Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aq6KlZysbDLQ4D4CtmviBNX9mxE.roa
File: aq6KlZysbDLQ4D4CtmviBNX9mxE.roa (raw, json)
Hash identifier: 0VRSVc6dFAyx9rP2hf9m+j4g6HQK7GBOvG2B/JoJUo0=
Subject key identifier: 6A:AE:8A:95:9C:AC:6C:32:D0:E0:3E:02:B6:6B:E2:04:D5:FD:9B:11
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019953DED35B39D2F802041482F14306E2C1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aq6KlZysbDLQ4D4CtmviBNX9mxE.roa
Signing time: Tue 16 Sep 2025 18:52:15 +0000
ROA not before: Tue 16 Sep 2025 18:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.20.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:de:d3:5b:39:d2:f8:02:04:14:82:f1:43:06:e2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 16 18:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aae8a959cac6c32d0e03e02b66be204d5fd9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:09:92:0b:3c:ed:01:5c:48:6f:30:f8:46:
63:e2:65:97:f5:1f:eb:41:2b:1c:85:6c:6b:65:a2:
11:27:14:e2:b0:f3:9e:bf:8a:13:63:40:5a:1e:af:
bf:e9:d7:32:5c:0f:f1:c7:17:de:6f:3e:37:2b:a1:
65:a8:0f:b3:db:cb:ea:ff:ff:b3:a4:0c:a6:9c:86:
d6:c4:24:4f:74:df:e0:67:70:ac:01:7d:a1:a5:f9:
38:06:42:d4:0a:32:61:20:d6:d7:03:c2:e6:63:bd:
2e:a4:f9:71:9c:68:d1:f6:74:b0:65:64:1d:82:b5:
48:28:ed:74:fa:37:7f:3e:f1:f7:a6:b5:06:06:2c:
40:fb:74:38:4f:ef:fb:28:24:14:b7:2d:16:71:73:
41:43:b2:b3:d1:a6:12:b9:99:a2:6d:13:31:7f:86:
84:5a:74:87:7a:89:9a:61:69:06:45:66:31:99:e8:
73:aa:e9:a5:f6:6d:7f:8f:fc:19:ae:c9:6d:df:fc:
95:ef:91:5f:7d:1c:3b:a1:5e:db:65:d8:7b:f5:42:
91:96:41:34:45:2a:f8:43:e3:d0:64:1d:fd:28:5a:
e5:50:ab:a7:71:56:0e:f3:c3:a5:6b:0c:26:ea:6b:
0f:01:3f:18:08:b6:29:39:20:7f:77:cf:0b:8e:9e:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:8A:95:9C:AC:6C:32:D0:E0:3E:02:B6:6B:E2:04:D5:FD:9B:11
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aq6KlZysbDLQ4D4CtmviBNX9mxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.210.0/23
Signature Algorithm: sha256WithRSAEncryption
79:e9:16:82:16:ff:f5:ac:bc:35:8a:b8:ad:a7:9d:4e:9a:31:
2d:f8:30:44:41:1b:8c:60:ad:b3:59:a6:28:85:5a:5e:24:e5:
26:f4:37:a6:50:0c:e4:33:44:b1:f6:28:49:8f:a0:50:bf:41:
5f:05:7a:c3:05:84:d4:a6:09:cb:09:fe:33:f1:3a:5f:44:cb:
9e:d3:ed:73:be:44:42:33:28:9a:a8:c7:1d:a8:21:da:9d:ca:
cf:34:fa:af:6a:ef:0f:bc:10:eb:b6:8e:2f:0b:93:1f:28:fa:
de:87:01:1f:7f:46:41:5a:a3:67:b4:ee:b9:0b:db:dd:ce:03:
3e:77:fc:f1:50:6f:63:02:84:4d:bf:94:9c:ea:60:43:02:c1:
26:8c:31:b8:89:bd:7c:4d:f2:5a:28:19:ed:e4:48:68:0e:50:
17:15:58:ca:c3:52:63:e2:74:c5:37:2b:3b:69:bf:6a:74:33:
9e:c1:8c:8e:44:1d:de:fd:c0:ef:0a:ce:ba:93:d8:67:cd:1f:
af:27:5b:b5:dd:37:48:a3:3e:c0:d8:e9:a8:c4:cb:8c:de:a1:
25:4e:d4:06:87:32:62:10:77:e6:ff:8f:70:af:e2:82:28:51:
7c:b7:a0:65:a4:94:95:47:10:ce:2d:c9:da:c4:cf:ee:26:41:
c2:11:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:12:03 2025 by rpki-client