Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AB92dx88kwkSwu7Vgo9mUoYS2mM.roa
File: AB92dx88kwkSwu7Vgo9mUoYS2mM.roa (raw, json)
Hash identifier: xfYe7WhB9hj3Mo9Nrb0oxMXvvqAhWC7nfl2Fz9yUq1E=
Subject key identifier: 00:1F:76:77:1F:3C:93:09:12:C2:EE:D5:82:8F:66:52:86:12:DA:63
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198EA7F8CD04F4AD1F9BE95C115BEEE1B47
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AB92dx88kwkSwu7Vgo9mUoYS2mM.roa
Signing time: Wed 27 Aug 2025 07:48:04 +0000
ROA not before: Wed 27 Aug 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58136
IP address blocks: 170.168.9.0/24 maxlen: 24
170.168.10.0/24 maxlen: 24
170.168.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:7f:8c:d0:4f:4a:d1:f9:be:95:c1:15:be:ee:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 27 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001f76771f3c930912c2eed5828f66528612da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:54:be:3a:5f:05:b1:7f:3b:5a:95:8a:ff:
3c:c6:47:10:e7:c7:9c:2f:a9:20:60:dc:94:6c:59:
ff:57:ea:8c:9e:60:d6:06:05:82:f7:bf:57:e4:ac:
6e:28:b9:a8:21:bd:47:b8:24:cd:88:65:b2:a3:dd:
e9:df:8d:d6:0f:75:15:bd:79:58:77:2c:80:c4:81:
82:c2:fd:60:2f:97:95:68:7e:c9:6e:54:50:82:6c:
c2:64:7e:47:55:df:db:af:62:fc:1c:a3:b5:a3:29:
f0:df:38:07:6d:30:2c:fe:b6:56:2e:68:81:0e:87:
62:1b:ad:cc:62:e5:bf:df:6e:32:36:a0:b9:46:c7:
a2:e3:8b:56:62:da:11:4d:a1:ac:50:01:84:fb:a1:
e4:cd:7c:74:e8:2e:95:63:42:82:61:b9:64:cc:89:
37:9b:64:11:ab:ae:58:89:9e:22:5e:1f:28:2f:3a:
56:ae:70:13:30:7f:59:cd:93:66:b5:2f:bf:7d:3d:
be:08:90:5e:18:aa:05:d0:82:46:1a:f5:45:ec:18:
05:32:f8:ab:8d:b9:e3:46:a1:d5:ab:44:14:9e:69:
3a:fc:87:e3:d2:11:4c:b6:bd:1a:8b:42:dd:50:16:
24:28:07:1d:6d:d8:7d:b8:b3:65:9e:42:46:f7:ef:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:76:77:1F:3C:93:09:12:C2:EE:D5:82:8F:66:52:86:12:DA:63
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AB92dx88kwkSwu7Vgo9mUoYS2mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.9.0-170.168.10.255
170.168.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c0:69:32:57:f2:3e:08:6d:0d:bd:b9:9e:d3:60:a3:5d:ad:
ef:f8:b3:59:d4:15:70:c3:eb:00:db:eb:5c:34:a6:cd:8a:c7:
84:96:ca:d7:86:47:63:41:79:9d:b4:27:f7:82:b2:21:e9:3b:
a1:b7:11:18:44:17:5d:b5:f4:54:62:d1:ba:ed:77:88:2d:1c:
e4:14:38:be:f3:20:a9:a5:ad:23:4a:64:28:94:8f:9d:7d:db:
a2:1f:1e:4b:6a:21:30:a3:8b:2e:91:f5:f2:2f:6e:1e:6f:df:
8a:e1:46:3f:a8:b5:8b:5a:cf:7e:e7:cb:da:1f:a9:53:1a:19:
83:db:a8:f6:3b:91:52:7c:e2:01:69:b4:ee:ab:e1:20:c0:61:
fc:1c:77:2a:6c:2e:32:27:f3:5b:fe:e2:d7:f5:05:53:59:39:
5e:11:37:b4:67:92:4d:74:44:a2:e3:dd:fc:31:c5:3f:24:97:
7b:9a:d7:a2:c6:15:73:16:01:fd:d8:5b:f3:49:c8:02:7a:f2:
32:28:40:58:0c:86:35:4a:e0:ed:87:6d:ce:94:bf:f4:d4:e8:
1f:6e:d4:a7:6a:44:b7:cb:51:89:0a:a5:48:54:6f:8b:91:9f:
a4:66:e0:95:03:08:24:f3:47:f6:e0:a5:eb:c4:7d:fb:5b:96:
17:e2:fe:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 9 07:33:36 2025 by rpki-client