Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/4DaFRyhphaevZU2yeo88GTb2ZWE.roa
File: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (raw, json)
Hash identifier: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=
Subject key identifier: E0:36:85:47:28:69:85:A7:AF:65:4D:B2:7A:8F:3C:19:36:F6:65:61
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0198F0E6D48F7BC73FC49ABE6626D0876C1B
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/4DaFRyhphaevZU2yeo88GTb2ZWE.roa
Signing time: Thu 28 Aug 2025 13:38:36 +0000
ROA not before: Thu 28 Aug 2025 13:38:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209387
IP address blocks: 2a09:5dc3:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:e6:d4:8f:7b:c7:3f:c4:9a:be:66:26:d0:87:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Aug 28 13:38:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0368547286985a7af654db27a8f3c1936f66561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:2d:3e:36:ab:8b:b4:f7:ef:30:90:77:8e:
64:3e:85:d8:b6:1a:f7:97:aa:14:2b:1f:1d:5a:e7:
b2:78:22:60:44:e1:05:42:37:0b:cb:1e:2f:b6:86:
47:a4:96:92:fd:de:d0:f6:69:16:58:a4:12:b9:8e:
77:41:94:26:aa:15:88:e2:eb:a9:54:9e:81:34:05:
57:4d:9e:26:e1:2b:f9:84:40:bc:15:2f:1a:0c:51:
9c:29:ce:5f:c5:dc:58:4c:c9:df:2b:1a:d8:aa:c9:
43:0f:49:4d:a6:e3:9d:85:49:a4:25:3b:02:5c:9a:
d9:dc:1d:94:81:fc:f7:91:cd:1a:ab:f9:cd:4a:5e:
91:bd:01:47:d6:80:d4:da:6f:d3:cb:e8:79:df:a5:
27:99:ed:50:59:0f:55:9a:53:58:37:f7:68:6a:b9:
c9:4c:47:c7:45:26:7a:15:41:fb:df:37:47:3a:7d:
d1:ac:48:88:dd:d1:8f:41:29:27:7c:0e:db:8d:66:
2f:60:72:9c:00:7d:5b:71:c5:bc:72:d9:3d:54:a6:
fc:3d:aa:76:da:39:91:af:ac:9c:f3:fb:96:bf:4e:
ef:9d:68:8a:ee:e2:fb:2d:10:41:6c:f7:42:f1:1c:
87:32:6d:27:9b:65:3f:41:44:2e:5b:0f:1d:79:ed:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:85:47:28:69:85:A7:AF:65:4D:B2:7A:8F:3C:19:36:F6:65:61
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/4DaFRyhphaevZU2yeo88GTb2ZWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5dc3:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
0b:7a:46:43:cb:85:4b:4c:b3:91:80:58:00:1b:e2:d5:ea:f6:
a1:79:d0:5e:f1:36:06:47:28:d0:a7:09:d6:c7:31:48:46:95:
1c:86:3a:76:3f:2f:6b:9a:85:d9:63:11:f6:e9:5d:97:35:a6:
53:09:1f:71:2f:58:f6:6d:41:11:2b:3d:a4:bd:84:f8:fe:07:
2e:db:ca:e5:2d:16:e5:2f:0f:a3:14:d4:de:a8:02:2a:99:04:
e2:eb:fc:da:f4:4d:94:bd:32:2e:6b:2b:a7:8e:bc:b1:b4:8b:
3d:fc:c3:88:54:94:7d:27:90:7a:53:40:c2:30:dd:b7:df:ff:
58:a7:b1:19:34:01:2a:1e:62:ce:4e:28:eb:f6:71:1c:7e:70:
47:68:34:c4:0d:08:a9:d5:ec:b2:c7:83:f8:03:88:82:2c:3b:
fb:5a:04:b6:29:0a:46:63:e0:d3:c1:93:0f:21:21:33:26:51:
56:07:6b:e1:c1:4c:62:bd:bf:60:a5:05:eb:46:09:1b:15:c1:
d0:9e:35:70:46:75:24:19:5d:80:8a:3c:d0:49:5e:2f:59:49:
a7:54:e7:9d:70:32:dc:23:10:30:65:82:dc:07:b2:f3:e9:02:
70:e3:fa:db:0a:35:b1:89:f2:cf:49:96:9b:97:21:1f:3b:12:
6b:b1:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:19:59 2025 by rpki-client