Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RQbuv8Lm8uBZPHgsozwsr2xCAWc.roa
File: RQbuv8Lm8uBZPHgsozwsr2xCAWc.roa (raw, json)
Hash identifier: z3MzdUBFXOJXE1tvjwFagUJP0z70Y1Xb323v8wJiCYY=
Subject key identifier: 45:06:EE:BF:C2:E6:F2:E0:59:3C:78:2C:A3:3C:2C:AF:6C:42:01:67
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019953BCF2E3D8FD496F4C6EDAAA788120F8
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RQbuv8Lm8uBZPHgsozwsr2xCAWc.roa
Signing time: Tue 16 Sep 2025 18:15:15 +0000
ROA not before: Tue 16 Sep 2025 18:15:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201341
IP address blocks: 2a06:fe43::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:bc:f2:e3:d8:fd:49:6f:4c:6e:da:aa:78:81:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 16 18:15:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4506eebfc2e6f2e0593c782ca33c2caf6c420167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:3a:e1:cc:f5:fb:a5:6c:64:4c:f0:49:64:
53:44:7b:8e:2f:f7:89:54:8b:ce:77:99:6d:a4:11:
c4:d3:0c:45:7b:42:55:52:cf:16:ed:4b:3d:58:92:
64:40:3b:3e:b5:68:04:0f:50:75:90:a4:f9:45:af:
82:74:46:72:9b:8f:0a:00:99:2e:da:b9:0e:06:da:
0e:e1:28:b1:37:39:df:15:a6:0e:b9:66:38:b9:04:
ad:66:37:83:4d:90:bb:8a:06:41:19:24:b6:ac:77:
dc:2c:8d:8c:50:14:a3:e8:bd:20:85:7f:e3:b6:2d:
17:aa:dc:82:c3:00:9c:d2:04:eb:ea:05:43:91:2c:
5e:a4:e2:49:f5:21:bd:1f:2a:5f:f6:11:9d:fa:80:
18:04:20:96:c1:5f:ad:de:5b:da:e0:a5:e8:1c:12:
39:8a:1a:2a:6f:18:dd:1d:62:f7:a3:10:05:af:56:
13:c2:0c:95:67:57:ff:c9:e8:97:38:8c:53:74:27:
72:e9:83:a1:2b:db:7b:a4:5f:46:d5:61:bc:ca:7a:
52:c1:20:04:b8:5a:9b:25:fb:17:58:a7:24:0b:ef:
08:12:3f:ff:08:c6:37:ad:53:c9:ac:59:77:5a:a8:
52:8c:d1:5e:d0:5e:31:46:1c:ad:d1:6f:a5:92:6f:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:EE:BF:C2:E6:F2:E0:59:3C:78:2C:A3:3C:2C:AF:6C:42:01:67
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/RQbuv8Lm8uBZPHgsozwsr2xCAWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe43::/32
Signature Algorithm: sha256WithRSAEncryption
5c:90:53:cd:20:b9:a6:7e:f9:37:ee:32:36:0d:6e:3c:58:93:
48:4d:cb:c3:61:2c:5b:43:e7:2d:d0:ec:ed:43:51:f5:0b:30:
15:85:24:1e:cd:97:bc:82:7b:b9:df:9c:b3:ee:4e:fe:c7:5b:
59:a6:54:6f:03:19:64:c8:52:b2:86:2d:74:84:aa:7c:52:2e:
b0:63:3c:61:d9:11:59:86:6e:6c:9d:bd:66:34:09:13:fa:90:
4a:6b:de:da:9b:f6:ba:df:87:95:a5:db:3f:e0:bb:95:45:12:
f4:2f:a5:bf:29:0e:a9:58:7d:a3:ed:d4:ba:8d:67:ee:66:62:
88:eb:f7:bc:7f:ea:91:cf:e4:5d:7b:9f:28:88:14:e5:73:08:
53:4d:27:88:dc:37:3e:a1:d9:ad:7e:1d:a6:f1:d4:5f:ef:b1:
c0:02:46:d3:33:3c:ec:51:6e:9f:57:3d:5e:04:25:6a:a3:ac:
8c:af:c0:48:c1:11:02:9c:ed:38:f7:45:ca:0e:d7:03:0f:ae:
00:91:4f:15:b6:cc:7f:f5:9e:29:b0:0c:3e:65:f5:19:af:e7:
a6:e6:fc:d9:ca:88:fe:59:07:74:46:ff:08:87:5a:9b:b0:fc:
78:9b:6c:52:cf:57:9e:74:32:80:c4:4c:0f:8a:36:97:ac:0d:
36:3d:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:47:05 2025 by rpki-client