Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/43HN-WojVqeLOGbjlvU4KmuDcw8.roa
File: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (raw, json)
Hash identifier: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=
Subject key identifier: E3:71:CD:F9:6A:23:56:A7:8B:38:66:E3:96:F5:38:2A:6B:83:73:0F
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01980DA53A2596429189F44024252076895B
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/43HN-WojVqeLOGbjlvU4KmuDcw8.roa
Signing time: Tue 15 Jul 2025 10:33:08 +0000
ROA not before: Tue 15 Jul 2025 10:33:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397651
IP address blocks: 2a09:dc00::/29 maxlen: 29
2a0a:1f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:a5:3a:25:96:42:91:89:f4:40:24:25:20:76:89:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jul 15 10:33:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e371cdf96a2356a78b3866e396f5382a6b83730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:91:fd:14:66:cc:8d:bc:d3:f9:33:1d:0d:
74:5f:3f:81:5a:60:e5:e7:d6:72:93:47:81:64:6b:
2e:86:d4:eb:38:47:29:d2:cc:43:ed:a8:1e:d7:90:
03:85:2a:36:20:28:2d:60:05:b9:b4:42:0c:f4:7a:
b9:65:0e:3f:6d:a9:08:ed:5a:ad:c3:0f:a7:ac:c4:
23:40:77:81:00:b1:8a:bc:77:f5:84:61:9f:02:60:
b4:1e:f5:3d:01:e2:7e:39:9b:a6:38:d5:60:d8:a0:
38:59:66:d4:17:dc:68:52:d0:83:03:52:0e:cf:1a:
f4:95:67:e3:6e:ee:20:8b:b8:07:90:ce:8c:2b:6c:
e4:a1:b1:da:bd:10:57:0f:70:0e:6f:6e:e4:f9:91:
48:4e:6a:f0:26:a3:18:db:b8:ba:56:1b:18:98:69:
46:44:a1:9e:02:a1:07:6e:aa:12:0b:ba:d2:0d:e9:
28:4c:9a:25:8f:23:35:39:38:34:6b:01:eb:64:1f:
aa:3f:7b:13:8b:f9:b3:6a:cd:e4:e3:b6:22:85:d1:
7d:2c:aa:13:74:b3:03:57:63:38:c3:d1:e1:bc:25:
b9:df:be:71:7d:4b:19:3d:37:92:db:63:ec:c7:3c:
a2:c8:55:e1:2b:a8:47:24:35:75:56:f5:14:a1:4a:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:CD:F9:6A:23:56:A7:8B:38:66:E3:96:F5:38:2A:6B:83:73:0F
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/43HN-WojVqeLOGbjlvU4KmuDcw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:dc00::/29
2a0a:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:0e:12:e0:b7:ed:61:f3:56:68:8a:1b:91:01:f1:ac:ff:12:
1a:ac:1c:08:67:6a:12:a6:4e:d4:03:13:43:fe:7f:5d:4a:a1:
fe:a0:7c:77:52:00:52:76:58:02:5d:e7:5b:f3:19:bb:ff:c9:
57:31:3f:31:ef:f9:d6:45:3b:a0:8c:e1:a4:6b:4a:df:53:20:
64:a0:f0:bf:93:f5:ac:8a:ff:a9:04:e6:c2:5f:79:09:c5:fb:
a5:b5:02:6d:84:40:12:2c:b9:28:52:40:bf:61:5f:b7:91:8a:
e9:13:6e:b4:bc:33:b4:87:06:b0:8f:35:5a:9c:19:ea:05:4a:
58:7c:b3:3c:90:ec:a0:9d:d2:4f:93:d4:24:1f:79:64:c3:ae:
bd:f5:1f:21:e6:3d:fe:f5:41:a5:81:49:ce:5b:2a:27:9e:e6:
ff:12:1a:41:f1:1d:57:59:ab:9a:41:26:ff:38:d3:e6:2d:ba:
d6:e4:78:01:f9:67:25:14:f0:a9:05:d7:a4:45:c4:13:78:20:
19:b4:c8:bd:e2:62:a6:d3:c9:d6:7e:c1:c5:60:1c:5d:76:95:
50:b2:92:91:a4:8d:fb:be:32:60:b4:78:a6:4e:e1:bf:6d:d0:
43:77:15:9f:ee:25:34:47:04:fe:b3:7e:c5:54:e6:de:12:d7:
64:3b:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:55 2025 by rpki-client