Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/akkE-vAn-w5eXkCUKILB32hY6Qc.roa
File: akkE-vAn-w5eXkCUKILB32hY6Qc.roa (raw, json)
Hash identifier: o8NzxMp5SYR/ceeaE2vWjFJcVmOsjJGa2Xla0t9AQo4=
Subject key identifier: 6A:49:04:FA:F0:27:FB:0E:5E:5E:40:94:28:82:C1:DF:68:58:E9:07
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0199202956305F7E3B04C48962EA7EC09A74
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/akkE-vAn-w5eXkCUKILB32hY6Qc.roa
Signing time: Sat 06 Sep 2025 17:53:23 +0000
ROA not before: Sat 06 Sep 2025 17:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:20:29:56:30:5f:7e:3b:04:c4:89:62:ea:7e:c0:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 6 17:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4904faf027fb0e5e5e40942882c1df6858e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:c2:b2:cf:2e:c3:fb:1d:c1:e9:d5:37:35:
bc:e0:a8:7e:b7:90:b6:e2:b2:f7:64:e9:24:08:98:
94:79:cf:6e:42:13:ea:e6:cd:4c:b5:0c:07:d5:ed:
ae:98:b5:2d:d0:78:4f:f0:d8:46:92:83:80:dc:72:
92:35:0f:0d:ed:53:ce:05:b0:ce:af:8d:0e:f2:ec:
9f:41:f3:02:26:16:7b:13:34:ac:75:e8:7a:d0:ce:
6c:b7:28:c0:e2:6b:32:6d:33:49:45:19:9b:90:73:
7e:08:8d:24:ed:52:02:b3:57:42:d2:f3:6f:9c:03:
b4:18:38:d2:de:b6:3f:c0:3d:bb:a8:a9:5c:5c:1f:
a1:35:87:dd:93:91:1e:d6:3f:08:c7:c1:84:da:af:
ba:c0:ac:d3:14:f3:8c:57:2d:0e:f0:27:13:0d:3c:
91:64:8e:b4:39:5d:74:3b:8f:7e:6d:1a:54:d3:e9:
6f:e5:9b:f8:53:cb:ef:3f:d4:37:be:7c:f6:a5:da:
97:33:dc:c0:70:b5:f7:97:69:e3:9f:25:0d:ef:8a:
b3:01:46:61:47:9b:2c:a5:bf:c6:04:71:6f:1a:c4:
41:09:c2:a2:ee:2c:d9:f0:2f:24:ca:16:0e:76:42:
bc:dc:b1:fc:aa:11:9b:80:02:82:d6:83:e8:0d:c4:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:04:FA:F0:27:FB:0E:5E:5E:40:94:28:82:C1:DF:68:58:E9:07
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/akkE-vAn-w5eXkCUKILB32hY6Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
0c:f2:86:cd:6e:1e:7f:e4:e4:6f:63:b7:dc:e5:86:26:4c:00:
31:a2:55:c6:57:11:55:ce:0a:82:15:5a:5b:bf:93:13:6a:af:
e2:1f:da:b6:4a:5f:c5:4e:51:c3:8a:e0:93:94:43:29:4c:99:
3f:b0:c0:b3:1b:b7:de:ba:ca:6a:d5:f7:b3:f6:b7:00:5c:3c:
40:77:7e:76:ff:10:42:fc:de:82:b6:26:85:f5:2a:24:07:11:
66:c4:f0:cd:99:26:cc:75:8a:b6:86:4d:ff:4d:9d:cd:9a:02:
43:13:69:e6:76:28:21:4d:87:d8:85:ff:4f:68:e3:7b:bd:77:
ba:cb:1f:ba:5f:99:ae:ec:25:62:df:fb:6a:2e:c1:52:40:32:
8c:29:15:87:35:b0:23:13:3c:31:8d:cd:fd:44:b7:62:4d:f3:
c2:ce:0c:ab:23:82:3e:4e:1f:0c:ec:88:77:83:57:1c:6d:2e:
b7:89:1b:85:a5:28:b9:43:45:91:16:43:00:09:2c:22:17:6a:
e0:53:12:d3:92:65:69:40:8e:55:23:b0:3b:8c:ba:3d:e9:60:
64:4e:e6:45:69:e0:db:68:83:39:7c:54:7b:60:87:56:f4:41:
8a:66:8d:74:10:da:fc:4a:84:8d:57:d3:8e:45:b5:b8:c5:ce:
95:e8:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:11:19 2025 by rpki-client