Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/oTtVjHqYGznlsULhUnas1tjfT7A.roa
File: oTtVjHqYGznlsULhUnas1tjfT7A.roa (raw, json)
Hash identifier: hLuZXeT7a9+AwlaOWv5CG3uTZ+owaod/xzuANeUuUi0=
Subject key identifier: A1:3B:55:8C:7A:98:1B:39:E5:B1:42:E1:52:76:AC:D6:D8:DF:4F:B0
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0199AF603094324F2866E54E59A22826D27B
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/oTtVjHqYGznlsULhUnas1tjfT7A.roa
Signing time: Sat 04 Oct 2025 13:19:00 +0000
ROA not before: Sat 04 Oct 2025 13:19:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a14:67c1:b700::/40 maxlen: 48
2a14:67c1:b800::/40 maxlen: 48
2a14:67c1:c400::/40 maxlen: 48
2a14:67c1:c500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:af:60:30:94:32:4f:28:66:e5:4e:59:a2:28:26:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Oct 4 13:19:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a13b558c7a981b39e5b142e15276acd6d8df4fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:f7:28:cd:e7:cd:cc:76:fd:f7:de:f9:32:
1f:a0:0b:78:f0:73:6c:6f:38:65:0a:a2:c4:f6:a9:
0f:f5:9b:1f:a1:2c:39:87:0f:2b:0f:51:a6:54:fa:
f2:93:43:59:80:33:da:a0:06:e1:22:09:88:f7:24:
32:d9:e4:45:e9:bc:7d:60:e2:c5:ab:90:8b:f5:c9:
38:81:cd:93:f9:cb:20:bc:07:13:8a:bd:44:27:48:
e2:f0:ac:0d:f8:b5:5d:e3:28:9b:32:6a:bb:f9:a0:
33:cc:27:eb:ed:78:47:75:20:29:51:91:98:27:c8:
74:ca:9c:c1:64:1a:47:e0:00:2d:31:0a:69:f1:1f:
ac:72:90:95:25:94:34:02:cb:0a:ec:b4:2d:47:a2:
b1:60:b3:8e:b9:3e:f4:50:a6:d1:7c:ba:1a:2b:4d:
9f:f8:08:20:28:e6:01:d5:a5:c8:2e:a3:cd:29:9c:
55:4a:f1:69:4b:50:3b:f9:6e:d5:ef:1c:15:54:f2:
01:cf:70:23:6e:ad:06:03:9f:6a:59:ac:c0:73:95:
63:ca:8b:9f:f9:48:1a:b7:21:ed:26:0d:31:97:0c:
70:f3:7e:fd:19:80:fa:ea:63:38:72:f6:a3:6c:be:
be:86:f5:64:eb:78:52:52:35:b3:be:68:e7:59:1b:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:55:8C:7A:98:1B:39:E5:B1:42:E1:52:76:AC:D6:D8:DF:4F:B0
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/oTtVjHqYGznlsULhUnas1tjfT7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:b700::-2a14:67c1:b8ff:ffff:ffff:ffff:ffff:ffff
2a14:67c1:c400::/39
Signature Algorithm: sha256WithRSAEncryption
96:9b:3b:05:a1:23:5b:e1:a1:6d:79:86:d1:35:11:fd:e1:ec:
8f:db:a5:34:5a:86:63:62:29:e4:b4:6a:43:bc:ab:b1:a3:47:
ec:e6:2c:04:94:9f:3f:bc:fb:56:01:40:79:b5:b1:4e:6a:0e:
09:60:99:0d:21:a1:de:00:7b:60:f5:13:98:fb:60:31:20:0c:
a1:bd:1d:0e:ea:ca:d0:08:02:57:b6:4a:14:6d:9b:7c:87:90:
3b:b7:f1:dc:e0:d4:1f:f1:01:8a:74:39:97:0a:07:ad:3a:25:
c6:e3:a9:19:f1:9f:65:cc:25:4c:5b:c6:ff:c4:3e:21:64:10:
1c:a3:bc:f7:c4:ee:38:22:7d:b6:c3:e6:a1:95:e8:69:27:f8:
1e:27:ca:53:56:11:a5:23:01:03:71:8a:a7:ae:00:3f:9a:60:
c8:bb:e4:09:11:57:d7:48:d6:f4:aa:70:8c:7c:1f:06:8b:09:
7c:10:99:34:d0:32:9f:64:72:21:5a:4c:d9:63:8f:93:46:23:
8b:bf:e5:1c:61:89:27:e9:d9:41:b9:f1:1b:ec:07:04:66:e8:
66:d2:c8:4a:48:9c:25:02:fb:29:3f:11:a3:bd:d7:79:17:2b:
4b:f3:d0:18:54:06:27:31:ef:04:d3:77:88:51:6a:8a:31:a6:
73:8e:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:12 2025 by rpki-client