 11:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214474
IP address blocks: 2a0a:d982:1991::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:f8:bf:26:34:5a:3e:b0:31:b4:b1:88:34:c0:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jul 9 11:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e84adf08fc0099f6d53077f45908a3697f28f78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:68:89:c5:a7:30:97:14:38:b2:52:04:82:
64:08:dd:9a:66:b3:1b:e2:ca:b2:6f:74:c9:76:78:
4c:54:bd:ca:5d:62:05:88:87:12:c7:d3:fc:91:85:
c6:3b:07:4d:06:43:c0:b2:63:cc:8c:11:7b:9b:05:
9a:4f:10:e8:93:b5:80:75:ec:ec:54:59:96:34:10:
75:2a:ea:94:09:9b:9f:a5:70:80:a3:18:d1:0d:b4:
ba:02:2b:a8:a8:94:f4:38:7a:a9:c9:ca:c7:cc:fe:
24:db:b3:7a:3d:f7:5c:8e:84:6c:b8:7c:e4:1a:5a:
7a:90:aa:f0:80:44:09:6c:a4:16:29:a4:9d:9b:01:
34:b8:42:21:64:a3:1f:00:63:24:e8:aa:6b:48:f7:
b0:9f:55:3b:35:e1:0d:16:f2:00:33:0b:c2:76:4d:
8d:94:e5:b0:48:ab:0c:0f:73:6c:c2:b8:55:2b:24:
d5:b7:32:03:3f:28:17:1f:34:0c:3d:d4:33:16:6c:
71:af:37:52:ca:b5:85:77:46:5c:be:70:bb:3f:eb:
02:c6:76:2a:47:cf:5c:fc:81:97:b7:1f:03:9b:80:
07:f6:0a:eb:69:08:69:56:f4:e7:4c:18:d0:84:85:
de:31:81:11:b6:d2:3f:32:ef:e5:02:e6:39:ad:f3:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:DF:08:FC:00:99:F6:D5:30:77:F4:59:08:A3:69:7F:28:F7:8A
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/6ErfCPwAmfbVMHf0WQijaX8o94o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d982:1991::/48
Signature Algorithm: sha256WithRSAEncryption
59:e5:71:30:ed:15:1c:b5:70:b3:d6:70:ff:c5:dc:d3:be:67:
3c:cd:41:d1:0d:66:e6:47:b4:bc:f9:49:c6:e8:64:6b:b5:74:
d5:d9:48:26:05:02:c4:b3:4e:a2:4f:7d:45:68:78:e6:0f:61:
a9:b2:24:d7:48:de:9b:4e:f0:87:56:4b:e7:06:02:3b:ec:9f:
e6:0d:c6:5d:fa:c2:47:d1:9c:b3:6a:80:ca:1d:36:2c:62:36:
9a:3a:4b:92:de:16:e1:05:91:08:3e:7f:92:b9:e9:64:7d:68:
4a:b5:86:80:5c:45:f2:78:3b:85:31:17:ec:03:8b:42:6b:df:
68:40:a0:6d:8e:24:93:d2:05:7d:68:2a:0e:7d:57:d5:3d:ee:
62:20:b2:ba:ff:92:48:0b:f4:52:60:7b:90:4f:a9:27:46:a5:
b3:31:bc:ba:51:19:b8:91:cd:47:59:6a:20:51:b1:c1:ff:90:
1f:35:6a:8f:6a:b8:2c:47:ca:22:64:02:4b:6c:19:0c:5d:71:
2d:e8:cc:d3:c2:85:8c:d0:84:9b:d6:0b:71:9a:ef:0d:58:72:
35:b9:30:36:6c:ed:36:20:7d:da:43:02:29:be:6d:06:4c:62:
63:b4:b1:70:34:8d:87:51:5c:dc:58:81:af:ca:b8:5a:e2:a4:
8b:66:47:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZfu+L8mNFo+sDG0sYg0wK1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0
YzUwMTkwHhcNMjUwNzA5MTEzNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODRhZGYwOGZjMDA5OWY2ZDUzMDc3ZjQ1OTA4YTM2OTdmMjhmNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwApoicWnMJcUOLJSBIJkCN2aZrMb
4sqyb3TJdnhMVL3KXWIFiIcSx9P8kYXGOwdNBkPAsmPMjBF7mwWaTxDok7WAdezs
VFmWNBB1KuqUCZufpXCAoxjRDbS6AiuoqJT0OHqpycrHzP4k27N6PfdcjoRsuHzk
Glp6kKrwgEQJbKQWKaSdmwE0uEIhZKMfAGMk6KprSPewn1U7NeENFvIAMwvCdk2N
lOWwSKsMD3NswrhVKyTVtzIDPygXHzQMPdQzFmxxrzdSyrWFd0ZcvnC7P+sCxnYq
R89c/IGXtx8Dm4AH9grraQhpVvTnTBjQhIXeMYERttI/Mu/lAuY5rfMA4QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOhK3wj8AJn21TB39FkIo2l/KPeKMB8GA1UdIwQY
MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt
NzViZDk0NmE3MzU1LzEvNkVyZkNQd0FtZmJWTUhmMFdRaWphWDhvOTRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1
LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrZghmR
MA0GCSqGSIb3DQEBCwUAA4IBAQBZ5XEw7RUctXCz1nD/xdzTvmc8zUHRDWbmR7S8
+UnG6GRrtXTV2UgmBQLEs06iT31FaHjmD2GpsiTXSN6bTvCHVkvnBgI77J/mDcZd
+sJH0ZyzaoDKHTYsYjaaOkuS3hbhBZEIPn+SuelkfWhKtYaAXEXyeDuFMRfsA4tC
a99oQKBtjiST0gV9aCoOfVfVPe5iILK6/5JIC/RSYHuQT6knRqWzMby6URm4kc1H
WWogUbHB/5AfNWqPargsR8oiZAJLbBkMXXEt6MzTwoWM0ISb1gtxmu8NWHI1uTA2
bO02IH3aQwIpvm0GTGJjtLFwNI2HUVzcWIGvyrha4qSLZkcN
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:22:22 2025 by rpki-client