Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/4s48aLOiVD4PAJlQi3evZjtsYHM.roa
File: 4s48aLOiVD4PAJlQi3evZjtsYHM.roa (raw, json)
Hash identifier: +jROjw0Y1Zl0VbxjrP2tZzucpLOm1pI3G+f+iJEafys=
Subject key identifier: E2:CE:3C:68:B3:A2:54:3E:0F:00:99:50:8B:77:AF:66:3B:6C:60:73
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0199351CD3328F25E039A0F017102D859A3E
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/4s48aLOiVD4PAJlQi3evZjtsYHM.roa
Signing time: Wed 10 Sep 2025 19:31:45 +0000
ROA not before: Wed 10 Sep 2025 19:31:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47629
IP address blocks: 2a11:2800:1a59::/48 maxlen: 48
2a11:2800:1c1a::/48 maxlen: 48
2a11:2800:4894::/48 maxlen: 48
2a11:2800:82e9::/48 maxlen: 48
2a11:2801:5a27::/48 maxlen: 48
2a11:2801:7266::/48 maxlen: 48
2a11:2801:99bf::/48 maxlen: 48
2a11:2801:c2c1::/48 maxlen: 48
2a11:2802:15df::/48 maxlen: 48
2a11:2802:9a2c::/48 maxlen: 48
2a11:2802:a98b::/48 maxlen: 48
2a11:2802:ac1e::/48 maxlen: 48
2a11:2803:6b41::/48 maxlen: 48
2a11:2803:7070::/48 maxlen: 48
2a11:2803:852c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 22:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:1c:d3:32:8f:25:e0:39:a0:f0:17:10:2d:85:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Sep 10 19:31:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2ce3c68b3a2543e0f0099508b77af663b6c6073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:db:85:0a:58:2e:0d:f8:fe:b6:d6:1c:66:
19:a8:3b:75:ed:55:1e:71:c3:07:55:44:ab:17:5b:
8d:b9:98:ce:17:b0:82:c0:7e:f2:c0:f1:98:33:49:
c0:3b:0c:92:1b:48:0a:a2:22:da:b1:88:fe:a0:bb:
1c:70:2c:c3:d0:b3:ca:17:bd:6c:c3:5b:4c:ca:e9:
34:bc:5b:f0:82:b1:e2:16:bf:1c:b6:72:d3:d6:2b:
cb:44:99:6e:f2:97:af:8d:7d:93:38:e0:a8:f4:80:
1c:f3:18:e3:1c:a1:a0:80:d4:a2:4d:4c:d8:7f:a1:
2d:99:1a:99:bf:59:b8:5f:9a:5d:bf:a9:cc:db:7f:
11:1d:e6:0b:65:6b:e8:45:5f:ee:41:a6:31:25:2d:
74:ab:70:65:54:76:56:cb:e1:6f:d1:08:ac:bd:8f:
08:c0:23:ff:ee:40:7a:96:04:7c:ce:87:ec:5c:0d:
fc:b8:52:5f:ab:e6:f5:a1:d4:72:aa:ca:b4:ba:be:
ae:10:bd:24:2a:e0:16:e1:ca:d0:22:bb:13:72:c5:
b3:fb:92:c0:27:8f:94:60:8f:74:83:b3:75:1e:37:
d9:50:79:5b:6a:1b:da:11:8b:5f:a4:8f:d3:5e:16:
ff:41:4e:65:ac:c3:69:2b:98:3a:bf:8a:1c:c3:c0:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:3C:68:B3:A2:54:3E:0F:00:99:50:8B:77:AF:66:3B:6C:60:73
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/4s48aLOiVD4PAJlQi3evZjtsYHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2800:1a59::/48
2a11:2800:1c1a::/48
2a11:2800:4894::/48
2a11:2800:82e9::/48
2a11:2801:5a27::/48
