Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/57Lfb7ah2xU_M9L9IrSglqivw58.roa
File: 57Lfb7ah2xU_M9L9IrSglqivw58.roa (raw, json)
Hash identifier: FASmr5J/BhtQxegMIqPfowOKPKTy7iogwvSsCFnhGts=
Subject key identifier: E7:B2:DF:6F:B6:A1:DB:15:3F:33:D2:FD:22:B4:A0:96:A8:AF:C3:9F
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 01990B793468AA8FA752F5DC28499E04F510
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/57Lfb7ah2xU_M9L9IrSglqivw58.roa
Signing time: Tue 02 Sep 2025 17:28:36 +0000
ROA not before: Tue 02 Sep 2025 17:28:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a09:f1c2::/32 maxlen: 32
2a09:f9c0::/32 maxlen: 32
2a0e:7341::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:79:34:68:aa:8f:a7:52:f5:dc:28:49:9e:04:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Sep 2 17:28:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7b2df6fb6a1db153f33d2fd22b4a096a8afc39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:4f:f4:5a:f3:59:0f:f0:46:b9:7d:65:1b:
be:bc:b6:b9:29:b6:a9:4c:fb:77:3c:b4:e1:e4:47:
1b:ae:03:1d:a0:83:99:66:a5:9e:34:30:76:f6:fe:
9d:23:c9:d9:03:be:2d:dc:9e:a3:43:d0:46:14:9b:
8b:2c:fa:2b:6b:b6:3f:64:e9:d7:c3:83:06:48:42:
93:e0:ca:a5:da:d6:71:d1:7e:7c:5e:00:ae:74:69:
a6:65:8b:be:41:45:ca:df:5d:81:1c:a3:8c:c2:26:
56:61:b2:52:a7:1c:c8:13:c0:f3:ac:85:fc:24:86:
de:6d:4f:3f:92:30:3c:f0:1e:ca:26:2f:6e:94:67:
3f:60:38:73:46:f3:dc:05:9a:3f:65:47:05:e3:a8:
c1:15:9c:a1:49:74:a2:21:24:8e:9d:65:e2:87:91:
fb:cd:52:88:69:2b:4d:39:65:91:3a:33:e1:d2:a9:
87:bd:c3:71:c2:97:4f:d3:da:cf:4d:e3:23:74:43:
d7:cc:d7:cd:3a:36:e5:0a:2d:da:e8:ad:4e:5f:28:
9c:82:c7:74:66:cc:cd:a4:16:90:8e:cb:a0:80:dc:
b9:9d:8c:9f:55:9d:f1:ab:30:27:a2:ee:73:47:1a:
93:02:dc:ee:94:c0:e0:d6:92:5e:70:bb:85:b5:29:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:DF:6F:B6:A1:DB:15:3F:33:D2:FD:22:B4:A0:96:A8:AF:C3:9F
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/57Lfb7ah2xU_M9L9IrSglqivw58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f1c2::/32
2a09:f9c0::/32
2a0e:7341::/32
Signature Algorithm: sha256WithRSAEncryption
63:49:df:ae:74:95:4b:b6:95:06:27:78:bb:bf:de:6c:f8:cc:
4f:1a:0a:64:e6:cc:15:b3:d6:fe:8b:a1:75:55:7f:e5:d3:d3:
5e:0e:62:a4:ae:fe:ab:1e:1a:3e:0a:58:9d:2d:82:11:1a:8a:
82:fa:57:3d:93:97:2e:53:af:87:65:fb:ec:a8:f6:32:b5:2c:
1d:dd:3d:ae:69:c9:d4:2d:cd:f2:f9:de:62:dd:c8:7f:45:a7:
9a:59:e5:71:25:03:3f:12:25:37:45:32:d2:1f:23:f1:62:38:
cb:65:64:2f:ec:9e:e2:42:64:6a:52:1a:d3:52:44:bd:07:e2:
03:ea:f0:71:eb:8e:08:a9:27:f2:c4:ca:fc:1a:33:aa:4c:9a:
64:42:b7:92:ae:8c:df:af:2c:81:22:fb:b9:64:64:e9:82:69:
2f:ef:51:25:49:dd:fd:df:6c:6d:e0:df:19:df:99:17:bf:89:
42:58:13:93:f1:69:ca:b6:57:44:67:dc:ee:8e:08:56:3b:36:
66:4f:bb:bc:67:ff:29:12:12:1e:ae:88:68:16:05:84:83:a0:
e2:1d:5a:73:fd:d9:65:e0:a0:6a:0f:66:2e:80:9a:06:09:57:
52:a9:ab:92:9f:cd:22:dc:f0:59:1f:4f:97:ef:ad:64:bb:03:
41:15:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:09:20 2025 by rpki-client