Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa
File: sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa (raw, json)
Hash identifier: Hc7ERUptFpk0ScrKHtUKGbi6CWLPw5nk1Svns8TFiak=
Subject key identifier: B0:A8:04:5E:DB:C5:B7:AB:00:1A:22:F9:14:C6:37:6F:6B:D6:E7:2E
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0198E681D1E5692E4F905D7679F7F7AC3970
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa
Signing time: Tue 26 Aug 2025 13:12:04 +0000
ROA not before: Tue 26 Aug 2025 13:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214189
IP address blocks: 2001:67c:2dd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:81:d1:e5:69:2e:4f:90:5d:76:79:f7:f7:ac:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Aug 26 13:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a8045edbc5b7ab001a22f914c6376f6bd6e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:ad:6e:7d:d6:e9:39:0b:b6:f4:06:87:5d:
73:e1:51:a1:7a:89:25:07:53:b8:ad:25:15:ab:5f:
36:af:2a:b1:bf:4b:07:98:f3:b9:06:1a:6e:60:b5:
11:bc:50:fd:2c:e1:06:3b:06:55:57:35:84:e1:bb:
2e:58:3d:54:00:05:f2:41:ed:c3:7f:3e:c3:8b:77:
cd:a1:10:b4:88:ab:8a:0d:28:6d:40:08:4c:30:00:
78:1d:38:0c:e2:66:ca:60:16:a9:a1:11:26:af:a4:
43:ac:5a:20:28:31:71:ff:85:60:23:76:16:fc:54:
30:3f:0b:b8:34:f8:ee:db:52:76:ed:3f:b9:77:95:
3a:00:b5:35:ee:b6:7d:d9:14:48:0e:59:0d:4c:bc:
33:d4:bf:0f:37:c2:e0:8c:36:ea:d5:85:cb:d6:26:
e1:7a:b7:d3:3f:97:a6:54:3a:cd:68:2a:26:60:4e:
07:d7:cf:b2:aa:74:62:30:53:7b:01:a9:f1:d8:a1:
18:f6:85:5e:ac:61:d2:49:eb:94:ed:68:72:0e:22:
5d:77:ca:3e:83:40:f1:17:ba:5e:94:be:6a:ad:e5:
34:0c:f5:0a:90:21:54:b7:7f:82:99:a3:4f:f9:ed:
55:0b:37:30:dd:f3:6c:e2:09:f2:40:0b:67:40:e6:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:04:5E:DB:C5:B7:AB:00:1A:22:F9:14:C6:37:6F:6B:D6:E7:2E
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dd4::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ec:36:25:b2:6f:3c:11:cc:0b:c4:30:74:24:f5:b7:52:50:
b4:fa:bf:e1:40:13:01:a0:5e:b9:d2:45:0e:15:e6:e2:b5:13:
cc:ca:73:c5:4c:a5:d9:76:90:15:9f:92:c4:40:45:13:a6:42:
ef:c0:20:f7:4b:16:5f:19:fe:d7:3a:f2:ef:e5:d2:a7:2d:77:
74:27:b1:02:fc:ce:11:39:9b:0c:e5:f1:50:8b:1e:28:a9:5a:
b0:6e:b0:71:bd:78:d6:9a:b1:89:40:16:2b:0d:80:d1:33:a0:
d2:d8:e6:17:99:45:0b:41:e6:5f:5c:d6:97:a7:4a:9a:c6:c0:
ab:08:75:21:8f:3a:08:f3:40:d4:58:65:28:93:ef:c5:51:c2:
ac:e0:b8:1b:33:4a:76:bc:1a:81:18:2a:54:2e:e9:28:91:9c:
39:f3:1a:c3:62:5b:bd:5d:b9:08:da:d4:f3:d2:8e:02:0f:c8:
40:88:d6:f3:4a:e0:5e:00:28:03:3c:88:54:c2:34:45:de:97:
5e:d6:a1:a4:52:d9:82:87:3a:9f:05:72:71:9c:6b:f2:a8:ff:
c1:19:f0:28:16:b5:be:10:81:f9:65:f1:b9:bb:8b:93:ed:c5:
7d:77:0b:3c:eb:2e:4d:8f:00:76:eb:0f:99:a9:55:32:5b:01:
0b:36:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:13:08 2025 by rpki-client