Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/l6z9HEI4-l71_fyVVbYlxZBrbTU.roa
File: l6z9HEI4-l71_fyVVbYlxZBrbTU.roa (raw, json)
Hash identifier: IXu+eQhMV0kh43AST9hCSRwRLiZW/aampQrZSvLeHSo=
Subject key identifier: 97:AC:FD:1C:42:38:FA:5E:F5:FD:FC:95:55:B6:25:C5:90:6B:6D:35
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01990844E2BC91424DD87426522238C47CC2
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/l6z9HEI4-l71_fyVVbYlxZBrbTU.roa
Signing time: Tue 02 Sep 2025 02:32:36 +0000
ROA not before: Tue 02 Sep 2025 02:32:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216201
IP address blocks: 212.15.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:08:44:e2:bc:91:42:4d:d8:74:26:52:22:38:c4:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Sep 2 02:32:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97acfd1c4238fa5ef5fdfc9555b625c5906b6d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:1e:d0:c4:81:7b:b8:c9:1d:72:35:27:22:
ba:de:70:72:41:0f:c1:84:a5:56:bf:e7:bf:66:15:
96:db:1a:04:3e:62:9f:b3:93:c3:97:aa:f6:e1:8b:
9d:71:35:b0:a2:cc:92:d9:27:99:90:82:e8:0f:40:
ee:ad:86:de:99:d0:9a:3f:fd:53:32:d5:1a:84:d0:
25:c7:c8:a6:14:f2:d4:a4:20:ff:e8:e2:b8:35:a3:
83:d8:44:10:63:97:5c:c4:99:20:aa:fe:39:fa:93:
9c:95:ab:19:dc:bc:04:ad:36:3a:00:27:23:f5:0c:
3e:68:cb:7f:e2:42:c3:d6:bd:a6:77:57:a4:37:40:
aa:33:db:e9:fc:b8:cc:7c:63:ed:3e:5c:7f:ef:37:
63:47:ef:57:93:b4:d1:c4:4f:05:64:bc:2c:bb:90:
3d:3b:e2:47:ec:93:ec:b1:2d:f6:24:4d:06:44:3e:
76:b2:49:24:b6:e1:cc:f8:ac:eb:d4:82:c3:c3:07:
c6:90:32:1c:06:5d:aa:66:db:48:df:38:fa:6e:e7:
23:a0:2c:ca:87:98:7f:36:2d:cd:19:ea:fa:9e:b0:
c7:d3:44:49:ff:31:47:25:05:ab:75:c5:6c:34:a2:
96:a8:ad:62:bc:6e:4c:31:74:b0:39:18:e1:bf:5c:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:FD:1C:42:38:FA:5E:F5:FD:FC:95:55:B6:25:C5:90:6B:6D:35
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/l6z9HEI4-l71_fyVVbYlxZBrbTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.42.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1e:aa:8a:80:71:8c:67:92:1c:2c:f6:54:62:f9:fa:f9:38:
e0:69:08:61:56:66:27:0c:d1:de:42:9e:b8:7f:ae:f5:1c:3a:
d9:99:33:ac:83:c3:44:fc:c9:d2:f9:c3:ba:2f:61:e7:b6:6f:
4e:3b:65:76:85:21:b2:a8:e8:f9:4d:db:2c:ca:aa:21:21:ec:
af:0e:39:5f:01:2e:eb:c0:ae:cf:d9:11:bb:99:e2:cf:49:07:
27:72:74:c5:fc:64:77:a9:87:4a:cf:19:d2:d9:14:71:3b:67:
75:dd:36:a6:ed:c7:53:66:3c:8f:1f:fc:95:a6:10:86:9e:d8:
88:fc:82:73:c9:87:39:8a:a5:c6:1a:c9:ee:76:b7:39:2a:2d:
3b:9b:e1:e6:0e:bb:78:69:db:77:2a:60:28:c7:df:b4:ac:b7:
5a:08:f5:28:c8:62:99:ee:4a:42:9e:72:f7:41:85:9f:56:e3:
0d:37:74:66:e3:02:26:6c:09:6b:08:9b:a2:e7:e1:6c:b7:64:
2c:dd:d0:9e:8a:e3:b7:b9:b1:01:ce:74:9e:20:86:8a:b1:d1:
a2:6c:79:03:a3:45:5b:56:9b:50:66:c3:50:57:b9:87:22:4b:
61:08:cf:07:7d:c4:49:90:c1:5f:4d:14:6d:0e:f5:99:c5:e4:
0f:17:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:00:41 2025 by rpki-client