Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/pADzcECo2Yf0nO80duEMuDGh3X8.roa
File: pADzcECo2Yf0nO80duEMuDGh3X8.roa (raw, json)
Hash identifier: /D3kHt6hhWjXdSU0si9ABN/nIQHXorfwBvY2dwdWWD4=
Subject key identifier: A4:00:F3:70:40:A8:D9:87:F4:9C:EF:34:76:E1:0C:B8:31:A1:DD:7F
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019A01B83E1FFA341C7C479FC5926310660D
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/pADzcECo2Yf0nO80duEMuDGh3X8.roa
Signing time: Mon 20 Oct 2025 13:04:03 +0000
ROA not before: Mon 20 Oct 2025 13:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201341
IP address blocks: 2a02:e9c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b8:3e:1f:fa:34:1c:7c:47:9f:c5:92:63:10:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Oct 20 13:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a400f37040a8d987f49cef3476e10cb831a1dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:3b:07:a1:98:f9:4f:0b:b5:84:91:45:ab:
bd:fe:82:2b:41:dd:fd:e5:ef:1b:05:a8:47:a1:44:
7c:aa:d7:2f:8d:7c:9d:50:9c:b7:69:61:67:0a:7d:
46:8e:b6:6e:2f:59:6e:2f:e4:af:ef:6a:58:e1:9f:
ae:e4:7f:7a:0d:89:0b:34:90:0a:0c:d1:de:77:3b:
35:78:3a:38:86:f1:9a:11:40:21:bc:43:85:d4:bc:
60:e0:87:e9:cf:d9:c3:74:f5:c5:92:e7:3f:39:d7:
7e:e8:38:fb:44:c2:6d:9f:9c:77:c5:ce:d9:b9:39:
11:95:2f:f9:03:6a:22:b9:35:cd:50:34:cd:a6:e0:
e8:89:25:35:74:2c:2a:8a:ae:f4:9f:11:ff:e2:ce:
00:54:56:17:4c:e1:94:73:7d:08:28:6a:c2:70:a8:
33:4b:74:e5:9a:09:1b:dc:45:5d:a6:5b:d2:95:1e:
88:4e:ec:df:e0:ab:a5:e6:83:f2:1e:a0:74:47:ed:
39:fa:73:c3:bf:f5:82:7c:f2:0a:49:61:4e:6e:a7:
0e:77:32:7f:22:e7:d0:ee:9b:55:9f:76:62:31:05:
12:80:38:e0:f6:22:b6:ae:d3:cd:f6:6a:85:18:1f:
22:0f:bb:90:7b:c3:73:5e:d1:67:1a:60:cf:97:0f:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:F3:70:40:A8:D9:87:F4:9C:EF:34:76:E1:0C:B8:31:A1:DD:7F
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/pADzcECo2Yf0nO80duEMuDGh3X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e9c3::/32
Signature Algorithm: sha256WithRSAEncryption
3c:b2:72:d3:55:f0:18:9f:be:5f:9c:60:76:ab:9b:aa:8e:f0:
86:ac:47:72:72:56:c2:8d:66:b5:1a:e1:55:b0:25:1e:78:f0:
49:6b:01:4b:09:e6:4e:05:13:f6:1e:87:92:b6:f3:3a:2d:3a:
1b:bf:d1:aa:5d:93:91:09:c7:dc:d1:fd:b8:dc:d1:53:db:43:
93:f8:a1:3d:b4:26:c8:65:24:05:f8:ef:70:a5:f2:82:2b:0b:
6d:05:53:ba:ab:16:b0:e3:65:80:00:c1:53:01:1d:36:94:2d:
30:f0:0c:3f:cb:d2:3f:12:cc:43:ba:69:9b:22:82:db:a9:9b:
81:e3:03:3d:20:eb:3b:1b:5b:48:56:21:25:7d:99:9a:2a:91:
cb:63:7f:b6:82:f2:e2:a7:4e:de:d7:69:27:33:34:f3:bc:ab:
24:2c:16:af:28:66:b8:ec:b3:c2:9f:c0:88:27:79:19:8b:72:
11:2e:4b:06:c0:7d:66:4a:71:b6:b2:7a:ff:59:10:3f:8c:8e:
16:e6:86:d0:1e:6b:5d:d1:97:55:75:6d:7e:5b:f0:e5:b1:7f:
09:f6:be:c8:5c:69:e5:ed:a2:60:de:be:66:31:63:5b:df:72:
a7:d2:b1:94:b3:71:45:8f:fc:e3:63:33:d2:04:94:83:2b:76:
6d:eb:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 22:13:51 2025 by rpki-client