Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/1-RqyLpKd44cO4FmmOaM13BNaPCE.roa
File: 1-RqyLpKd44cO4FmmOaM13BNaPCE.roa (raw, json)
Hash identifier: rlww/38i44HbBV9JgKMSgctVjcVqKt5LK4L/CBwE38Y=
Subject key identifier: F9:1A:B2:2E:92:9D:E3:87:0E:E0:59:A6:39:A3:35:DC:13:5A:3C:21
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0198E0D4E0C57D25BACDE46C38BBBF055EDF
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/1-RqyLpKd44cO4FmmOaM13BNaPCE.roa
Signing time: Mon 25 Aug 2025 10:45:04 +0000
ROA not before: Mon 25 Aug 2025 10:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Sep 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:d4:e0:c5:7d:25:ba:cd:e4:6c:38:bb:bf:05:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 25 10:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91ab22e929de3870ee059a639a335dc135a3c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b8:00:6b:84:37:37:c7:13:f2:3f:fa:2b:
77:24:38:24:7b:4e:6d:4b:7f:51:61:1e:b5:6e:84:
20:f2:c0:5b:88:02:4b:84:86:5a:87:80:41:02:47:
0d:6f:df:7b:0f:e0:c4:e8:92:b9:a3:92:6c:ad:4e:
4d:4f:e0:97:aa:5e:3a:1d:61:37:b4:37:2e:c4:83:
ec:d5:87:d3:16:95:a1:e3:02:90:c1:85:30:10:b5:
0f:61:64:81:5b:8d:80:c3:5f:c6:25:7d:35:28:00:
8f:11:0a:5c:a1:ab:e3:c8:0f:43:ab:48:aa:d8:fb:
74:ce:01:6a:ac:fd:52:a2:54:8a:a3:1f:14:66:38:
e2:9b:8d:f2:be:01:02:46:60:07:a7:12:0d:75:3c:
ac:4e:75:5a:c2:95:52:42:11:a8:ae:b7:26:8d:86:
7a:bc:54:5b:dd:92:eb:c2:78:3e:58:c0:e2:78:e6:
70:90:85:8c:09:05:1d:31:89:18:25:92:7f:8c:e7:
dd:d7:64:71:c0:c7:b8:c6:e9:34:fe:c7:66:9a:45:
e7:35:e5:d7:f8:59:48:04:61:ea:7a:39:35:c7:2b:
c3:9a:b2:5b:46:5f:a2:f6:56:05:2e:32:45:39:99:
4e:40:d9:f6:64:a3:7b:86:90:3c:0a:ed:36:e0:a2:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:B2:2E:92:9D:E3:87:0E:E0:59:A6:39:A3:35:DC:13:5A:3C:21
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/1-RqyLpKd44cO4FmmOaM13BNaPCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:01:8c:76:be:f9:61:aa:cd:ff:ec:6e:02:de:63:88:e4:f2:
f7:1a:e7:0e:25:cd:25:7a:72:3f:84:1b:24:36:1c:f8:12:74:
80:cb:8e:31:42:ff:90:77:21:26:09:70:0a:c6:24:f6:51:83:
bb:ae:9f:20:99:87:49:c7:4a:fd:2c:5a:9e:f6:25:bc:b3:46:
c2:82:bd:93:1b:ff:1f:01:52:ad:a9:23:f6:44:9e:fe:09:61:
0f:f6:85:ed:ea:f3:0d:26:1a:40:3d:8d:cf:c9:d1:89:d9:b7:
17:25:59:06:b9:a0:d9:91:ac:12:1a:4d:97:55:c8:e3:08:ff:
bf:9f:c1:08:dc:64:4d:85:75:be:1c:12:5c:68:33:a8:cd:24:
6e:a0:14:20:87:15:60:a3:9b:f8:9d:5b:81:12:8f:0f:32:9f:
d2:38:db:8f:bd:69:ec:e7:65:7c:93:47:f4:88:0c:c6:84:92:
4b:87:a5:ff:aa:cc:03:d1:56:2d:64:11:f7:2a:34:8f:e1:f3:
3a:38:d6:e6:7b:0e:9e:43:67:bf:a5:07:43:6d:50:d3:14:b3:
54:df:89:8d:11:32:e8:89:46:e8:4b:6d:53:d8:60:61:db:6d:
b8:bc:b0:0c:48:aa:6b:88:3b:d7:da:fe:51:34:77:b8:1a:a9:
c1:b9:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 1 01:33:29 2025 by rpki-client