2a11:2801:7266::/48
2a11:2801:99bf::/48
2a11:2801:c2c1::/48
2a11:2802:15df::/48
2a11:2802:9a2c::/48
2a11:2802:a98b::/48
2a11:2802:ac1e::/48
2a11:2803:6b41::/48
2a11:2803:7070::/48
2a11:2803:852c::/48
Signature Algorithm: sha256WithRSAEncryption
18:8f:29:34:37:17:6a:a9:35:a8:79:3f:4c:6f:2f:37:bd:db:
e5:d4:3e:1f:b7:18:4a:17:62:84:3a:bc:c9:9e:4d:81:14:ba:
06:24:85:17:c7:c6:25:fd:62:6e:d7:8a:f5:e0:36:25:51:ff:
43:d8:4b:56:17:a4:9a:c6:84:d7:33:6f:89:45:49:19:d2:9a:
ed:34:1c:f1:1f:53:1f:ad:e3:e6:54:c8:02:47:cf:70:05:84:
8d:e0:4b:a6:06:5d:14:26:7d:3f:33:1c:d3:7d:53:2e:5f:42:
28:6b:17:ee:2c:4e:4e:20:55:54:4e:95:3a:6b:4a:17:19:81:
aa:e5:e3:93:d9:ce:90:ee:b7:70:4f:a8:c2:84:11:76:02:c7:
e2:18:6e:7d:92:18:66:a5:3e:18:2d:71:05:a0:53:61:b7:d5:
ff:3e:7b:48:1e:9a:c3:a5:d3:cf:1d:0a:d2:bd:c9:c5:f6:2a:
00:06:81:5e:c6:b1:6a:15:70:05:f7:ba:a8:a0:41:78:b8:dd:
65:34:96:9c:f0:e4:0d:17:40:74:71:47:9e:11:7e:9e:93:c6:
0d:e9:9e:0b:62:97:c6:e8:03:95:66:0f:68:e3:78:43:bb:2f:
56:54:21:39:a0:a0:2c:ab:18:8d:c9:8d:d6:aa:71:c2:6d:a2:
75:b5:27:db
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAZk1HNMyjyXgOaDwFxAthZo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjUwOTEwMTkzMTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmNlM2M2OGIzYTI1NDNlMGYwMDk5NTA4Yjc3YWY2NjNiNmM2MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnbhQpYLg34/rbWHGYZqDt17VUe
ccMHVUSrF1uNuZjOF7CCwH7ywPGYM0nAOwySG0gKoiLasYj+oLsccCzD0LPKF71s
w1tMyuk0vFvwgrHiFr8ctnLT1ivLRJlu8pevjX2TOOCo9IAc8xjjHKGggNSiTUzY
f6EtmRqZv1m4X5pdv6nM238RHeYLZWvoRV/uQaYxJS10q3BlVHZWy+Fv0QisvY8I
wCP/7kB6lgR8zofsXA38uFJfq+b1odRyqsq0ur6uEL0kKuAW4crQIrsTcsWz+5LA
J4+UYI90g7N1HjfZUHlbahvaEYtfpI/TXhb/QU5lrMNpK5g6v4ocw8BkCQIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFOLOPGizolQ+DwCZUIt3r2Y7bGBzMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvNHM0OGFMT2lWRDRQQUpsUWkzZXZaanRzWUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTCBjgQCAAIwgYcDBwAq
ESgAGlkDBwAqESgAHBoDBwAqESgASJQDBwAqESgAgukDBwAqESgBWicDBwAqESgB
cmYDBwAqESgBmb8DBwAqESgBwsEDBwAqESgCFd8DBwAqESgCmiwDBwAqESgCqYsD
BwAqESgCrB4DBwAqESgDa0EDBwAqESgDcHADBwAqESgDhSwwDQYJKoZIhvcNAQEL
BQADggEBABiPKTQ3F2qpNah5P0xvLze92+XUPh+3GEoXYoQ6vMmeTYEUugYkhRfH
xiX9Ym7XivXgNiVR/0PYS1YXpJrGhNczb4lFSRnSmu00HPEfUx+t4+ZUyAJHz3AF
hI3gS6YGXRQmfT8zHNN9Uy5fQihrF+4sTk4gVVROlTprShcZgarl45PZzpDut3BP
qMKEEXYCx+IYbn2SGGalPhgtcQWgU2G31f8+e0gemsOl088dCtK9ycX2KgAGgV7G
sWoVcAX3uqigQXi43WU0lpzw5A0XQHRxR54Rfp6Txg3pngtil8boA5VmD2jjeEO7
L1ZUITmgoCyrGI3JjdaqccJtonW1J9s=
-----END CERTIFICATE-----
Generated at Sat Oct 11 04:50:32 2025 by rpki-client