Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h86RYZhShEm4ZlZs7ee1LX0HA8A.roa
File: h86RYZhShEm4ZlZs7ee1LX0HA8A.roa (raw, json)
Hash identifier: arwJThqC/NS9wTkFETSdGUCeSI26ZNtPGiKKe7K7vhA=
Subject key identifier: 87:CE:91:61:98:52:84:49:B8:66:56:6C:ED:E7:B5:2D:7D:07:03:C0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0198E0E64860A41F05D86086A2177851AFCB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h86RYZhShEm4ZlZs7ee1LX0HA8A.roa
Signing time: Mon 25 Aug 2025 11:04:04 +0000
ROA not before: Mon 25 Aug 2025 11:04:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 2a0c:9a40:86c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:e6:48:60:a4:1f:05:d8:60:86:a2:17:78:51:af:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 25 11:04:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87ce916198528449b866566cede7b52d7d0703c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:ee:0e:de:1b:aa:88:05:9f:02:42:d3:2d:
03:dd:ad:a2:06:9e:46:9b:5c:e4:30:a0:b1:14:ce:
56:ea:43:5e:0c:92:7f:88:f3:09:80:ae:2e:df:6f:
0f:03:68:80:31:6e:e6:df:cd:b1:6e:8a:e7:00:d2:
6f:57:b6:99:cf:08:e8:6a:e7:08:35:09:25:5c:0c:
71:23:45:2b:35:0e:c6:f0:89:33:ec:a7:c0:f0:1c:
d4:ad:a6:39:3c:45:c2:de:9f:b5:56:0d:cb:0a:30:
38:4f:df:d9:2f:de:8f:1b:b3:15:6b:89:06:64:07:
f1:d1:67:59:ab:d6:a2:26:99:71:ec:de:00:d1:97:
ff:4a:05:67:72:89:ab:b0:b8:8e:bc:e9:35:37:c3:
ba:01:53:69:d8:56:5d:5d:4e:07:df:db:16:bf:c2:
05:cd:25:5a:07:09:6e:b8:4a:d4:93:69:e4:d6:33:
6d:bf:1f:b8:f1:e1:67:29:b4:46:e4:31:bf:4e:2c:
03:b8:45:1f:d9:70:a9:39:09:7a:a7:d4:3e:2e:22:
a1:23:ff:1f:eb:ac:23:d7:d1:81:43:87:66:e4:ed:
53:cd:56:03:60:67:af:03:c5:3a:e0:41:b8:d0:f7:
a6:37:cd:f2:70:17:fe:4a:12:1f:b9:91:3f:cd:ea:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:91:61:98:52:84:49:B8:66:56:6C:ED:E7:B5:2D:7D:07:03:C0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h86RYZhShEm4ZlZs7ee1LX0HA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:86c0::/44
Signature Algorithm: sha256WithRSAEncryption
a4:87:d8:6b:1c:25:6e:11:57:e1:09:f6:f6:da:ba:cd:d8:57:
5b:c4:26:7f:22:a7:33:68:81:f7:0d:ea:96:20:48:91:3a:30:
3b:f6:c5:db:bb:b4:b4:83:e1:4f:b3:88:85:f3:6a:a4:c6:9b:
42:64:a0:ac:76:63:d0:b1:7d:58:ef:ce:f3:6e:1e:4c:6d:f5:
65:a8:f4:e8:29:fd:e3:76:46:d1:79:17:7e:c6:34:dc:09:b0:
93:a6:69:d0:09:c2:d1:51:8a:23:e4:0c:db:d8:7d:b7:51:87:
c1:67:dd:92:c2:09:a8:51:26:de:70:e8:14:fe:eb:f7:cd:5d:
dc:02:d5:d2:ea:c1:55:d2:66:b9:08:26:77:ef:72:cb:42:58:
91:96:28:d9:11:a0:bc:bf:a1:9f:bf:dd:39:a2:1d:b2:ce:16:
34:4c:aa:a2:f8:a7:f9:eb:68:56:8c:84:3c:85:8f:0b:4d:d7:
f2:8a:24:cc:ef:6a:53:50:f7:77:99:6f:51:0c:5a:f5:34:87:
bd:85:cd:a6:74:56:16:1f:ed:b9:4d:13:c3:7c:e5:7f:43:4b:
a9:2e:dc:97:69:8a:e0:f0:26:43:fc:68:de:84:56:2d:e1:86:
5f:a6:50:9b:13:9c:a3:20:bb:26:be:74:62:7a:93:17:91:6f:
d4:12:0c:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZjg5khgpB8F2GCGohd4Ua/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwODI1MTEwNDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2NlOTE2MTk4NTI4NDQ5Yjg2NjU2NmNlZGU3YjUyZDdkMDcwM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovuDt4bqogFnwJC0y0D3a2iBp5G
m1zkMKCxFM5W6kNeDJJ/iPMJgK4u328PA2iAMW7m382xbornANJvV7aZzwjoaucI
NQklXAxxI0UrNQ7G8Ikz7KfA8BzUraY5PEXC3p+1Vg3LCjA4T9/ZL96PG7MVa4kG
ZAfx0WdZq9aiJplx7N4A0Zf/SgVncomrsLiOvOk1N8O6AVNp2FZdXU4H39sWv8IF
zSVaBwluuErUk2nk1jNtvx+48eFnKbRG5DG/TiwDuEUf2XCpOQl6p9Q+LiKhI/8f
66wj19GBQ4dm5O1TzVYDYGevA8U64EG40PemN83ycBf+ShIfuZE/zeoj9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIfOkWGYUoRJuGZWbO3ntS19BwPAMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvaDg2UllaaFNoRW00WmxaczdlZTFMWDBIQThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIbA
MA0GCSqGSIb3DQEBCwUAA4IBAQCkh9hrHCVuEVfhCfb22rrN2FdbxCZ/IqczaIH3
DeqWIEiROjA79sXbu7S0g+FPs4iF82qkxptCZKCsdmPQsX1Y787zbh5MbfVlqPTo
Kf3jdkbReRd+xjTcCbCTpmnQCcLRUYoj5Azb2H23UYfBZ92SwgmoUSbecOgU/uv3
zV3cAtXS6sFV0ma5CCZ373LLQliRlijZEaC8v6Gfv905oh2yzhY0TKqi+Kf562hW
jIQ8hY8LTdfyiiTM72pTUPd3mW9RDFr1NIe9hc2mdFYWH+25TRPDfOV/Q0upLtyX
aYrg8CZD/GjehFYt4YZfplCbE5yjILsmvnRiepMXkW/UEgwf
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:24:40 2025 by rpki-client