Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/mUdB6l_VWIU4i-95b2-h-EWSV84.roa
File: mUdB6l_VWIU4i-95b2-h-EWSV84.roa (raw, json)
Hash identifier: wKvG+kW8WKlTPjPTHN01j6KoGBFwGXF1mYdGc7K61bU=
Subject key identifier: 99:47:41:EA:5F:D5:58:85:38:8B:EF:79:6F:6F:A1:F8:45:92:57:CE
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019915AED77F6F0349A937C8869F100D9639
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/mUdB6l_VWIU4i-95b2-h-EWSV84.roa
Signing time: Thu 04 Sep 2025 17:03:23 +0000
ROA not before: Thu 04 Sep 2025 17:03:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2a0d:2d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:ae:d7:7f:6f:03:49:a9:37:c8:86:9f:10:0d:96:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Sep 4 17:03:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=994741ea5fd55885388bef796f6fa1f8459257ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:b1:0b:30:91:49:1d:2c:d0:20:57:1b:64:
a6:59:fd:12:67:ee:e4:47:92:fd:ca:18:00:0b:d7:
71:01:34:3a:b9:9b:15:05:19:07:7e:07:32:bd:d2:
c7:62:6a:4d:2d:02:c2:7b:a2:04:1e:82:dc:55:da:
e3:4c:c7:1a:41:37:d1:ee:62:ae:dd:d4:d3:7b:32:
41:a0:f0:80:8f:95:ee:3c:9a:0c:75:08:52:d6:3b:
d3:db:1a:0a:67:f8:f6:3f:53:bb:49:ee:37:65:88:
dc:92:4b:36:a0:44:5e:30:45:ce:d3:df:a8:e7:f4:
99:8f:ec:39:c7:dc:ed:f5:0b:21:c5:d6:8b:8c:0e:
5d:43:13:11:1c:d4:21:ea:88:0a:ca:b4:b6:c2:fb:
60:df:98:f2:0e:9a:45:84:1b:5c:85:f5:4e:84:f3:
3a:ae:e1:3f:87:1b:51:94:b4:e3:00:b9:df:a4:19:
73:46:2f:4c:51:4b:f5:16:8b:c3:f5:c9:d1:cc:54:
7c:a1:a3:75:45:aa:66:9e:89:3e:50:ef:d7:f0:6d:
38:e5:98:4d:f6:06:4d:15:3f:a8:8c:1d:d9:15:64:
d6:11:5c:5e:9f:55:93:71:e3:53:f1:87:60:ab:e4:
5b:bf:f6:66:d5:83:09:5a:02:5c:e7:b0:4b:da:c1:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:41:EA:5F:D5:58:85:38:8B:EF:79:6F:6F:A1:F8:45:92:57:CE
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/mUdB6l_VWIU4i-95b2-h-EWSV84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2d80::/32
Signature Algorithm: sha256WithRSAEncryption
54:3e:e5:56:2d:dd:54:20:dd:04:09:dd:b2:30:a4:8f:49:dd:
8b:fb:49:d2:c3:55:62:92:66:84:85:ca:80:73:d7:d9:47:fd:
e2:ea:37:46:98:26:d5:fd:e7:55:65:86:b7:89:90:a5:2d:32:
b8:9d:a0:f9:ac:2a:74:48:b3:c2:5d:72:7c:86:3b:8e:71:59:
a3:7c:1f:82:7d:d0:6e:a1:2d:6c:23:2a:a8:7e:be:b2:03:e9:
cf:ac:67:35:b6:43:06:4c:62:a7:25:38:60:31:3f:5e:da:8f:
c3:5a:be:89:2a:01:51:1f:ad:84:af:da:88:ed:ff:fe:23:27:
52:49:ca:61:f5:b8:6c:78:d7:12:a8:08:11:ce:f7:46:07:e6:
73:6e:f8:5d:52:af:3e:20:57:31:e3:68:3a:f9:19:e5:03:c5:
4a:e1:50:2e:71:c7:c8:4b:0e:d8:a9:a4:f5:6b:72:38:3b:7c:
b3:bf:c2:2f:53:a0:dc:58:e5:c2:22:44:08:1e:a0:17:da:f2:
f2:c4:da:15:e5:9b:21:ee:f5:74:a1:6b:63:0f:26:df:87:ba:
7d:b7:17:3c:e3:24:e8:b9:46:79:7d:f7:00:78:be:29:7c:b3:
67:0b:4d:c2:15:8c:c7:31:7a:a8:c0:4c:25:e9:ba:5d:72:a0:
f0:dc:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:20 2025 by rpki-client