Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/tsLbqC6GleedJxC9I3GCKnE32tM.roa
File: tsLbqC6GleedJxC9I3GCKnE32tM.roa (raw, json)
Hash identifier: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=
Subject key identifier: B6:C2:DB:A8:2E:86:95:E7:9D:27:10:BD:23:71:82:2A:71:37:DA:D3
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019976DF3522A90E50802ACCA58584E9140A
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/tsLbqC6GleedJxC9I3GCKnE32tM.roa
Signing time: Tue 23 Sep 2025 13:59:23 +0000
ROA not before: Tue 23 Sep 2025 13:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a13:5681:a181::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 14:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:df:35:22:a9:0e:50:80:2a:cc:a5:85:84:e9:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Sep 23 13:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c2dba82e8695e79d2710bd2371822a7137dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:9d:15:a4:cb:7b:aa:a0:2a:a0:ad:4f:84:
fb:8b:c3:4b:21:b3:a0:b4:de:4e:4e:f4:80:63:8c:
1e:3d:60:1c:17:ee:00:85:c9:a5:0d:0f:6a:68:ef:
0a:02:f5:7b:1e:a7:cc:29:d1:11:37:ae:43:c8:c2:
b2:8f:49:93:d6:6b:26:d6:c4:6d:ef:91:fe:98:ef:
52:a7:05:a7:f0:4d:70:98:24:34:13:bb:ab:fd:fd:
fc:94:6d:38:8e:54:a1:cb:2c:c9:a0:bd:08:f4:31:
b2:ae:b4:7d:36:76:28:73:6f:7e:26:1c:c7:81:39:
43:17:6e:d2:3b:9e:a3:08:a0:93:83:c5:3d:23:f1:
a1:cb:9d:60:ad:11:c0:1a:74:6e:80:d8:be:9d:75:
41:d3:be:3e:29:b5:af:79:4e:3b:d1:0b:2e:be:05:
12:8b:f6:80:84:d2:0c:b5:b3:f7:8c:3a:f3:27:41:
59:87:93:80:2c:45:53:4d:b3:75:c0:38:5f:18:60:
f8:5e:b3:8c:ea:b2:c2:5b:fd:ba:c6:8e:f7:9b:3c:
65:54:a1:c1:02:cc:67:02:db:87:5a:f1:eb:93:de:
4e:80:b5:f4:67:b6:d9:42:10:40:a8:d3:d7:3c:6f:
ed:8c:58:7f:c5:6d:98:9a:63:09:fb:02:78:04:b7:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:DB:A8:2E:86:95:E7:9D:27:10:BD:23:71:82:2A:71:37:DA:D3
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/tsLbqC6GleedJxC9I3GCKnE32tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5681:a181::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e4:c2:02:6c:d0:74:51:24:22:a4:3a:ec:cf:31:a7:8c:1d:
54:7e:18:f7:ce:ae:24:91:8b:ff:24:40:c4:42:de:7c:fa:3b:
cb:32:7b:c0:68:ef:ca:cc:0a:1a:05:06:54:c9:72:e8:c2:a6:
b8:6e:7b:c6:67:47:ff:0e:85:95:b6:e3:34:d6:96:8a:de:b2:
0c:78:a4:2e:db:cf:05:93:88:1c:e9:e8:71:e6:41:f4:f2:32:
b9:76:06:ab:0c:88:2b:d9:36:ba:a7:bd:8a:07:3a:66:7c:97:
95:df:e4:88:44:bb:e7:4f:aa:e6:75:b8:72:ca:22:2d:25:d9:
46:65:00:fe:e2:90:8e:9f:7f:ba:ad:7d:29:c7:b7:95:c7:e7:
07:f0:ee:80:dc:39:fe:ec:38:8e:be:a2:21:e9:e2:a9:5f:d0:
fb:07:db:8d:ce:99:20:58:13:7d:d8:cc:9c:98:4b:7c:cd:1d:
78:8a:5a:de:f7:8d:69:fd:f0:41:86:3b:30:fd:30:0b:68:c6:
30:59:00:72:d9:4e:44:87:0a:d3:3f:7b:af:ed:23:35:91:df:
0d:68:06:99:16:a4:b0:4d:dc:95:a8:d2:67:46:18:ee:73:b2:
0b:ae:4a:cb:52:31:4a:42:ec:20:fa:f2:f5:ba:02:5d:21:d1:
81:74:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:11 2025 by rpki-client