Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aNGyGyQ-cmH6AnFtzz69bSaR3fg.roa
File: aNGyGyQ-cmH6AnFtzz69bSaR3fg.roa (raw, json)
Hash identifier: 7nG40jJ+Y8GfjPuUTqHDC7ace9nbdV9yRPi66jhTjSQ=
Subject key identifier: 68:D1:B2:1B:24:3E:72:61:FA:02:71:6D:CF:3E:BD:6D:26:91:DD:F8
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6BE83312C472BB3966D12D94C4EDCC
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aNGyGyQ-cmH6AnFtzz69bSaR3fg.roa
Signing time: Tue 15 Jul 2025 14:10:09 +0000
ROA not before: Tue 15 Jul 2025 14:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/44 maxlen: 44
2a03:5840:100::/48 maxlen: 48
2a03:5840:10a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6b:e8:33:12:c4:72:bb:39:66:d1:2d:94:c4:ed:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d1b21b243e7261fa02716dcf3ebd6d2691ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:95:a6:f3:f7:ad:22:d0:55:77:6f:a9:f1:
1f:6e:6f:82:ff:42:4c:b1:e3:5b:9b:d7:7d:63:f8:
cc:0c:82:3d:2e:b6:0c:e0:3e:39:54:0e:46:fd:e1:
98:dc:58:88:49:03:d9:cb:2c:ae:39:03:41:55:38:
ff:65:b2:86:df:93:9f:11:b0:0d:89:a2:b2:44:af:
ab:c6:e9:bb:b7:f8:e7:42:ea:0c:59:72:3a:23:37:
13:59:b1:70:38:cb:72:67:d3:57:4d:80:ee:1f:34:
ea:6b:31:8b:09:8e:d3:7e:54:73:1c:df:0c:f3:e8:
64:34:45:b5:10:2d:46:a9:a5:da:21:79:8e:53:90:
a5:f9:17:59:90:66:6a:3d:58:25:0d:55:e2:95:33:
ed:6b:5b:8c:9b:04:f3:82:39:5a:a2:52:39:5c:92:
b4:15:ac:93:82:a2:ed:8e:c7:19:a5:c7:cf:2b:9d:
c9:0d:bc:b3:5e:c5:5e:b9:9b:99:5b:9e:00:d3:4c:
94:bb:0a:4c:fd:94:6e:af:98:f0:8f:a0:16:fe:16:
4a:b7:61:36:31:83:6a:97:d8:54:3e:aa:d2:86:30:
29:5d:9f:4c:88:77:22:5f:4a:3e:a8:22:49:b1:0d:
01:2d:3c:4f:d0:9d:11:41:c2:35:60:29:f5:68:eb:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:B2:1B:24:3E:72:61:FA:02:71:6D:CF:3E:BD:6D:26:91:DD:F8
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/aNGyGyQ-cmH6AnFtzz69bSaR3fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/44
Signature Algorithm: sha256WithRSAEncryption
23:2b:73:77:3e:36:f3:0d:f5:5a:fe:6b:54:aa:c1:d8:c2:93:
51:72:1e:df:2a:c6:9a:00:70:6c:55:50:4b:72:3b:ca:36:07:
ce:26:37:e7:04:1d:4a:0b:d4:11:c3:32:84:77:db:91:c2:cd:
fd:2f:07:58:f8:dd:bb:46:3d:ff:07:45:24:fe:18:2d:2c:50:
f2:4f:1c:09:a4:10:77:ce:f8:0c:62:69:ce:a3:1f:d8:d7:8d:
ab:a6:84:b4:84:93:0b:20:5b:ef:44:3a:16:44:8f:df:ac:8a:
1b:94:3d:4a:b4:83:88:6f:c2:10:29:1e:89:48:cc:ab:b9:70:
74:f6:b0:98:9d:90:66:e9:0b:d7:85:5b:3b:f0:c0:0a:9f:32:
4e:be:06:2e:9f:07:d3:40:79:fc:db:57:c5:cd:df:12:b8:3a:
2c:ec:c9:15:3d:38:99:d7:26:e7:8f:b0:8a:2c:cb:8f:b8:27:
85:93:2a:61:cf:01:67:7b:c0:85:90:ae:59:f1:a5:d2:52:69:
f5:e1:8c:39:57:72:8e:e8:f9:f7:79:6e:73:a7:c1:9c:bf:e2:
74:1e:90:c7:38:ff:8d:2f:70:27:5b:b8:01:7d:55:da:db:84:
dd:3e:0a:6c:40:3b:eb:48:18:e3:b7:f7:33:aa:c8:a5:a3:90:
2b:75:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:37 2025 by rpki-client