Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9pP-9QNbVrQd1Aw4SfP6hQHH380.roa
File: 9pP-9QNbVrQd1Aw4SfP6hQHH380.roa (raw, json)
Hash identifier: ocV1tEI/PwYMkriTpWCWRxmFFKq+/Khp3u+tPQZ4aeA=
Subject key identifier: F6:93:FE:F5:03:5B:56:B4:1D:D4:0C:38:49:F3:FA:85:01:C7:DF:CD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019809336C5274430DD3F2B31E239E198567
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9pP-9QNbVrQd1Aw4SfP6hQHH380.roa
Signing time: Mon 14 Jul 2025 13:50:21 +0000
ROA not before: Mon 14 Jul 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 2a0e:d602::/48 maxlen: 48
2a0e:d602:1::/48 maxlen: 48
2a0e:d602:2::/48 maxlen: 48
2a0e:d602:3::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
2a0e:d607::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:6c:52:74:43:0d:d3:f2:b3:1e:23:9e:19:85:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 14 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f693fef5035b56b41dd40c3849f3fa8501c7dfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:eb:24:c8:2b:29:08:47:fc:c9:6c:e2:b3:
68:25:39:95:d3:5e:d5:64:28:3d:71:2c:4d:6f:4c:
45:ed:f6:36:ed:ab:f8:c1:1c:4a:b1:5d:dc:e6:de:
a5:fd:4f:35:40:93:ab:dd:f1:37:78:6c:4b:35:0c:
74:83:b4:66:8d:a2:0b:50:1e:1c:11:a8:91:ad:1c:
f1:0c:d5:fc:de:f2:61:75:78:ac:53:b4:f1:e2:82:
7a:b4:72:a3:7c:00:cf:df:3b:eb:3b:48:d6:8d:ed:
37:48:97:dc:33:29:71:99:f6:58:3a:8d:2d:2f:a1:
6f:69:7e:14:e7:61:e4:0b:e7:0a:6e:e7:77:8d:f9:
10:92:ee:c4:28:12:bf:34:62:a8:cd:5c:bd:d6:f4:
ac:ef:8f:6f:a1:b0:a2:ff:6b:21:a0:f8:c2:90:a1:
35:0b:98:c3:3f:97:ff:51:80:64:08:47:3b:5c:a3:
a9:6b:33:cd:87:8f:81:28:34:35:e8:2d:1a:9f:11:
88:f5:33:40:d8:d3:84:a7:30:dd:6b:8d:f3:7a:03:
24:80:ef:ea:1c:46:5d:3e:02:f3:44:53:94:e1:62:
55:08:c5:d5:2e:07:c2:8b:1f:10:57:68:80:55:12:
f2:e2:23:9a:27:52:e5:c1:5b:60:af:f5:c5:13:46:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:FE:F5:03:5B:56:B4:1D:D4:0C:38:49:F3:FA:85:01:C7:DF:CD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9pP-9QNbVrQd1Aw4SfP6hQHH380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d602::/46
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
81:1e:1a:e1:7f:6b:23:14:8f:15:a2:17:7d:31:c1:a9:d1:5b:
8f:dd:59:0f:b0:4b:ec:8f:8f:6b:aa:d9:1f:66:86:ff:d3:81:
57:cc:cc:11:f3:c2:38:40:27:c6:ef:05:46:47:8a:26:f9:28:
cb:ca:58:f4:64:73:47:66:c7:2d:ae:9f:81:f9:55:4e:06:ed:
25:23:ea:57:0c:dc:29:41:c4:30:79:c0:82:92:82:03:cd:b8:
ee:2c:3a:0f:e1:b3:1e:a1:d0:7d:7a:89:7e:99:9d:81:28:f6:
ee:da:7d:0a:3a:4a:4b:7a:0e:4e:d5:c2:3b:bb:b2:ce:6b:cc:
43:a0:c5:bd:2e:cb:a9:c4:d6:9f:63:02:37:83:37:5e:a7:2c:
4a:94:c7:eb:10:df:9f:f9:56:46:69:df:ef:fc:f8:46:3f:db:
57:75:00:fe:03:8a:40:85:f7:d5:11:d4:7e:98:01:fa:d6:b8:
1a:2e:96:11:16:6e:dd:82:dd:e1:13:76:32:1f:08:ea:85:03:
b9:29:de:f3:92:54:ec:75:a1:98:6b:48:34:fe:d1:c5:19:85:
ac:f4:70:e5:60:a7:bf:56:ee:8a:d6:18:61:08:ad:29:5e:55:
81:81:d6:be:ed:cf:39:8a:4d:2a:c2:23:2b:93:5c:a4:1b:e4:
2a:4a:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:01 2025 by rpki-client