Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/g6lOJZk_IOKaTF7q4TnhPviaoeE.roa
File: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (raw, json)
Hash identifier: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=
Subject key identifier: 83:A9:4E:25:99:3F:20:E2:9A:4C:5E:EA:E1:39:E1:3E:F8:9A:A1:E1
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 0197F99434E4D001571A857EE7AF136027CD
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/g6lOJZk_IOKaTF7q4TnhPviaoeE.roa
Signing time: Fri 11 Jul 2025 13:02:08 +0000
ROA not before: Fri 11 Jul 2025 13:02:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6848
IP address blocks: 2001:67c:1902::/48 maxlen: 48
2001:67c:1903::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:94:34:e4:d0:01:57:1a:85:7e:e7:af:13:60:27:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Jul 11 13:02:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a94e25993f20e29a4c5eeae139e13ef89aa1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:35:91:a0:97:ba:f9:e2:08:6b:22:54:bb:
bf:21:00:20:7a:fc:12:1a:fc:22:d3:27:eb:ef:91:
92:a1:8b:fc:e4:56:55:72:e3:38:bb:90:23:9b:8f:
59:28:0c:3d:63:1f:18:40:85:ab:35:7b:3a:5a:e1:
2a:6e:e8:12:c2:21:f2:11:e1:66:49:8b:a3:65:34:
8a:81:fe:07:1f:55:ef:56:fb:29:37:aa:1a:83:2d:
60:76:05:83:f0:d5:18:53:7f:43:02:25:c8:6d:ef:
35:67:fd:44:bc:f7:a2:4c:50:8b:70:a2:e6:ba:7c:
eb:4f:94:35:ba:f9:ae:58:4e:d0:30:e6:a7:98:f9:
87:03:e4:23:c7:66:38:56:b1:3b:70:e0:6e:fa:c2:
b9:18:cb:5e:b7:b8:e8:60:a8:bf:d7:73:d5:98:bd:
c9:13:15:df:a1:e7:50:fc:a8:92:00:c7:d4:3b:2e:
4a:f1:36:0f:45:df:3c:ba:c9:8f:8d:84:d2:80:ca:
64:99:35:ae:d9:f6:f7:88:02:fa:04:f2:6e:93:09:
c7:2c:7d:13:a0:58:47:55:eb:e8:7e:3f:11:8b:e6:
b1:0e:72:51:b6:e0:93:bc:c9:10:d9:4f:b5:5f:ac:
cc:16:ef:c2:92:3e:56:6e:f2:73:c0:57:c1:a0:a3:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:4E:25:99:3F:20:E2:9A:4C:5E:EA:E1:39:E1:3E:F8:9A:A1:E1
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/g6lOJZk_IOKaTF7q4TnhPviaoeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1902::/47
Signature Algorithm: sha256WithRSAEncryption
29:8a:2a:18:e3:01:92:ea:c5:1a:96:5b:24:fe:bc:42:d1:83:
44:7f:54:25:48:81:a4:cf:99:f0:29:49:9a:45:9b:71:ab:9c:
e2:6b:38:1c:ca:6f:d4:d4:00:33:3a:03:68:07:f1:2c:f1:b4:
3d:7b:25:ef:bb:04:46:83:36:16:21:69:63:8f:1c:6d:46:e3:
7e:6b:be:48:2f:82:ed:b7:95:f3:76:7e:3a:d8:4c:97:85:a0:
2a:f2:78:50:25:02:43:ac:f6:ad:54:d9:e2:61:1d:db:25:74:
70:1b:ca:7f:ed:e8:b6:fc:a4:58:f2:d4:f7:c8:88:7b:f3:f4:
3e:8d:fb:dd:41:0c:1b:49:93:de:6d:c4:a5:82:04:2a:9b:a2:
0e:10:26:c6:ae:e4:d7:0c:93:7d:5e:fc:4f:8c:a3:89:ee:c7:
eb:37:18:4b:84:85:d3:53:59:8c:34:57:84:30:bd:59:72:e6:
f1:03:d4:b9:e8:5e:17:ac:b3:9f:1f:c3:fe:c8:98:c9:ba:82:
d6:3f:2f:8e:c4:94:41:cf:a3:83:84:79:31:6a:41:51:fa:84:
3a:f1:41:07:ce:71:6c:18:6f:cb:5c:be:d8:41:32:e6:f2:2f:
76:09:18:17:a0:81:d6:90:a2:42:1b:e9:49:1c:40:17:b1:ca:
38:4c:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:15:09 2025 by rpki-client