Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa
File: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (raw, json)
Hash identifier: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=
Subject key identifier: C6:12:C0:26:3B:FD:FD:8D:6D:F2:32:6D:23:5E:11:EF:E6:2E:5B:76
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019740EFA9D9EF607128439084F024C3F0DD
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa
Signing time: Thu 05 Jun 2025 16:32:17 +0000
ROA not before: Thu 05 Jun 2025 16:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 2a09:9340:1800::/37 maxlen: 37
2a09:9340:1803::/48 maxlen: 48
2a09:9340:1806::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:ef:a9:d9:ef:60:71:28:43:90:84:f0:24:c3:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Jun 5 16:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c612c0263bfdfd8d6df2326d235e11efe62e5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:a8:a2:07:8f:14:56:a4:a0:a9:b6:47:47:
34:d3:a5:34:48:b6:83:ea:0e:fb:a3:59:9e:3b:2d:
8b:28:55:d1:17:23:b4:a2:ed:ae:d2:e9:d4:36:16:
38:9e:9f:52:19:77:ec:5b:50:3a:b2:09:8d:e9:c2:
17:55:71:0c:59:f5:b2:3e:87:d3:4d:b4:10:ef:03:
a4:98:e7:da:e3:96:f5:b7:d7:44:0b:ab:64:43:40:
88:8b:22:ab:10:78:9d:3d:fe:a4:92:17:3f:b9:5f:
13:b2:52:13:e3:7f:dd:43:5a:e2:56:8e:72:58:1f:
b4:ab:91:33:07:fd:67:66:0f:35:29:c6:59:9f:4f:
7f:88:43:6a:d7:b7:88:d9:6f:3a:69:b8:f6:49:ad:
cb:fb:c2:d0:2f:59:49:a5:c5:e0:06:e4:cd:8e:36:
dc:1b:82:2d:7d:66:cc:be:68:b7:50:64:2b:f6:b4:
7e:da:1a:50:76:9a:f6:4e:44:49:5d:36:1b:fa:8e:
3d:24:8a:9e:24:bc:e7:f9:6a:f3:be:0f:60:5a:af:
ec:5e:9a:ad:00:1d:fc:12:48:a6:cb:20:f9:7c:0b:
42:e1:a8:6d:59:8f:fc:07:e3:8b:aa:0f:a3:bc:6b:
98:f3:c1:b4:6f:1b:5c:d8:a3:68:88:fd:c1:4f:52:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:C0:26:3B:FD:FD:8D:6D:F2:32:6D:23:5E:11:EF:E6:2E:5B:76
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1800::/37
Signature Algorithm: sha256WithRSAEncryption
77:1c:d7:57:16:6d:20:77:bd:4e:81:f1:0a:72:fe:6f:09:82:
69:88:08:66:a1:4d:9d:35:2c:80:79:6a:b6:be:ec:8b:20:8f:
8f:c2:90:b2:4b:a8:39:49:b4:ec:b6:bb:8d:f3:6f:df:cb:ee:
03:76:c3:13:9f:b3:2c:56:dc:49:3f:f2:97:3a:db:70:4a:34:
3e:89:57:15:b2:d1:98:55:7b:34:3b:76:73:7e:95:98:72:2c:
ed:78:ab:ee:82:1a:46:66:1a:97:a9:87:af:1a:92:9e:5b:14:
0c:ba:f7:e0:42:6c:83:a3:1e:b8:5f:85:f3:bf:a8:2f:4b:09:
ec:1a:e0:a1:c1:db:e8:c7:2f:6f:fb:b5:e8:00:a7:e0:08:96:
f8:aa:ae:ac:2f:92:1b:19:f5:cc:7d:24:b8:bb:28:1d:92:4f:
43:84:ed:1b:fb:a2:d4:9d:f5:de:61:73:dc:31:bb:53:0d:58:
2f:31:08:2e:5c:22:68:a3:11:68:fa:c7:3b:90:86:5c:ff:c1:
08:45:ee:68:9e:ee:c7:2e:bf:a1:e1:c8:b8:30:e1:4e:b3:84:
a0:0f:63:78:0e:93:2f:d1:db:1e:a3:ce:93:8c:b0:a8:71:c1:
35:ec:d4:27:f2:f4:33:d4:35:48:24:33:71:6d:32:5e:47:c7:
38:c1:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:41:20 2025 by rpki-client