Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/la9aPzQVD_3MH6vIM8gHmz0Okf8.roa
File: la9aPzQVD_3MH6vIM8gHmz0Okf8.roa (raw, json)
Hash identifier: 2nwinZpGIRLeFQvdzRrYTsyFZ0LA2gopOvT8PpZvG0I=
Subject key identifier: 95:AF:5A:3F:34:15:0F:FD:CC:1F:AB:C8:33:C8:07:9B:3D:0E:91:FF
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0199063CDDF6BC3EFE054F6A1BAEA51BCE7F
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/la9aPzQVD_3MH6vIM8gHmz0Okf8.roa
Signing time: Mon 01 Sep 2025 17:04:36 +0000
ROA not before: Mon 01 Sep 2025 17:04:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a09:f9c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:3c:dd:f6:bc:3e:fe:05:4f:6a:1b:ae:a5:1b:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Sep 1 17:04:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95af5a3f34150ffdcc1fabc833c8079b3d0e91ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:32:c4:1d:dd:fb:b9:ce:b5:27:97:43:20:
3b:4e:fc:8e:3e:ff:5b:a2:a0:6c:dd:8b:81:59:cb:
e5:95:04:b9:bb:5e:3b:6a:76:a9:1c:0b:6b:c1:56:
21:ef:7a:f3:1e:7c:eb:d9:98:7b:bf:25:29:37:66:
b5:8f:33:c5:b3:fd:f9:b0:a6:d4:24:b8:fb:6b:77:
49:68:88:cf:b4:22:5a:fe:95:26:24:da:3c:61:00:
3c:7b:92:98:e1:e6:8c:71:69:ae:84:ef:a1:44:fe:
40:39:15:de:27:bc:5b:e4:9b:fc:41:58:24:c3:01:
87:b7:4c:9b:84:d5:86:3c:8f:a4:94:15:25:b3:aa:
e3:0f:90:3e:41:67:aa:61:39:c2:67:d6:98:3a:ed:
b7:1b:b8:31:fe:fd:e4:04:c1:4a:46:f9:29:c9:b7:
9d:9b:d5:32:6d:f5:92:99:6f:ec:bf:be:7a:f4:e4:
85:4b:5a:81:03:1c:0f:e4:11:97:92:e7:08:72:ed:
95:d7:67:e8:8c:0e:cf:96:d9:57:d3:cd:98:96:cf:
79:42:50:aa:bd:2d:be:1b:6d:8b:a9:f2:f4:5e:0e:
fb:12:9b:d4:79:23:4e:e7:d8:ce:51:81:a2:fe:3e:
3c:51:cb:63:bb:69:c2:03:cd:d3:64:44:09:87:30:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:5A:3F:34:15:0F:FD:CC:1F:AB:C8:33:C8:07:9B:3D:0E:91:FF
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/la9aPzQVD_3MH6vIM8gHmz0Okf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f9c2::/32
Signature Algorithm: sha256WithRSAEncryption
a8:ff:bc:cb:8c:e1:ad:d0:d3:27:c6:0b:f2:cd:a4:4a:0f:3d:
69:90:a5:4d:ba:57:41:2c:6f:74:b7:b0:ca:9b:a6:7d:18:b6:
ed:4f:00:4d:1f:d3:b9:46:1d:17:c9:02:b7:2f:1d:0f:65:9b:
b8:bb:2c:b7:ce:a1:24:91:bb:f7:6a:7b:47:60:0a:66:99:7e:
24:7e:f4:bf:00:2c:a3:43:3f:79:07:83:0c:e4:3d:18:21:a4:
3b:0c:ed:d3:a5:b8:27:85:c3:fb:4d:92:fd:4b:c3:ab:ac:67:
bb:e3:0b:f5:dc:44:40:02:b1:8d:73:bc:e2:6f:90:2b:61:f6:
3e:fa:3d:73:2d:88:f0:7e:eb:5d:1f:8b:a4:da:e1:46:d3:f1:
e5:b8:60:86:bd:77:73:46:06:45:2b:5a:91:85:f1:31:1b:df:
8e:07:9d:c2:a1:4b:d7:10:84:1d:d9:1a:8e:d1:0d:69:94:9f:
79:1a:3c:4d:90:c7:7f:5b:07:6b:d2:39:d6:ef:18:1a:a6:ae:
5a:e4:e3:4a:21:58:f0:5e:a6:75:63:a1:6f:73:9b:94:f1:a5:
1c:18:58:b6:d0:e2:4d:7f:59:22:45:8d:43:96:c6:a2:32:57:
71:3c:4e:11:73:df:0c:99:18:2d:d1:0c:91:28:65:fd:97:f2:
82:d0:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:31 2025 by rpki-client