Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa
File: yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa (raw, json)
Hash identifier: s9ixFSMI7GWSkeLxQmBgssbeEOKAKZsZGKgkyxXA67A=
Subject key identifier: C9:15:D0:A4:1B:96:D4:F6:F6:14:57:73:15:AE:68:F5:57:51:10:9E
Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial: 01995DDB191503646C35F9019E30D57E4B36
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa
Signing time: Thu 18 Sep 2025 17:24:23 +0000
ROA not before: Thu 18 Sep 2025 17:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a00:42e0:1000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 17:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:db:19:15:03:64:6c:35:f9:01:9e:30:d5:7e:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Validity
Not Before: Sep 18 17:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c915d0a41b96d4f6f614577315ae68f55751109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:54:85:63:be:c6:54:15:ed:dc:e5:68:6d:
48:36:40:a1:cb:89:fc:f7:28:c6:2d:4a:7c:39:48:
80:0e:e8:2b:65:64:f2:fa:31:0d:28:6b:ee:e8:e7:
5c:49:59:6c:39:7b:20:e0:fb:d2:1a:25:2e:ee:c6:
ab:f0:f3:ba:ce:b8:f4:1d:a8:d0:48:aa:ca:0e:ff:
aa:3b:2a:c3:0e:a3:94:9a:94:d4:df:74:dd:6c:2c:
52:07:31:64:79:76:e5:59:04:da:3d:b9:20:25:c0:
57:a6:b1:c6:75:b5:5e:04:b7:6f:9a:a0:67:e6:3b:
8b:f5:0a:62:c6:7b:84:5b:7d:cd:e7:38:f6:f2:21:
00:d1:8a:3a:35:af:d4:cb:00:fc:59:31:2c:1c:03:
42:73:38:bf:c9:1f:90:d3:c6:e8:58:2d:8f:2c:10:
cb:cb:b7:fc:8d:f1:7e:d7:91:cb:bd:37:22:b5:4e:
07:65:b7:db:33:41:51:28:e8:74:4c:c4:a5:6b:c2:
70:ba:d6:20:a5:ec:1a:39:b0:6b:f1:c3:af:c9:6f:
38:5c:10:78:84:cd:0d:80:31:97:94:9c:21:6b:0b:
94:44:a9:d3:13:d7:97:44:b0:71:64:a8:68:cf:b4:
85:30:c3:70:05:1a:39:fc:85:32:78:2c:18:84:29:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:D0:A4:1B:96:D4:F6:F6:14:57:73:15:AE:68:F5:57:51:10:9E
X509v3 Authority Key Identifier:
keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:42e0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
7d:cd:ee:1c:f8:c1:ed:72:4b:d4:2b:7e:dd:99:92:26:a4:df:
86:07:79:31:73:6e:c9:7d:b2:a4:b4:78:d3:83:e5:d9:f4:df:
ac:49:b2:53:9e:fe:62:eb:71:9a:49:08:cc:e7:73:a4:8b:9f:
52:83:97:b1:cb:5b:ba:77:91:e0:3b:13:66:94:bf:09:45:ee:
a3:f4:57:f6:32:65:6b:ae:c5:e7:93:c4:b3:4b:18:3c:f2:df:
93:48:ca:cb:fc:8b:11:7c:06:25:32:fa:3a:82:dd:39:63:ec:
f0:a6:95:8f:d3:1e:c5:41:36:e8:ae:6b:58:ce:fd:d4:e0:18:
65:e6:d9:f9:e7:bf:24:06:78:32:a4:86:fe:91:25:c2:63:13:
03:20:86:72:2f:e6:80:aa:6e:0a:b3:21:69:63:bc:f7:92:3f:
4f:a6:bd:4d:2a:cf:8c:ad:69:e6:e1:5d:1f:4c:72:b4:ad:09:
bf:4b:20:ba:bf:db:c2:0b:f9:49:eb:cb:b3:c0:aa:e0:9c:9a:
95:61:26:e6:9c:3e:33:7e:58:60:9c:17:c5:3d:81:fc:5b:38:
38:e3:89:4d:66:ca:4a:81:2f:aa:9c:ae:52:8c:89:c2:50:ef:
ae:46:d6:15:b7:3b:69:f4:56:7a:e6:fb:89:dd:e8:e5:54:a0:
b3:3d:8d:75
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZld2xkVA2RsNfkBnjDVfks2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy
ZGZlNjkwHhcNMjUwOTE4MTcyNDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTE1ZDBhNDFiOTZkNGY2ZjYxNDU3NzMxNWFlNjhmNTU3NTExMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEFUhWO+xlQV7dzlaG1INkChy4n8
9yjGLUp8OUiADugrZWTy+jENKGvu6OdcSVlsOXsg4PvSGiUu7sar8PO6zrj0HajQ
SKrKDv+qOyrDDqOUmpTU33TdbCxSBzFkeXblWQTaPbkgJcBXprHGdbVeBLdvmqBn
5juL9QpixnuEW33N5zj28iEA0Yo6Na/UywD8WTEsHANCczi/yR+Q08boWC2PLBDL
y7f8jfF+15HLvTcitU4HZbfbM0FRKOh0TMSla8JwutYgpewaObBr8cOvyW84XBB4
hM0NgDGXlJwhawuURKnTE9eXRLBxZKhoz7SFMMNwBRo5/IUyeCwYhCnM8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMkV0KQbltT29hRXcxWuaPVXURCeMB8GA1UdIwQY
MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It
M2JkYTM1MzljNmJjLzEveVJYUXBCdVcxUGIyRkZkekZhNW85VmRSRUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj
LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgBC4BAw
DQYJKoZIhvcNAQELBQADggEBAH3N7hz4we1yS9Qrft2Zkiak34YHeTFzbsl9sqS0
eNOD5dn036xJslOe/mLrcZpJCMznc6SLn1KDl7HLW7p3keA7E2aUvwlF7qP0V/Yy
ZWuuxeeTxLNLGDzy35NIysv8ixF8BiUy+jqC3Tlj7PCmlY/THsVBNuiua1jO/dTg
GGXm2fnnvyQGeDKkhv6RJcJjEwMghnIv5oCqbgqzIWljvPeSP0+mvU0qz4ytaebh
XR9McrStCb9LILq/28IL+Unry7PAquCcmpVhJuacPjN+WGCcF8U9gfxbODjjiU1m
ykqBL6qcrlKMicJQ765G1hW3O2n0Vnrm+4nd6OVUoLM9jXU=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:19:59 2025 by rpki-client