Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dnATRXfDPX52AFAC8W24K75pthk.roa
File: dnATRXfDPX52AFAC8W24K75pthk.roa (raw, json)
Hash identifier: QuyKbnNvTPncMC1e5oEVLqCDe3vLb3ObMAmyMLOVGPI=
Subject key identifier: 76:70:13:45:77:C3:3D:7E:76:00:50:02:F1:6D:B8:2B:BE:69:B6:19
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0198EA0FDA25B32E23AEEA437064F3045262
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dnATRXfDPX52AFAC8W24K75pthk.roa
Signing time: Wed 27 Aug 2025 05:46:04 +0000
ROA not before: Wed 27 Aug 2025 05:46:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 2a05:d742::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0b:a281::/32 maxlen: 32
2a0b:a301::/32 maxlen: 32
2a0f:2380::/32 maxlen: 32
2a0f:3380::/32 maxlen: 32
2a0f:4580::/32 maxlen: 32
2a14:4480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:0f:da:25:b3:2e:23:ae:ea:43:70:64:f3:04:52:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 27 05:46:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7670134577c33d7e76005002f16db82bbe69b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:29:ce:e0:af:ee:8c:ae:02:b2:7d:3f:23:
31:62:da:0e:55:cb:f1:8a:55:20:27:4c:18:1d:6a:
32:dc:e4:b6:d3:c8:f1:fb:4c:3a:cf:64:73:79:b2:
e8:f4:91:c4:54:96:6c:fb:cd:db:58:28:7e:a0:42:
6e:18:e0:e1:0c:94:77:04:7b:9e:3e:c8:b8:42:57:
b2:ad:66:65:51:54:b6:f6:14:16:da:23:35:62:f2:
53:56:cb:4c:b4:91:20:07:07:a2:2a:9a:65:e2:d0:
93:bb:89:5f:6b:6d:7e:f2:c7:06:ae:c7:bc:4c:1f:
cf:8d:21:22:54:f8:2c:9c:9f:3d:a2:4a:67:a6:dd:
10:3e:d7:1c:7e:35:3e:fd:a3:9a:94:31:e2:8a:c3:
bc:05:c6:01:51:dc:eb:0b:c0:91:f0:fb:0c:e6:9c:
62:37:9c:54:c6:54:58:33:06:9f:74:66:6e:54:7f:
6c:ab:ad:02:68:71:a0:94:a4:47:0e:f9:ce:3e:fb:
ee:bc:af:ad:a8:b5:18:e3:a2:29:ee:cc:e7:71:20:
4d:58:9c:bb:a2:9e:27:ca:c5:23:7e:a3:79:09:28:
68:0e:c4:d7:87:b9:4a:03:ff:2d:16:f7:5d:3e:8f:
bd:a6:64:f9:41:88:d8:47:a2:43:bf:f1:4f:e8:a1:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:13:45:77:C3:3D:7E:76:00:50:02:F1:6D:B8:2B:BE:69:B6:19
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/dnATRXfDPX52AFAC8W24K75pthk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d742::/32
2a0a:37c2::/32
2a0b:a281::/32
2a0b:a301::/32
2a0f:2380::/32
2a0f:3380::/32
2a0f:4580::/32
2a14:4480::/32
Signature Algorithm: sha256WithRSAEncryption
3e:8a:ab:d6:c4:80:54:cf:d7:32:0b:5c:80:0e:a8:84:df:6c:
e3:ff:5b:39:1d:8d:9d:59:41:a6:34:c4:fb:96:99:2b:b7:3e:
aa:89:a6:04:30:80:24:08:61:d7:9e:d6:5d:62:d7:14:4e:f3:
ea:0d:2b:87:0e:99:fe:2c:d0:d5:dd:f0:3f:b5:f9:b4:6c:23:
90:77:6a:f5:d0:0d:b6:c7:85:6c:48:68:e2:e7:7e:ec:5a:5e:
bf:3c:4d:45:88:7c:40:dc:25:f5:59:05:66:fd:21:70:d3:e5:
1f:da:4c:21:e2:76:b7:87:50:b4:ef:e4:3b:98:82:d3:cb:d2:
da:78:eb:e3:30:fa:38:45:bd:10:78:67:b9:6c:8e:0f:46:60:
dd:d0:a9:ce:c9:a5:33:a1:aa:52:8d:df:18:ec:93:ab:87:bf:
d1:38:41:f7:b4:26:c9:11:34:f4:55:b9:a2:ea:12:f0:c2:81:
8e:8a:3d:4f:60:da:5c:0f:62:44:16:d3:f8:50:c5:20:8d:ea:
cb:7d:df:f6:f7:83:e1:43:a6:22:6a:63:a0:03:ac:c1:0c:14:
5b:dd:18:0f:bf:b0:c4:04:c3:b5:67:04:da:71:29:e0:87:f5:
af:75:73:dd:db:0a:a8:d7:13:43:9e:b8:4f:ff:ce:b9:89:a0:
16:1a:a3:e3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZjqD9olsy4jrupDcGTzBFJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwODI3MDU0NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjcwMTM0NTc3YzMzZDdlNzYwMDUwMDJmMTZkYjgyYmJlNjliNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XgpzuCv7oyuArJ9PyMxYtoOVcvx
ilUgJ0wYHWoy3OS208jx+0w6z2RzebLo9JHEVJZs+83bWCh+oEJuGODhDJR3BHue
Psi4QleyrWZlUVS29hQW2iM1YvJTVstMtJEgBweiKppl4tCTu4lfa21+8scGrse8
TB/PjSEiVPgsnJ89okpnpt0QPtccfjU+/aOalDHiisO8BcYBUdzrC8CR8PsM5pxi
N5xUxlRYMwafdGZuVH9sq60CaHGglKRHDvnOPvvuvK+tqLUY46Ip7szncSBNWJy7
op4nysUjfqN5CShoDsTXh7lKA/8tFvddPo+9pmT5QYjYR6JDv/FP6KHkVwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFHZwE0V3wz1+dgBQAvFtuCu+abYZMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvZG5BVFJYZkRQWDUyQUZBQzhXMjRLNzVwdGhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwUAKgXXQgMF
ACoKN8IDBQAqC6KBAwUAKgujAQMFACoPI4ADBQAqDzOAAwUAKg9FgAMFACoURIAw
DQYJKoZIhvcNAQELBQADggEBAD6Kq9bEgFTP1zILXIAOqITfbOP/WzkdjZ1ZQaY0
xPuWmSu3PqqJpgQwgCQIYdee1l1i1xRO8+oNK4cOmf4s0NXd8D+1+bRsI5B3avXQ
DbbHhWxIaOLnfuxaXr88TUWIfEDcJfVZBWb9IXDT5R/aTCHidreHULTv5DuYgtPL
0tp46+Mw+jhFvRB4Z7lsjg9GYN3Qqc7JpTOhqlKN3xjsk6uHv9E4Qfe0JskRNPRV
uaLqEvDCgY6KPU9g2lwPYkQW0/hQxSCN6st93/b3g+FDpiJqY6ADrMEMFFvdGA+/
sMQEw7VnBNpxKeCH9a91c93bCqjXE0OeuE//zrmJoBYao+M=
-----END CERTIFICATE-----
Generated at Mon Sep 8 13:42:34 2025 by rpki-client