Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa
File: nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa (raw, json)
Hash identifier: 4ZlvJNXrGAdIi01cEy8MCjKiv0cc4QMFsSk8kg4630Q=
Subject key identifier: 9C:EE:D7:1B:06:F2:A1:AC:E7:95:00:6B:41:36:19:E1:69:22:77:39
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0199152758091D5D92CE842FDB8C6305D0F4
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa
Signing time: Thu 04 Sep 2025 14:35:23 +0000
ROA not before: Thu 04 Sep 2025 14:35:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 2a03:efc0:6200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:27:58:09:1d:5d:92:ce:84:2f:db:8c:63:05:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Sep 4 14:35:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ceed71b06f2a1ace795006b413619e169227739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:03:15:6b:5d:47:84:9d:15:7a:c4:3a:bf:
ae:cd:59:91:0a:9e:d6:ee:4f:cb:65:59:c8:e5:1c:
11:da:34:4f:b8:57:d3:bd:c0:b6:4d:02:48:fe:6d:
37:75:4b:15:a0:69:fa:53:ab:28:90:75:5f:b9:d0:
c4:d9:e9:9e:c8:9f:58:ad:18:3b:e9:71:d0:6a:a5:
0c:dc:30:22:23:74:df:05:e9:48:1a:9e:3e:cd:27:
96:ea:17:12:9c:ba:61:1c:07:db:a9:87:a5:a8:d3:
d3:2c:9b:22:7e:84:53:4b:86:9d:53:bb:f7:6a:33:
5c:a2:03:38:05:06:a1:e8:e0:64:06:5e:e3:10:9b:
5a:41:49:13:90:ca:75:6b:35:c4:4c:81:1d:7b:f2:
b5:8e:7f:c6:09:74:82:bd:9f:cf:5f:7a:c1:da:3a:
32:7a:23:6b:d6:32:4d:fe:68:d6:e6:8e:cc:81:52:
df:23:54:06:0d:8f:80:23:41:bf:59:a5:e4:00:6b:
b9:fe:3c:5a:3a:dc:bc:0d:9c:85:b8:09:f2:75:9c:
0a:9c:a2:5e:7c:5f:68:e6:75:8c:75:b3:00:77:0f:
69:b6:29:48:2d:5f:92:34:46:6c:8d:46:36:1a:8c:
0b:b1:a9:93:82:1e:72:04:84:eb:6e:0c:19:98:b7:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:D7:1B:06:F2:A1:AC:E7:95:00:6B:41:36:19:E1:69:22:77:39
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nO7XGwbyoaznlQBrQTYZ4Wkidzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:6200::/40
Signature Algorithm: sha256WithRSAEncryption
01:8e:da:2b:32:50:44:07:df:f7:a3:33:1e:95:b8:3e:95:73:
b2:18:0a:b7:1a:97:54:2f:0c:ca:48:65:59:a4:3f:31:b8:f6:
2d:31:47:f6:6d:37:2f:7f:b9:3d:a4:38:d7:bb:1e:e1:f9:07:
5d:85:36:e2:ea:db:30:d6:5e:32:26:e7:e8:01:93:ba:62:ea:
2d:4f:3f:63:ed:2d:42:7c:8f:51:51:07:5b:74:cd:43:75:e6:
1f:19:ca:5e:4f:3f:17:4c:e5:1e:19:e4:28:6e:3f:6a:3c:99:
ca:d8:26:5c:45:f0:d2:c8:0b:68:47:b1:f0:7d:bd:8c:cc:e2:
ea:1e:d0:8e:b1:2b:e4:ef:18:2a:22:e8:ce:96:6e:2d:86:9a:
c1:e2:98:64:24:2f:5b:9b:79:c9:e8:3c:88:12:e9:09:27:9c:
43:42:ea:35:65:e1:67:02:9c:11:12:ec:8b:27:13:7c:26:f7:
ec:18:25:6a:91:94:a4:42:46:2e:ee:fa:e5:25:44:e8:94:9e:
e6:25:fa:e5:3e:a3:aa:16:11:08:67:fa:e6:3b:4e:d9:27:42:
8a:bd:3b:db:bb:06:6e:d2:62:f2:25:87:70:a2:e4:c9:d7:2a:
11:28:93:51:e0:18:14:c7:7b:fd:bc:f3:ba:b3:c5:2c:3a:9f:
f1:4e:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 23:40:01 2025 by rpki-client