Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dT94JqqlKnIu6OF0ToztejMANLQ.roa
File: dT94JqqlKnIu6OF0ToztejMANLQ.roa (raw, json)
Hash identifier: Ka9KglX00vqogj8oXVSf4tESVZosSZwLsYfJkAwrUd0=
Subject key identifier: 75:3F:78:26:AA:A5:2A:72:2E:E8:E1:74:4E:8C:ED:7A:33:00:34:B4
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01991BAF1A0A624B50F4780D5DCF379A3569
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dT94JqqlKnIu6OF0ToztejMANLQ.roa
Signing time: Fri 05 Sep 2025 21:01:24 +0000
ROA not before: Fri 05 Sep 2025 21:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a12:2e45::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:af:1a:0a:62:4b:50:f4:78:0d:5d:cf:37:9a:35:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 5 21:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753f7826aaa52a722ee8e1744e8ced7a330034b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bc:b8:75:d9:95:e5:74:bb:f6:ef:46:13:02:
fc:1d:08:31:41:5d:85:dc:37:6d:57:9c:78:01:10:
71:1b:6e:7f:73:af:49:1c:48:be:90:df:4b:7f:7b:
f2:7b:28:b8:55:df:98:50:ce:ef:9c:27:05:10:69:
6e:01:69:5c:ea:91:80:ee:75:16:07:1d:dd:92:bc:
5e:b1:b8:a8:26:2c:36:e2:54:fb:65:b6:c0:aa:06:
2c:72:93:68:e4:f3:55:9a:24:e5:68:55:63:d7:15:
02:f2:7b:dd:d3:e3:a2:14:50:78:63:a1:20:e0:6c:
4a:f1:c6:e0:7d:79:d4:98:6d:40:0d:58:47:e1:3b:
05:66:02:bd:44:1b:67:d2:a6:78:6b:ea:1b:21:7c:
3a:8f:f6:48:94:d2:c0:0e:2f:0a:8a:4c:01:53:6c:
88:df:ad:e2:cf:a3:f0:d6:f8:f2:bb:2c:32:6f:c1:
c1:d8:0e:41:1d:15:ef:31:77:97:fb:fa:46:90:a5:
93:23:ca:7c:87:65:a8:69:87:f7:d2:d8:a9:2f:c4:
b7:e2:1d:0b:d5:82:3b:bb:4b:ea:3a:34:f6:02:31:
66:ba:bc:67:27:70:a2:ea:0d:ba:bc:14:0b:09:4e:
5a:7f:6d:cc:f1:0b:89:74:83:72:83:34:94:da:b0:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:78:26:AA:A5:2A:72:2E:E8:E1:74:4E:8C:ED:7A:33:00:34:B4
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/dT94JqqlKnIu6OF0ToztejMANLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2e45::/32
Signature Algorithm: sha256WithRSAEncryption
37:33:89:df:da:13:c4:ee:cd:a1:a9:2d:3b:cc:a0:76:fd:65:
ca:bc:67:5c:f9:b2:d9:1d:ed:98:f4:b2:15:6a:94:49:b8:7b:
b1:ea:84:fc:3a:a6:f3:10:74:8d:ea:7e:cc:3e:39:95:c2:db:
0a:12:8d:66:38:91:f9:52:59:86:43:cb:80:25:70:96:c7:52:
87:d8:19:fe:c2:33:ae:53:a5:4f:3b:4b:60:85:63:62:b5:f2:
fd:04:25:c3:0a:76:aa:66:2b:65:2b:45:75:27:53:89:b3:ea:
d3:92:54:53:8b:64:6e:44:0a:39:a0:75:b6:9c:46:b9:c8:1d:
b3:bb:f8:a4:26:4e:7e:10:ad:37:2f:bc:c8:14:48:0b:f8:83:
fd:1a:e9:e1:9c:5e:78:db:e2:70:9f:55:4b:11:8c:63:70:2c:
d1:25:c6:5d:cd:6e:09:96:0f:65:2d:95:13:55:2c:4b:56:bf:
e6:a2:43:26:85:a4:95:9b:0d:ae:23:26:8d:69:61:54:fb:d9:
53:1d:cc:ab:2f:2c:0c:c2:17:ff:00:47:3b:b4:e3:99:2c:23:
53:fc:8c:aa:8d:00:a5:ce:a8:81:6c:69:0a:f5:4f:6e:f4:2a:
75:29:1f:0f:bc:f0:4d:0a:9d:12:b7:b1:9d:93:0b:d5:ec:c7:
66:fc:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:43:23 2025 by rpki-client