Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa
File: xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa (raw, json)
Hash identifier: /zwCpAsX0Hsr+2gnOWP4YOqrQ5dGeSMwHT7AFOWoMJo=
Subject key identifier: C6:11:EE:B9:F1:38:2A:E6:64:0E:AB:09:FF:53:31:0F:71:88:C7:C3
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 01990E559ED2CF0A852C58A93581D5E61645
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa
Signing time: Wed 03 Sep 2025 06:48:36 +0000
ROA not before: Wed 03 Sep 2025 06:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2a09:a702:72::/48 maxlen: 48
2a09:a702:73::/48 maxlen: 48
2a09:a702:76::/48 maxlen: 48
2a09:a702:77::/48 maxlen: 48
2a09:a702:92::/48 maxlen: 48
2a09:a702:93::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:55:9e:d2:cf:0a:85:2c:58:a9:35:81:d5:e6:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Sep 3 06:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c611eeb9f1382ae6640eab09ff53310f7188c7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:6e:17:ae:e2:b3:11:dd:4d:86:b9:26:36:
71:12:a9:38:b5:1f:9c:1c:ef:51:3e:69:96:5c:0a:
38:ba:7d:48:19:32:e0:13:64:76:97:ba:46:92:a2:
03:6d:bd:5d:c4:5d:c6:2b:f6:02:35:a8:1e:99:1b:
38:7d:1f:43:8d:ae:58:90:43:80:fe:c7:aa:47:11:
ea:3b:38:00:70:2e:42:5f:f2:a6:dc:6d:c2:4b:5e:
23:ef:68:8f:43:92:95:55:e2:56:f1:57:c3:d7:8b:
af:22:af:22:e9:3c:b1:92:81:93:bc:31:f4:80:08:
2e:6c:e7:eb:af:e8:d4:d2:09:f4:8f:a1:db:f2:b1:
74:81:cb:61:83:53:78:de:c7:6f:1e:e0:b6:cc:0b:
ef:66:81:b4:ad:0b:ba:5b:4a:96:4a:cf:71:9a:0a:
03:87:73:3a:c0:3a:65:57:76:41:d5:10:36:db:07:
a5:71:96:88:c9:fc:b1:c1:8b:35:f8:88:3a:b2:6f:
a9:2b:8e:f9:2b:1e:e1:59:31:3f:c0:48:83:02:94:
dd:0b:a4:74:00:d7:13:3b:c5:25:5e:aa:ed:d8:b0:
ba:d4:f7:ba:70:fb:93:48:6a:f8:ab:17:91:84:a0:
11:03:a9:ff:33:ba:17:2e:14:e3:4f:60:10:64:82:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:EE:B9:F1:38:2A:E6:64:0E:AB:09:FF:53:31:0F:71:88:C7:C3
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/xhHuufE4KuZkDqsJ_1MxD3GIx8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a702:72::/47
2a09:a702:76::/47
2a09:a702:92::/47
Signature Algorithm: sha256WithRSAEncryption
5c:73:0a:1f:ba:cf:c3:e7:a1:1a:ff:c2:1e:91:69:55:df:77:
d9:60:55:c4:d9:b3:2c:b4:4b:62:d4:e7:dc:a3:73:d0:66:2b:
aa:c7:e4:a5:a2:69:a2:b2:4d:32:99:a7:11:36:f0:5d:87:78:
25:5f:5f:25:73:cd:f3:5b:79:97:ea:13:b9:c8:75:ef:8d:f7:
7c:9f:61:78:23:41:9c:38:8b:78:4a:2a:ab:66:29:c2:8d:bf:
de:05:42:b4:5d:8f:0d:f7:b4:54:ab:1e:d3:8c:8e:1f:59:72:
98:d5:03:94:50:74:37:12:cd:6b:23:3b:8b:5a:fe:60:f2:69:
3f:d1:16:54:42:d5:27:0e:ae:4a:93:3b:85:e2:5e:46:8b:44:
bc:96:b5:b9:dd:a7:ea:59:e2:ba:2c:96:9a:83:40:dd:b1:35:
fa:2f:70:7f:6f:48:8d:c4:ff:00:eb:b2:68:6a:85:53:86:e5:
01:bf:b5:11:b9:4c:15:ad:09:f1:12:28:a9:4c:c3:ec:a1:7b:
ef:93:ad:85:82:0d:6e:fc:a8:8f:2c:df:94:37:c3:a6:a5:27:
e3:99:98:3d:92:c7:1a:13:2f:87:c8:3b:60:80:3b:72:11:dc:
01:4a:77:6b:7b:7e:bb:bd:63:ec:b9:94:9c:da:9d:48:29:99:
9e:2c:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:57:14 2025 by rpki-client