Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/9KJRnqV0A1nt4ipJSZK-VubthM8.roa
File: 9KJRnqV0A1nt4ipJSZK-VubthM8.roa (raw, json)
Hash identifier: VhM4+M1JVaTvUKIcNP3pBnzsvI5WN8+zi9aZZZ7ijWQ=
Subject key identifier: F4:A2:51:9E:A5:74:03:59:ED:E2:2A:49:49:92:BE:56:E6:ED:84:CF
Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial: 0197E46263BE22B2005290A24E8565A056BF
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/9KJRnqV0A1nt4ipJSZK-VubthM8.roa
Signing time: Mon 07 Jul 2025 10:15:42 +0000
ROA not before: Mon 07 Jul 2025 10:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210896
IP address blocks: 2a0c:d540:1111::/48 maxlen: 48
2a0c:d540:1112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:62:63:be:22:b2:00:52:90:a2:4e:85:65:a0:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Validity
Not Before: Jul 7 10:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4a2519ea5740359ede22a494992be56e6ed84cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:64:5b:42:ea:67:5f:07:ce:41:c4:50:e7:
1c:ae:30:12:b2:30:f7:82:ab:ec:0f:f2:04:87:18:
86:3b:c9:03:cb:5d:a5:4c:23:35:87:fb:53:2f:11:
09:99:eb:2c:ca:d6:34:73:f6:fb:c9:61:89:ff:37:
13:eb:0b:8f:df:d4:aa:32:cb:6e:16:54:0c:be:c6:
92:25:a4:6d:23:e0:63:63:22:4a:9d:08:a5:47:b0:
14:56:5d:7d:3f:2f:5a:e1:16:b6:38:8a:e2:ae:c1:
f7:d3:65:63:d6:87:c3:01:47:9d:50:bb:41:e4:42:
5b:ff:95:97:85:12:51:c7:f6:00:3d:cf:15:e0:64:
0c:aa:81:9f:d1:31:0b:b9:0b:7e:5d:b1:6e:52:cc:
e6:95:11:42:15:13:35:f8:27:e3:4a:cd:de:71:7c:
f9:90:f8:56:8c:3a:e8:1e:db:2e:fe:76:39:06:06:
bc:5b:ff:d3:f5:e8:9f:d8:bb:a5:97:ac:c3:46:ff:
7f:ca:4c:7f:96:d0:5c:7f:9f:e1:74:a5:e4:e1:52:
12:15:d1:1f:e9:b8:7c:96:99:02:cf:1a:95:fe:ae:
5e:c0:7f:e8:aa:cb:3e:9a:a8:f0:07:dd:90:d0:ba:
e1:d7:10:15:d4:14:20:dc:64:ea:2c:d0:b0:a7:63:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:51:9E:A5:74:03:59:ED:E2:2A:49:49:92:BE:56:E6:ED:84:CF
X509v3 Authority Key Identifier:
keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/9KJRnqV0A1nt4ipJSZK-VubthM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d540:1111::-2a0c:d540:1112:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:42:d2:85:47:10:e0:80:30:94:89:cd:65:b4:2e:6b:97:50:
e2:7b:a4:4e:41:63:88:91:bf:c6:16:34:08:91:ef:65:2e:08:
f4:fb:7d:41:18:57:ab:f4:ad:4b:6d:d1:03:b5:a5:5b:a7:87:
eb:b5:1b:b3:9a:7f:c3:74:a5:22:a1:f0:9d:9d:70:27:c6:b6:
48:d6:a6:99:5c:ce:90:b8:f7:e6:7a:6b:7f:84:fd:89:97:4e:
9d:38:0a:37:3c:b7:9e:8c:92:c1:b2:96:dd:b1:65:7a:c3:69:
7f:9d:f5:de:12:18:dd:66:cd:ef:7d:47:5d:16:d6:57:3d:17:
fc:e9:ff:6a:b4:99:71:4b:a5:5a:00:19:73:90:e8:92:b8:c7:
7d:c3:7a:72:95:77:10:a1:d5:9c:44:20:18:a4:ec:ff:6c:3c:
8b:dc:96:e2:45:98:ad:42:1e:04:52:1f:1c:49:da:4e:ad:93:
81:66:7a:bb:d6:54:e1:38:7c:d1:2c:6d:60:d9:da:f1:26:ee:
a0:67:0a:96:d8:78:cb:d9:61:83:e7:21:32:55:99:5a:2d:c7:
96:f1:d4:d9:a6:f1:8a:d1:a4:d4:bb:9c:af:87:d7:45:b1:e3:
83:b7:59:9a:30:92:2e:9d:a5:e6:79:2e:07:d4:8c:1a:f4:87:
b1:5f:98:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:19 2025 by rpki-client