Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/IlHjAyeqLjRfgi6KJVvjE2UxMvI.roa
File: IlHjAyeqLjRfgi6KJVvjE2UxMvI.roa (raw, json)
Hash identifier: v8Sm8PyxP9rwomiWK3+Zxuhy/1C0GjI7iO0cesD4qos=
Subject key identifier: 22:51:E3:03:27:AA:2E:34:5F:82:2E:8A:25:5B:E3:13:65:31:32:F2
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0197C70329373652CBBB08E69A942ABD3770
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/IlHjAyeqLjRfgi6KJVvjE2UxMvI.roa
Signing time: Tue 01 Jul 2025 17:22:42 +0000
ROA not before: Tue 01 Jul 2025 17:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 2a06:fe45::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:03:29:37:36:52:cb:bb:08:e6:9a:94:2a:bd:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jul 1 17:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2251e30327aa2e345f822e8a255be313653132f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:0a:1d:25:82:9f:23:22:ac:03:9e:6f:a7:
a3:9d:ff:a6:fa:51:ce:a1:99:d5:7a:66:27:a4:5e:
77:78:d2:c5:58:f3:69:ca:e5:eb:17:bc:b1:bb:93:
84:28:75:70:f7:fd:55:fc:1c:da:66:d0:8e:82:28:
c1:d6:49:11:ad:9f:e5:7e:4b:b0:81:ec:1f:0e:1a:
9e:9c:5f:06:a0:15:7a:73:41:cd:04:69:5b:e2:9b:
8e:cb:ed:aa:50:d8:e4:92:e4:f4:a1:ef:0a:30:d9:
ee:98:47:fb:41:53:c1:2f:2c:ab:f6:b3:2e:8e:c2:
7b:2c:f3:00:c6:16:50:30:30:b6:a3:ed:ed:d7:82:
d2:6c:9a:d7:a7:2a:57:ac:3c:fb:05:30:be:fb:e8:
70:63:14:cb:30:2d:69:63:40:0b:91:1a:f1:00:dd:
66:12:27:2f:3e:76:29:47:b6:af:42:b7:ca:9c:c3:
2e:9e:1d:f5:e4:33:e0:28:7d:9a:32:54:98:00:be:
18:5e:d7:75:14:ab:71:bb:78:15:d8:a4:f7:90:15:
96:27:52:b9:6f:a1:92:2c:4f:b0:97:a1:78:1a:a8:
3e:b4:21:1f:0f:54:cd:1a:79:c2:94:c3:41:9e:66:
6f:ee:46:5d:81:31:25:9e:80:a7:f0:85:ef:35:23:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:E3:03:27:AA:2E:34:5F:82:2E:8A:25:5B:E3:13:65:31:32:F2
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/IlHjAyeqLjRfgi6KJVvjE2UxMvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe45::/32
Signature Algorithm: sha256WithRSAEncryption
2c:4a:ac:f9:db:4d:10:a7:a2:1f:4b:87:57:fb:fb:23:cb:71:
7d:fd:66:ed:62:4b:33:6b:e5:1b:fa:14:32:39:1d:d2:5c:52:
8d:f2:1f:93:65:6b:c4:65:37:87:be:0c:e7:76:e4:ac:19:e7:
5d:c3:d8:a3:af:37:a0:4f:9b:5b:5b:62:dc:67:a2:1c:6d:82:
ce:03:48:ad:73:ca:10:d9:1a:b6:88:99:7b:4d:26:55:d4:02:
35:03:be:28:2d:4f:33:4c:3c:af:c8:61:d7:2e:36:aa:5c:37:
57:1a:d3:2a:d3:04:bf:f2:fc:c2:77:3a:b7:82:0f:af:4f:66:
78:61:9b:43:3e:95:cc:8e:3e:6d:ca:b5:e0:e8:9c:3d:c3:7a:
96:6a:ac:ba:01:18:99:9e:7b:65:30:69:69:eb:89:a7:f4:e5:
3a:10:9f:8d:f0:c7:9f:e8:29:05:51:c0:38:59:63:6a:a7:e3:
6d:5b:2b:cc:27:a4:dc:6b:bf:44:bc:f8:dd:84:58:26:ab:8b:
51:a1:0b:11:e6:07:de:35:61:4d:11:c8:46:87:72:35:cf:e7:
10:8b:c3:ff:4a:77:af:9b:c1:39:df:53:2b:27:8a:46:76:62:
32:97:7b:66:76:20:59:97:6f:bc:aa:29:07:9f:97:27:34:04:
a2:3f:eb:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZfHAyk3NlLLuwjmmpQqvTdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwNzAxMTcyMjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjUxZTMwMzI3YWEyZTM0NWY4MjJlOGEyNTViZTMxMzY1MzEzMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypoKHSWCnyMirAOeb6ejnf+m+lHO
oZnVemYnpF53eNLFWPNpyuXrF7yxu5OEKHVw9/1V/BzaZtCOgijB1kkRrZ/lfkuw
gewfDhqenF8GoBV6c0HNBGlb4puOy+2qUNjkkuT0oe8KMNnumEf7QVPBLyyr9rMu
jsJ7LPMAxhZQMDC2o+3t14LSbJrXpypXrDz7BTC+++hwYxTLMC1pY0ALkRrxAN1m
EicvPnYpR7avQrfKnMMunh315DPgKH2aMlSYAL4YXtd1FKtxu3gV2KT3kBWWJ1K5
b6GSLE+wl6F4Gqg+tCEfD1TNGnnClMNBnmZv7kZdgTElnoCn8IXvNSNmWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCJR4wMnqi40X4IuiiVb4xNlMTLyMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvSWxIakF5ZXFMalJmZ2k2S0pWdmpFMlV4TXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgb+RTAN
BgkqhkiG9w0BAQsFAAOCAQEALEqs+dtNEKeiH0uHV/v7I8txff1m7WJLM2vlG/oU
Mjkd0lxSjfIfk2VrxGU3h74M53bkrBnnXcPYo683oE+bW1ti3GeiHG2CzgNIrXPK
ENkatoiZe00mVdQCNQO+KC1PM0w8r8hh1y42qlw3VxrTKtMEv/L8wnc6t4IPr09m
eGGbQz6VzI4+bcq14OicPcN6lmqsugEYmZ57ZTBpaeuJp/TlOhCfjfDHn+gpBVHA
OFljaqfjbVsrzCek3Gu/RLz43YRYJquLUaELEeYH3jVhTRHIRodyNc/nEIvD/0p3
r5vBOd9TKyeKRnZiMpd7ZnYgWZdvvKopB5+XJzQEoj/rLA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 09:04:11 2025 by rpki-client