Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oce0vAdHZPJLJnyFXqCXEZit-nQ.roa
File: oce0vAdHZPJLJnyFXqCXEZit-nQ.roa (raw, json)
Hash identifier: gVyDwGE4TyYisP9bml9ZpPqulI5h/0F63l6sk9zLLyU=
Subject key identifier: A1:C7:B4:BC:07:47:64:F2:4B:26:7C:85:5E:A0:97:11:98:AD:FA:74
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019812F525967996A0F072D3274D4CA27B10
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oce0vAdHZPJLJnyFXqCXEZit-nQ.roa
Signing time: Wed 16 Jul 2025 11:18:32 +0000
ROA not before: Wed 16 Jul 2025 11:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 170.168.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:f5:25:96:79:96:a0:f0:72:d3:27:4d:4c:a2:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 16 11:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1c7b4bc074764f24b267c855ea0971198adfa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:51:d4:ea:b0:eb:b7:ba:ad:ed:b0:11:c1:
d0:f0:04:9d:09:f1:f8:ec:2c:f9:9f:a5:83:dd:47:
19:98:89:a1:4d:ed:0b:5c:d1:64:8d:f6:b1:86:13:
10:24:d3:09:e2:7c:e5:f6:50:08:26:23:c6:65:23:
71:e0:ed:21:6e:68:b1:4a:30:41:52:7d:a0:21:db:
d7:70:aa:b8:e9:67:57:97:8d:76:15:c5:16:ea:27:
b7:ff:c0:50:72:b0:d6:68:b7:13:ae:07:d1:4a:0c:
0e:bb:9e:4d:bc:60:7e:c1:1a:ea:3c:40:c8:87:94:
31:1e:0b:3e:2c:b7:eb:3b:33:9a:74:a4:3d:b1:b9:
eb:03:32:9a:c6:d9:c5:7b:fa:6a:c5:3e:ff:83:9f:
78:70:af:61:db:1c:70:f8:51:8d:97:f9:5f:dc:13:
a1:45:02:39:88:29:0d:ed:7a:53:7d:aa:54:4c:ee:
05:fa:4e:5e:f6:60:79:5a:60:78:ce:15:c4:34:08:
a7:9e:ca:d2:e7:3a:de:9f:a2:1b:39:03:16:8e:62:
cc:1f:9e:9f:06:21:98:75:36:8e:c2:fa:35:fa:63:
dc:5b:64:72:cb:cd:fa:d4:f5:5e:5c:98:cd:4c:01:
78:ba:c4:bb:79:0f:7c:63:65:08:8d:9c:cf:4c:ea:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:B4:BC:07:47:64:F2:4B:26:7C:85:5E:A0:97:11:98:AD:FA:74
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oce0vAdHZPJLJnyFXqCXEZit-nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0/24
Signature Algorithm: sha256WithRSAEncryption
39:53:9f:d8:ba:1e:13:17:ef:64:55:89:2d:7b:ac:a9:be:e2:
7d:d4:ae:1e:e0:54:b2:c5:fc:6d:47:cb:46:29:76:ff:33:88:
1e:fe:99:23:d1:21:17:4d:33:24:1b:63:79:aa:ef:2f:c4:51:
9b:40:d7:d3:74:9e:fd:87:b9:71:50:b1:a2:a5:1c:9d:bb:bd:
c1:d6:7b:ab:70:1d:7f:72:c7:83:c7:57:a4:f3:71:c2:95:07:
92:2d:e3:52:ef:50:f3:06:42:b9:d3:2d:28:4d:79:91:b6:2c:
89:df:e3:72:0a:35:46:b4:e3:cd:ed:36:6c:0d:35:ff:aa:70:
20:00:23:b9:3f:cb:c0:1a:59:cf:14:cc:5f:b5:e6:fd:8b:ae:
c0:22:60:c3:68:bd:3e:cc:85:b7:36:46:b0:d7:89:b2:37:3e:
bc:3c:ad:76:8a:88:29:fc:6e:c3:16:00:e2:0f:fe:4b:49:8e:
13:5c:18:6f:22:42:13:f9:99:8a:aa:af:8e:45:c6:e8:ec:fb:
2c:a4:44:41:b0:cb:fa:6f:f6:c2:59:c0:81:d4:08:3f:9b:b1:
fe:65:60:3f:93:0c:33:02:e1:2d:da:7f:8f:ce:85:ca:5b:3c:
21:22:19:e4:13:e4:9b:17:49:17:43:bb:ea:cb:35:f1:f8:dc:
a3:61:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 10:48:45 2025 by rpki-client