Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa
File: jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa (raw, json)
Hash identifier: T8mkOaeaMXTxvWWAciz/M3jQHK7JfEnnQmxEEL6wiJg=
Subject key identifier: 8D:D3:86:93:CA:F6:5F:45:B8:57:87:BE:CD:75:75:45:30:4A:EF:38
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 019930D494F18AD410E46E279303A6E8BB80
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa
Signing time: Tue 09 Sep 2025 23:34:22 +0000
ROA not before: Tue 09 Sep 2025 23:34:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a03:efc0:4900::/40 maxlen: 40
2a03:efc0:4920::/43 maxlen: 43
2a03:efc0:4940::/43 maxlen: 43
2a03:efc0:4960::/43 maxlen: 43
2a03:efc0:4980::/43 maxlen: 43
2a03:efc0:49a0::/43 maxlen: 43
2a03:efc0:49c0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:d4:94:f1:8a:d4:10:e4:6e:27:93:03:a6:e8:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Sep 9 23:34:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dd38693caf65f45b85787becd757545304aef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:95:28:7e:5b:78:a0:f4:f3:04:8d:1d:2f:
ff:29:07:fa:2e:a3:c5:0e:e1:c9:6d:63:b8:46:e5:
d5:de:62:f1:9f:0a:be:34:1a:88:04:b8:0d:74:14:
9e:9d:4d:46:c5:ab:9d:2d:8c:32:54:9c:0c:29:72:
e4:e9:c5:63:bd:4f:1e:88:2f:c6:31:70:3d:6b:e2:
e3:9d:ac:8e:16:26:5e:8b:eb:44:cb:0c:4a:9b:80:
c1:12:28:34:39:cc:81:4f:4e:57:1f:68:41:af:dd:
65:f1:67:7c:f2:d7:cd:c8:48:a9:c9:bb:0e:1d:03:
ed:ba:26:d0:4a:a4:05:0d:cd:ce:3f:08:ae:b6:21:
64:36:c8:96:58:aa:0f:62:78:3a:f6:a3:3a:82:41:
1a:28:82:a0:63:be:ff:29:7d:7d:f6:bc:eb:34:bc:
fc:7b:56:10:c4:f5:e8:55:ca:6a:2e:b3:36:20:2b:
51:19:1b:4c:6d:bf:ac:6a:2b:7f:a1:b1:04:6c:cc:
8c:ba:99:e6:da:87:78:05:ec:e0:bd:7f:a2:80:ae:
cb:4a:30:92:b6:7d:66:96:13:61:48:95:c4:03:e5:
af:28:28:31:6e:25:bf:d6:6e:f9:fb:22:fb:2e:b0:
a6:7f:30:36:63:5a:d4:c3:74:c6:a5:0d:c1:53:0e:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D3:86:93:CA:F6:5F:45:B8:57:87:BE:CD:75:75:45:30:4A:EF:38
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/jdOGk8r2X0W4V4e-zXV1RTBK7zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:4900::/40
Signature Algorithm: sha256WithRSAEncryption
46:df:ea:bc:d5:fa:ff:53:5e:ee:18:c4:51:26:86:30:80:ac:
55:98:d3:e4:e0:e5:00:34:ef:79:b8:f7:8f:52:aa:c5:c5:bc:
68:7e:ec:dd:4f:4f:3a:e2:6c:34:8f:3d:eb:7b:96:da:94:02:
0d:78:e6:4a:a3:da:e2:cc:e5:46:19:c5:97:df:ba:c6:c6:9a:
b4:f3:9f:77:04:61:1d:8e:1c:0a:3a:f7:56:09:26:10:b3:0c:
41:0e:16:8b:7a:61:a5:da:3d:ea:ac:f0:45:f5:c1:f7:57:ba:
02:fc:b9:d1:17:ae:2b:08:70:0b:51:d2:7c:3f:40:b2:be:2a:
74:e0:c4:14:8a:c9:b6:8f:df:28:e5:75:13:04:b1:49:ca:33:
6c:29:e9:d8:b8:ae:86:71:4e:c7:a2:21:48:7a:54:65:ed:55:
24:e8:d0:d7:6a:6c:c8:9b:38:30:ab:14:e9:3d:53:2b:08:73:
e6:61:a7:7b:2a:3d:a6:34:34:a4:07:95:47:58:ec:0c:ce:fd:
91:88:d9:0e:3a:2c:68:ae:90:ef:69:04:af:b3:ad:d3:11:1a:
f7:af:61:15:17:8b:89:31:0f:5e:f6:96:a2:14:a8:47:5c:b6:
3b:d2:be:e7:cd:55:90:e8:d8:2a:3c:8a:f8:98:27:e3:c4:e5:
fa:2a:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:09:37 2025 by rpki-client