Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/tAUwOh7-bFAje0ge2CsLFBhij_I.roa
File: tAUwOh7-bFAje0ge2CsLFBhij_I.roa (raw, json)
Hash identifier: wxXEKUHCbWw2dnlts0k+6en+iFwSRN99/5HuuqUJ79U=
Subject key identifier: B4:05:30:3A:1E:FE:6C:50:23:7B:48:1E:D8:2B:0B:14:18:62:8F:F2
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 0198E643902000C250E5F22138DD3757D43C
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/tAUwOh7-bFAje0ge2CsLFBhij_I.roa
Signing time: Tue 26 Aug 2025 12:04:04 +0000
ROA not before: Tue 26 Aug 2025 12:04:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208787
IP address blocks: 2a14:ae00:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:43:90:20:00:c2:50:e5:f2:21:38:dd:37:57:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 26 12:04:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b405303a1efe6c50237b481ed82b0b1418628ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:64:c4:0f:07:7a:f2:76:d3:ce:3d:a4:dd:
3e:80:7a:e9:7a:2f:17:63:7a:d1:9d:c3:5f:c0:e6:
80:92:ad:c8:1d:cf:21:40:a2:d0:13:2c:1b:29:11:
35:bd:78:c2:8e:33:9c:f4:7c:1d:1e:bd:e4:69:9e:
80:84:21:2f:33:32:97:1d:43:0a:a3:5a:12:18:97:
81:a0:2c:24:bb:22:3d:92:c8:5b:2c:68:05:3e:5f:
8e:4f:ab:8a:81:8b:40:0e:f0:fc:57:df:10:06:d5:
d7:6a:7d:ee:69:3a:53:d3:22:7f:17:6b:c1:ab:d3:
36:38:45:15:d1:d6:c4:e4:bd:9a:9b:0e:f4:ae:90:
cf:5a:65:1e:b2:d2:11:38:28:7f:a9:a7:8a:cf:7b:
47:a9:da:e7:bd:93:54:1b:7d:64:7d:94:9a:c8:59:
b9:72:6d:5a:83:64:7a:bc:ba:38:f7:2e:94:43:55:
ed:0f:5b:64:f0:88:71:76:3b:92:5b:05:09:02:63:
94:91:eb:f1:3f:f5:28:fd:c8:24:70:58:32:8b:fb:
0b:69:bb:60:66:fa:dc:cd:db:af:19:ea:b3:a7:c1:
50:f5:72:a2:35:0c:bf:df:69:5d:3c:1d:0c:40:15:
a9:73:b2:fb:ff:30:fa:fd:aa:31:5e:a4:31:c6:0f:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:30:3A:1E:FE:6C:50:23:7B:48:1E:D8:2B:0B:14:18:62:8F:F2
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/tAUwOh7-bFAje0ge2CsLFBhij_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:30::/44
Signature Algorithm: sha256WithRSAEncryption
76:05:57:76:67:db:5f:39:b9:23:35:67:a3:ce:54:f4:79:3c:
c4:bf:19:9b:ec:6e:82:48:e8:74:17:a1:38:9e:7f:fc:b4:a6:
ae:90:05:0e:f3:c7:ab:61:ef:45:77:29:c1:b3:ad:f4:5b:2f:
3f:13:e4:ce:9d:12:13:c0:89:7a:f2:c4:c4:a0:ca:38:60:97:
12:d6:e9:b0:40:66:38:9b:e2:e2:e3:82:ff:8b:a3:89:27:d3:
9d:30:ae:d8:ff:e2:98:9c:0d:5a:08:23:61:af:32:9e:7c:08:
d1:39:58:80:ba:88:c0:17:4e:7e:88:10:1f:26:02:11:90:24:
21:50:c9:cb:14:1a:48:5e:fc:3f:f9:eb:6c:c2:ec:c6:71:ae:
0d:72:9d:8d:09:de:8b:5e:02:e7:f7:17:87:70:30:9b:e4:de:
3d:f1:48:be:cf:d9:bb:d5:29:cc:cc:1c:f6:a2:d2:ac:1f:b6:
bd:6d:af:0d:8d:b0:e1:a9:b0:d4:05:f0:9c:61:b5:41:70:99:
a1:d7:7d:2f:32:fa:87:10:93:97:6e:2e:fc:aa:94:92:fa:05:
82:e9:16:4c:d2:32:09:bf:84:c3:fb:42:cf:c8:c3:14:57:e7:
1d:4c:ac:96:f9:ff:f8:56:b5:6a:65:39:d2:dd:e9:e1:04:bc:
c6:b3:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:42:41 2025 by rpki-client