Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nT1Muh75nfclTugYJPU4QbmvCas.roa
File: nT1Muh75nfclTugYJPU4QbmvCas.roa (raw, json)
Hash identifier: zNVGu7SWN+42Lm2+XXE7BlInogskRZLn7kb6g01Zn4k=
Subject key identifier: 9D:3D:4C:BA:1E:F9:9D:F7:25:4E:E8:18:24:F5:38:41:B9:AF:09:AB
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198E247AA81609ED19111CDE46B751DE39B
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nT1Muh75nfclTugYJPU4QbmvCas.roa
Signing time: Mon 25 Aug 2025 17:30:04 +0000
ROA not before: Mon 25 Aug 2025 17:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 2a14:e600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:47:aa:81:60:9e:d1:91:11:cd:e4:6b:75:1d:e3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 25 17:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d3d4cba1ef99df7254ee81824f53841b9af09ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e0:80:71:da:2f:d5:d6:04:6d:65:cd:2d:64:
cb:22:6f:5c:5c:0e:e3:0e:98:1f:1f:6d:95:c6:31:
a0:b6:35:62:98:7a:ad:4c:c4:b8:ab:89:80:f8:46:
e6:c4:f1:b0:f3:80:4b:2b:4d:52:37:a8:bc:9c:30:
bd:eb:b5:81:a1:c3:50:d9:cd:07:e4:89:43:a5:c1:
46:25:db:bf:17:95:28:88:c4:42:e7:60:b7:8a:70:
40:e4:22:01:2b:e0:68:4e:41:cd:54:d4:0e:63:39:
b1:c7:b3:6f:0c:31:13:8e:7f:10:d9:bd:33:ba:01:
75:c6:61:e1:be:7d:ba:9d:80:8f:d5:5d:92:26:2e:
e1:05:4c:ad:76:3c:f9:5b:8e:92:e7:3e:5a:f7:e4:
65:d2:24:45:e1:5c:bc:b0:dd:03:fe:b1:d3:b4:55:
fd:d2:bb:1b:6b:4e:eb:7d:00:eb:dd:db:eb:ea:cc:
90:5e:f3:df:fc:b0:07:af:da:f3:3b:8d:ee:90:d4:
4a:1a:24:91:bb:63:8f:51:7a:43:35:4e:4a:33:f7:
8d:ad:aa:c1:54:13:95:0b:c4:eb:dd:51:ca:82:02:
fb:ae:60:e0:42:0a:3e:9d:ce:81:1f:49:7b:55:61:
b3:3c:e1:ec:d5:40:f4:08:04:e3:b8:b4:d9:89:b2:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:4C:BA:1E:F9:9D:F7:25:4E:E8:18:24:F5:38:41:B9:AF:09:AB
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nT1Muh75nfclTugYJPU4QbmvCas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e600::/32
Signature Algorithm: sha256WithRSAEncryption
59:87:0a:47:84:bf:dc:38:8f:53:03:b7:b5:a1:62:ec:de:35:
93:58:0a:e8:62:cc:19:8a:c5:e2:f4:cb:d6:4a:00:1e:24:49:
d2:17:38:7c:ad:e3:9f:0b:f8:1b:af:09:27:96:61:6a:55:6d:
3e:5f:d0:3b:23:ae:ca:a7:6c:5e:1d:2c:a2:7d:6f:0b:73:01:
d8:fa:a7:6e:46:9d:b0:02:1c:63:42:36:d7:a5:11:0f:9d:01:
d2:ba:f9:bb:25:9d:c0:c4:9d:f7:a3:3a:da:3d:84:e1:58:94:
db:ba:59:a5:5f:6c:31:c7:87:52:32:c8:2c:14:5a:d8:5e:5c:
31:b8:c8:9b:b6:ed:3b:48:3b:76:f1:05:4e:34:8a:ba:12:27:
26:2a:54:df:0d:9d:11:c1:c1:4d:16:de:8d:88:5f:cf:b2:8c:
98:1b:ee:bb:cb:96:f6:3f:1a:54:58:38:9e:43:cd:3e:37:a1:
30:78:72:f4:ca:99:1f:52:92:31:c8:68:d9:71:e7:85:30:6b:
2e:6b:f7:b8:2b:de:61:34:c1:ce:7e:0b:38:c3:f0:e9:84:73:
33:06:88:1e:93:a4:d7:11:c6:56:76:ae:f0:5d:d5:fa:c3:51:
62:97:f4:f3:c4:1a:39:77:5c:6d:4a:c4:bd:47:18:c0:3b:f5:
41:4d:8d:fe
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZjiR6qBYJ7RkRHN5Gt1HeObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjUwODI1MTczMDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDNkNGNiYTFlZjk5ZGY3MjU0ZWU4MTgyNGY1Mzg0MWI5YWYwOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOCAcdov1dYEbWXNLWTLIm9cXA7j
DpgfH22VxjGgtjVimHqtTMS4q4mA+EbmxPGw84BLK01SN6i8nDC967WBocNQ2c0H
5IlDpcFGJdu/F5UoiMRC52C3inBA5CIBK+BoTkHNVNQOYzmxx7NvDDETjn8Q2b0z
ugF1xmHhvn26nYCP1V2SJi7hBUytdjz5W46S5z5a9+Rl0iRF4Vy8sN0D/rHTtFX9
0rsba07rfQDr3dvr6syQXvPf/LAHr9rzO43ukNRKGiSRu2OPUXpDNU5KM/eNrarB
VBOVC8Tr3VHKggL7rmDgQgo+nc6BH0l7VWGzPOHs1UD0CATjuLTZibI6qQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ09TLoe+Z33JU7oGCT1OEG5rwmrMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvblQxTXVoNzVuZmNsVHVnWUpQVTRRYm12Q2FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhTmADAN
BgkqhkiG9w0BAQsFAAOCAQEAWYcKR4S/3DiPUwO3taFi7N41k1gK6GLMGYrF4vTL
1koAHiRJ0hc4fK3jnwv4G68JJ5ZhalVtPl/QOyOuyqdsXh0son1vC3MB2Pqnbkad
sAIcY0I216URD50B0rr5uyWdwMSd96M62j2E4ViU27pZpV9sMceHUjLILBRa2F5c
MbjIm7btO0g7dvEFTjSKuhInJipU3w2dEcHBTRbejYhfz7KMmBvuu8uW9j8aVFg4
nkPNPjehMHhy9MqZH1KSMcho2XHnhTBrLmv3uCveYTTBzn4LOMPw6YRzMwaIHpOk
1xHGVnau8F3V+sNRYpf088QaOXdcbUrEvUcYwDv1QU2N/g==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:15:43 2025 by rpki-client