Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JWn3SpHNQeqVgGzUyauw2DnsGoQ.roa
File: JWn3SpHNQeqVgGzUyauw2DnsGoQ.roa (raw, json)
Hash identifier: Z49SKNhZ0ywZtqHO+DeE6rggU/0HL5PLRw+JF5JoHhI=
Subject key identifier: 25:69:F7:4A:91:CD:41:EA:95:80:6C:D4:C9:AB:B0:D8:39:EC:1A:84
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199D0296693F544ADABD4259F0CC81AFD37
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JWn3SpHNQeqVgGzUyauw2DnsGoQ.roa
Signing time: Fri 10 Oct 2025 22:06:38 +0000
ROA not before: Fri 10 Oct 2025 22:06:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a01:fb07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 14:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:29:66:93:f5:44:ad:ab:d4:25:9f:0c:c8:1a:fd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 10 22:06:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2569f74a91cd41ea95806cd4c9abb0d839ec1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:26:94:d6:37:08:6b:ec:4f:c4:40:33:ef:
40:c2:02:ba:33:6b:b9:a7:73:73:7d:b0:e3:3e:d6:
97:f0:80:69:70:4f:ad:7b:5c:59:4f:aa:9e:5c:9e:
ac:d8:ea:f6:83:c0:98:06:fe:cd:74:4c:e7:45:16:
59:56:d2:c9:65:0c:4a:0b:10:1a:17:42:79:cf:f2:
90:a6:3e:a9:34:94:4e:3c:6d:75:c4:1b:58:a3:ac:
c6:0e:85:db:36:94:71:f3:bb:80:45:47:3a:71:0b:
c1:c9:37:f2:cb:c7:61:c2:f9:58:fb:0e:52:69:5c:
90:80:96:a6:40:2a:57:b9:bb:26:94:9e:7c:5b:c2:
3d:31:4e:5f:a9:15:26:4e:d9:0e:35:11:3e:18:1d:
10:46:72:5c:e1:4a:f9:90:e2:e9:55:22:1d:48:2e:
b1:b6:df:77:2c:a1:e1:db:5d:e7:8b:e8:61:03:73:
ca:79:3d:78:41:da:18:2b:15:90:51:f6:e4:eb:7f:
36:0d:be:19:5d:ad:44:72:87:fc:2a:94:5f:a1:4e:
88:bc:ff:a8:bd:1e:91:39:84:98:72:71:fc:7d:a0:
07:22:c6:12:d3:79:ef:37:0e:37:3a:a5:ea:2c:aa:
c8:95:69:33:5d:80:c2:5e:40:e0:c4:69:e1:6f:2d:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:F7:4A:91:CD:41:EA:95:80:6C:D4:C9:AB:B0:D8:39:EC:1A:84
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/JWn3SpHNQeqVgGzUyauw2DnsGoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:fb07::/32
Signature Algorithm: sha256WithRSAEncryption
2b:3b:cc:19:bc:6e:2e:a4:cb:ec:97:97:19:61:0b:de:5e:ee:
a5:51:fd:f6:cb:57:f9:54:a4:21:58:d8:16:03:1f:19:47:16:
7f:a1:e4:3b:f3:08:1b:ba:39:0a:4f:74:33:10:ec:a9:06:a4:
c8:ae:ac:ef:76:e9:98:89:cf:d2:01:da:84:34:4c:02:51:b3:
8f:88:c9:39:99:10:e3:f6:61:87:79:7b:a3:35:3e:2d:86:6e:
03:d5:cf:cc:0f:0d:6b:3e:a4:69:e5:7d:a0:13:14:00:05:21:
69:48:34:7c:ab:53:11:f1:bd:f1:16:c5:4d:35:d4:f7:54:42:
57:3a:8f:c9:55:7f:b7:82:6a:93:38:41:3f:c5:bd:b2:b8:4d:
8a:0b:44:0d:c0:e4:60:d2:44:19:f7:29:40:af:88:fd:39:91:
37:60:51:96:3c:e1:ba:50:89:3b:d0:9e:bd:9a:a9:f0:92:56:
9f:06:84:86:ff:65:0b:71:f0:cc:89:9a:52:c2:f1:65:74:e5:
4e:f4:05:26:4a:1d:b4:49:d6:40:af:71:09:07:dd:ed:c7:47:
e1:b0:3a:6e:e0:b4:18:a3:36:94:b2:64:f4:b1:0c:33:92:29:
37:38:17:17:db:74:ac:ed:a6:ce:24:13:a7:58:de:b9:fd:72:
a8:e2:f4:03
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZnQKWaT9UStq9QlnwzIGv03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjUxMDEwMjIwNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY5Zjc0YTkxY2Q0MWVhOTU4MDZjZDRjOWFiYjBkODM5ZWMxYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngMmlNY3CGvsT8RAM+9AwgK6M2u5
p3NzfbDjPtaX8IBpcE+te1xZT6qeXJ6s2Or2g8CYBv7NdEznRRZZVtLJZQxKCxAa
F0J5z/KQpj6pNJROPG11xBtYo6zGDoXbNpRx87uARUc6cQvByTfyy8dhwvlY+w5S
aVyQgJamQCpXubsmlJ58W8I9MU5fqRUmTtkONRE+GB0QRnJc4Ur5kOLpVSIdSC6x
tt93LKHh213ni+hhA3PKeT14QdoYKxWQUfbk6382Db4ZXa1Ecof8KpRfoU6IvP+o
vR6ROYSYcnH8faAHIsYS03nvNw43OqXqLKrIlWkzXYDCXkDgxGnhby2ZcQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCVp90qRzUHqlYBs1MmrsNg57BqEMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvSlduM1NwSE5RZXFWZ0d6VXlhdXcyRG5zR29RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgH7BzAN
BgkqhkiG9w0BAQsFAAOCAQEAKzvMGbxuLqTL7JeXGWEL3l7upVH99stX+VSkIVjY
FgMfGUcWf6HkO/MIG7o5Ck90MxDsqQakyK6s73bpmInP0gHahDRMAlGzj4jJOZkQ
4/Zhh3l7ozU+LYZuA9XPzA8Naz6kaeV9oBMUAAUhaUg0fKtTEfG98RbFTTXU91RC
VzqPyVV/t4JqkzhBP8W9srhNigtEDcDkYNJEGfcpQK+I/TmRN2BRljzhulCJO9Ce
vZqp8JJWnwaEhv9lC3HwzImaUsLxZXTlTvQFJkodtEnWQK9xCQfd7cdH4bA6buC0
GKM2lLJk9LEMM5IpNzgXF9t0rO2mziQTp1jeuf1yqOL0Aw==
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:14 2025 by rpki-client