Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/nRHhtIz-pVEB9AUEaRk1CW_hw2Y.roa
File: nRHhtIz-pVEB9AUEaRk1CW_hw2Y.roa (raw, json)
Hash identifier: aS/gaOt+Ih58Z5JBTIT1UBHblt3XFaMye1jY8sVb+IU=
Subject key identifier: 9D:11:E1:B4:8C:FE:A5:51:01:F4:05:04:69:19:35:09:6F:E1:C3:66
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 01991BAF1A8323979D7C032DD45E49045A6B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/nRHhtIz-pVEB9AUEaRk1CW_hw2Y.roa
Signing time: Fri 05 Sep 2025 21:01:24 +0000
ROA not before: Fri 05 Sep 2025 21:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215330
IP address blocks: 2a0e:6740::/32 maxlen: 32
2a0e:c447::/32 maxlen: 32
2a12:1a41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:af:1a:83:23:97:9d:7c:03:2d:d4:5e:49:04:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Sep 5 21:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d11e1b48cfea55101f40504691935096fe1c366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:38:a1:11:c2:9e:37:c4:60:da:37:e9:a5:
70:f8:17:da:c5:32:9c:50:6e:81:fc:a5:66:bc:fd:
9e:ad:ce:a3:81:82:2e:83:b0:5d:68:ed:fe:70:11:
07:c7:1a:8f:9b:44:9e:36:d8:3e:e4:71:00:52:cc:
43:aa:74:14:a7:f0:31:86:03:9d:86:bc:e6:16:48:
0a:f6:d3:bc:a3:8a:01:4f:6e:e1:65:a7:ea:9c:fd:
d5:24:2d:34:16:95:3e:8a:fe:9b:6b:59:68:c2:d6:
09:2e:4e:47:04:65:8b:32:b7:96:5f:e8:c9:e1:d9:
3b:8d:1c:b1:dc:06:8f:5c:ff:2a:86:05:b8:4c:4e:
30:8e:93:11:db:b6:b9:b8:f7:c7:fb:41:0e:e2:8f:
8c:58:26:fd:b6:ce:a9:8a:08:18:81:44:74:a4:54:
76:ba:ea:b5:1c:31:fe:e8:d5:37:12:05:bf:78:f2:
a9:b2:ea:b8:a6:fc:b6:f7:f8:cd:f9:d1:b4:19:21:
cb:43:98:61:43:eb:f3:d9:ee:c5:3f:e3:89:7a:bb:
91:2d:d8:f8:e3:4e:02:ca:0b:c6:53:93:d0:0e:c0:
e9:ac:be:6a:18:c1:3a:f1:d6:ad:b4:e2:f0:f4:4c:
9b:68:8a:9f:c6:d2:78:c5:ae:0d:e8:40:c5:65:69:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:E1:B4:8C:FE:A5:51:01:F4:05:04:69:19:35:09:6F:E1:C3:66
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/nRHhtIz-pVEB9AUEaRk1CW_hw2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6740::/32
2a0e:c447::/32
2a12:1a41::/32
Signature Algorithm: sha256WithRSAEncryption
41:c5:a2:35:c3:60:31:b7:1c:53:27:e5:e1:4b:8c:49:73:3e:
ac:d6:64:2f:4b:dd:ff:86:5a:ed:b3:8c:66:a7:0e:e1:b8:62:
fc:14:7b:25:0b:4c:d0:40:9e:d9:c9:6d:f3:58:62:1c:a0:f3:
df:75:39:43:87:fa:df:84:bd:72:55:18:82:7e:89:12:25:a2:
ab:5c:36:c4:63:da:20:75:d1:3e:eb:a6:d6:d8:b1:f2:15:91:
c1:45:61:8b:d9:a3:18:a1:45:3b:04:8c:5a:f0:85:f5:63:4b:
26:e5:32:1e:0d:ca:d1:a1:ed:89:34:86:28:29:86:a4:10:ba:
a2:b0:4e:33:b6:56:68:df:0e:5a:1c:46:32:43:7d:2e:db:05:
5d:18:3b:9e:05:8c:e5:5e:9a:7b:dd:c5:0b:f4:ff:3d:67:5d:
dd:4a:d5:2c:e4:7d:e0:d9:1b:ee:3f:dd:2c:54:44:5f:e9:c2:
9f:b7:3f:89:77:84:70:c9:d8:e7:59:61:2d:19:90:3e:75:73:
c0:a5:04:5c:d5:c1:03:76:1e:16:7f:a3:78:a9:bb:c5:5c:4f:
8b:54:46:98:08:fe:c4:7b:3f:69:fd:b9:09:b7:9e:bd:06:05:
c9:ae:aa:d0:9e:a1:6e:9c:6a:c4:70:5e:9f:0b:a5:21:70:50:
bd:b5:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:25:39 2025 by rpki-client