Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6YJjObW1_CPDgXKpHS-TcyIptqo.roa
File: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (raw, json)
Hash identifier: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=
Subject key identifier: E9:82:63:39:B5:B5:FC:23:C3:81:72:A9:1D:2F:93:73:22:29:B6:AA
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0199C3E524EDD0CAC16DFFC985B1C8CA207F
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6YJjObW1_CPDgXKpHS-TcyIptqo.roa
Signing time: Wed 08 Oct 2025 12:56:38 +0000
ROA not before: Wed 08 Oct 2025 12:56:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207567
IP address blocks: 2a0d:d940:90a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 14:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e5:24:ed:d0:ca:c1:6d:ff:c9:85:b1:c8:ca:20:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 8 12:56:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9826339b5b5fc23c38172a91d2f93732229b6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:7e:f8:2e:d1:43:34:d0:9c:85:51:e1:41:
c2:33:8e:4c:2b:ae:7d:a2:7c:8a:48:4d:05:be:48:
a3:d9:f4:1e:23:b4:9b:eb:ad:6d:cd:2f:96:77:2a:
34:c8:ce:73:b3:0f:3e:cc:b3:e6:90:d1:14:d1:69:
6d:3f:b9:1f:53:0a:7f:f8:42:4b:c1:33:e6:cd:02:
f4:88:0a:00:f4:4e:ce:58:16:e7:53:ac:4a:30:a9:
8b:a4:0b:81:7b:dc:3d:8f:f8:e7:c8:ee:3f:ea:aa:
6f:a0:32:ad:df:a1:22:2f:6c:37:a5:a3:e2:3c:5c:
3a:24:56:32:44:26:cf:85:5c:44:95:8a:69:22:21:
4d:d4:47:a2:1b:47:71:4b:55:4b:73:65:17:a9:eb:
b7:3e:5c:42:e0:a4:21:09:10:dd:40:81:22:26:47:
96:ff:29:a8:80:b4:f1:68:3c:b3:5a:26:f1:34:27:
4f:3c:f5:59:c2:6a:c8:85:bc:bb:8e:63:c8:41:d1:
38:97:25:bf:5f:d0:86:37:47:29:7f:18:0a:e9:32:
04:93:b8:51:7e:37:d1:f1:e4:ab:43:57:09:9e:a9:
01:e5:9a:49:c4:2a:de:95:5c:59:45:d4:e4:03:d0:
1e:91:0a:14:3b:d9:33:11:a3:18:76:64:85:ba:f1:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:63:39:B5:B5:FC:23:C3:81:72:A9:1D:2F:93:73:22:29:B6:AA
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6YJjObW1_CPDgXKpHS-TcyIptqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:90a0::/48
Signature Algorithm: sha256WithRSAEncryption
95:7b:89:11:33:af:e3:5b:2b:24:74:56:92:72:d5:41:84:fc:
60:f1:39:29:ba:2c:0c:ad:51:18:85:95:8c:64:4c:5f:ae:91:
4b:31:de:e2:1d:88:46:c8:a9:33:91:d9:8d:3b:f1:6b:26:bd:
cc:74:f7:e4:a2:2e:67:4e:1d:72:f5:53:cf:f7:04:4f:39:e9:
89:ca:aa:20:c0:ec:19:b9:6a:3f:e9:b5:0a:63:98:b0:2f:fa:
97:80:9d:15:a0:25:2b:f7:78:ea:b2:28:00:2d:b7:cc:aa:ce:
90:04:e5:1a:29:55:f2:d9:ce:df:3e:99:20:75:c9:a3:73:12:
0e:e8:5c:8b:71:c8:07:7b:f7:62:cd:79:dd:77:a3:a6:87:cb:
62:46:70:2f:7a:3f:ab:85:70:53:d2:ff:f1:c6:24:f4:97:db:
eb:50:68:55:36:10:d9:82:25:b4:be:0d:80:ea:cc:ac:b5:1e:
a0:7a:1b:aa:b9:be:90:6d:40:ae:ee:43:f7:17:77:f5:d6:fb:
66:42:df:fa:fa:94:5f:74:5b:e6:1b:2f:3a:00:97:a5:9f:4a:
49:4d:71:4c:d0:7b:82:28:42:48:2c:35:ab:5e:0c:bc:7b:7f:
88:e5:eb:b1:8d:90:7a:e6:77:05:f2:b2:a2:61:af:b4:d5:de:
10:c5:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 21:21:24 2025 by rpki-client