Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kIG4-YLcSWaOiJ1A8Swnp8k8vnQ.roa
File: kIG4-YLcSWaOiJ1A8Swnp8k8vnQ.roa (raw, json)
Hash identifier: 3XBx35nMPD/co1ZPPAeDyRHHe5WXWcNIzfxaZD2g45U=
Subject key identifier: 90:81:B8:F9:82:DC:49:66:8E:88:9D:40:F1:2C:27:A7:C9:3C:BE:74
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019906AE6508726267786A53FCCF6A24AD43
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kIG4-YLcSWaOiJ1A8Swnp8k8vnQ.roa
Signing time: Mon 01 Sep 2025 19:08:36 +0000
ROA not before: Mon 01 Sep 2025 19:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204335
IP address blocks: 2001:3182::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:ae:65:08:72:62:67:78:6a:53:fc:cf:6a:24:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 19:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9081b8f982dc49668e889d40f12c27a7c93cbe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:0a:71:e3:a1:f9:db:d3:9b:4f:c2:f0:49:
67:dc:5b:46:1f:c8:18:5f:da:88:a7:80:4f:2b:ef:
aa:ea:3d:a0:79:4f:d5:1d:b0:f0:41:13:12:ab:cf:
3f:a3:a4:2a:60:ff:53:05:16:1b:b8:63:44:19:47:
a6:bf:59:d3:5a:a6:f1:4a:d3:95:5e:ab:92:0d:d2:
30:af:1d:b8:6b:3d:0c:cd:b8:8b:e8:ab:3f:a7:b6:
38:60:1c:be:7a:e2:cb:06:56:93:2f:3a:76:8a:a7:
1a:03:2e:11:dc:e5:36:e4:50:13:e9:2c:e7:6a:82:
ed:3c:20:fa:9c:cb:cd:53:81:5a:37:ce:1d:3d:6c:
ab:1c:36:d7:04:db:fa:ca:03:8e:d7:79:bf:ee:8c:
e2:e6:9e:9a:f2:11:ed:51:44:60:07:07:71:fe:4f:
6d:31:c1:21:6b:4e:55:86:ec:92:c3:5f:49:31:f9:
b4:b8:f9:06:1d:d3:7d:9c:a9:5d:d0:41:c4:1f:63:
02:64:a2:c5:60:fd:b2:44:08:ce:89:2f:fe:cf:e2:
8a:19:02:a2:4a:ea:95:6d:a7:49:49:b3:cf:97:5d:
6a:32:16:c4:7b:9a:a4:15:82:a9:29:ad:30:27:95:
ba:f5:bf:43:9d:25:e4:6e:8e:7a:7e:19:d0:a5:4d:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:81:B8:F9:82:DC:49:66:8E:88:9D:40:F1:2C:27:A7:C9:3C:BE:74
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kIG4-YLcSWaOiJ1A8Swnp8k8vnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3182::/32
Signature Algorithm: sha256WithRSAEncryption
4e:7d:19:f8:e1:3f:fd:47:9e:b2:b6:2d:28:85:d4:c4:10:1b:
14:e1:6c:ea:92:bc:7a:dc:3c:c7:d1:1f:7a:1a:77:3e:a0:d0:
20:82:ce:1e:36:8f:7a:65:9a:d4:da:57:c3:b2:e7:40:29:5f:
8e:a2:19:0f:39:c4:1f:75:e3:de:ea:6c:fd:33:fa:2d:54:1a:
bd:4f:d5:3d:37:32:4e:e8:0e:eb:6f:00:72:49:1a:61:6b:08:
03:67:8e:d0:07:ce:83:b0:63:a3:58:b6:e0:03:29:a5:69:02:
9a:16:22:9a:cf:7a:f6:00:7c:ec:c7:c4:6d:4a:69:bb:16:04:
5c:b9:7e:ad:7c:37:21:db:53:a0:bc:1f:b7:cd:f8:e1:39:c8:
8f:56:18:de:76:c9:bf:28:30:bb:84:54:8d:f2:1b:64:fc:b3:
7c:d5:d8:e2:4b:fb:40:68:21:66:f2:50:e0:2c:7a:af:bf:49:
8a:c3:bc:ac:23:8c:e6:ee:b0:9a:2f:1c:26:1c:70:e8:c2:7f:
ac:c4:2b:cb:b4:65:9d:19:b8:5b:dc:cb:72:6c:bd:90:e9:82:
57:2c:d0:80:24:8a:fd:68:94:fc:33:b9:0a:85:c6:2d:f4:7b:
f0:4b:c7:e9:05:f4:bb:e8:f1:2b:47:ed:42:09:c5:d6:d6:e5:
91:05:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:02:04 2025 by rpki-client