Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9l0OpnAkxgW32u5vltCU75COEeg.roa
File: 9l0OpnAkxgW32u5vltCU75COEeg.roa (raw, json)
Hash identifier: WwX0mv2MzGgM21praCosx9rDAB5MyOdmAOdODbWz70I=
Subject key identifier: F6:5D:0E:A6:70:24:C6:05:B7:DA:EE:6F:96:D0:94:EF:90:8E:11:E8
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0198F302B23FBF02BB554F010213E04825A9
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9l0OpnAkxgW32u5vltCU75COEeg.roa
Signing time: Thu 28 Aug 2025 23:28:16 +0000
ROA not before: Thu 28 Aug 2025 23:28:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206178
IP address blocks: 2a01:e901:165::/48 maxlen: 48
2a01:e901:175::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f3:02:b2:3f:bf:02:bb:55:4f:01:02:13:e0:48:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Aug 28 23:28:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f65d0ea67024c605b7daee6f96d094ef908e11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:d1:58:f7:69:4f:12:6c:09:68:dc:83:05:
76:56:50:5d:53:72:d4:7b:cd:a2:4f:da:e7:83:92:
0c:13:35:2f:e2:ea:91:fc:ff:be:13:f7:ee:60:4c:
21:14:2d:6b:e3:62:fd:e3:46:6c:79:3b:2b:d7:d7:
a2:d9:e7:a6:c4:74:bb:87:76:02:bf:24:79:f6:c1:
bb:57:ac:b0:d0:d1:30:c8:1f:48:ce:b5:cf:a0:75:
5c:ee:c8:97:cb:22:84:b9:dd:f4:2b:db:3a:9d:d8:
db:a3:35:01:61:49:f7:cc:6a:a0:0d:3f:db:af:9f:
4e:a5:4f:60:e7:d2:d4:5d:96:d7:f9:5f:ac:1b:1f:
23:b0:af:3a:6e:3a:c9:16:7e:b1:c2:f6:f0:82:50:
fb:31:a2:e2:d4:da:e7:b2:cb:a1:69:2b:96:c4:0a:
e6:18:e7:c3:ea:ee:8f:37:0f:fa:63:39:86:ab:1c:
78:6b:b5:64:77:20:dd:ba:4a:0b:fd:7d:ff:cc:26:
b9:12:90:09:78:cb:80:13:58:5e:a8:d0:33:e9:1a:
5a:28:cd:da:0b:1a:79:47:c0:12:c1:36:f3:e1:a3:
5f:df:2f:94:86:cb:4f:f2:66:be:44:5f:21:b0:71:
72:9a:dd:94:cb:96:38:12:93:4d:fc:2f:a2:c3:9b:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:0E:A6:70:24:C6:05:B7:DA:EE:6F:96:D0:94:EF:90:8E:11:E8
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/9l0OpnAkxgW32u5vltCU75COEeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:165::/48
2a01:e901:175::/48
Signature Algorithm: sha256WithRSAEncryption
57:62:cc:b4:2b:84:b1:63:c2:a7:85:cd:f3:56:ff:a9:4c:05:
06:85:db:c4:14:70:3c:10:43:89:1f:4b:5f:e0:c7:2d:67:4b:
2a:0c:11:ab:c6:41:e4:f3:84:7b:5f:e4:5d:1a:25:03:e1:da:
b9:cf:2a:cd:0c:8b:5c:79:e3:2c:06:5c:7c:73:a9:0e:11:76:
1f:12:c1:73:81:c5:ee:09:64:32:bc:42:93:32:d8:6e:07:46:
ed:e6:83:87:78:55:72:a0:2c:e1:2c:0e:98:e9:d5:9e:3f:8e:
db:df:ea:79:d3:a8:c9:8e:95:26:5f:3d:40:79:e6:02:e1:b1:
ce:9a:2d:c6:68:64:cf:83:3c:52:83:42:4b:9c:19:e8:8d:07:
59:d2:87:da:e6:a0:1b:33:05:83:cc:f9:a4:43:7e:92:97:4f:
8e:f6:1b:98:87:91:4f:7b:13:b7:43:4c:9e:2b:cd:31:17:dd:
89:e7:11:ab:97:c0:d8:78:69:ed:10:f3:b7:c1:0c:91:9d:38:
ce:e8:16:88:bc:bd:2f:da:aa:e1:a9:63:9f:75:c3:e2:a7:01:
41:54:2b:44:55:13:ab:b9:20:04:24:f6:66:ae:fb:56:bb:db:
26:a6:be:bb:32:b2:b3:ec:26:0f:fb:05:5e:e8:e9:31:a3:a8:
47:83:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:46:12 2025 by rpki-client