Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/snaiy0AWEHDVZXAytTfYZ7Ad5Ao.roa
File: snaiy0AWEHDVZXAytTfYZ7Ad5Ao.roa (raw, json)
Hash identifier: jIS06nxKa9jnYNQWPG1sjSoEu6qmp784GSmWUBnLqhg=
Subject key identifier: B2:76:A2:CB:40:16:10:70:D5:65:70:32:B5:37:D8:67:B0:1D:E4:0A
Certificate issuer: /CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Certificate serial: 019A00DF33169E2AB877F427B5032C761BEF
Authority key identifier: 9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/snaiy0AWEHDVZXAytTfYZ7Ad5Ao.roa
Signing time: Mon 20 Oct 2025 09:06:58 +0000
ROA not before: Mon 20 Oct 2025 09:06:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205883
IP address blocks: 212.46.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:df:33:16:9e:2a:b8:77:f4:27:b5:03:2c:76:1b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9ece4e6d06593005b773f85fafe0e5133c3ae7
Validity
Not Before: Oct 20 09:06:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b276a2cb40161070d5657032b537d867b01de40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:61:b1:e7:2e:03:37:d6:64:53:c4:6c:ff:
d6:a9:d1:51:8c:15:2d:38:2c:6c:7e:8e:8f:46:5d:
5e:02:20:5f:15:4b:62:51:5f:9f:f8:8c:ca:10:43:
a8:7a:27:0a:f3:50:40:4d:38:e8:d4:e5:d9:e4:10:
e6:0e:57:39:be:e0:11:ad:b5:a5:e0:e0:b8:cd:19:
2d:17:e5:b0:03:2b:9a:43:28:a6:0c:49:09:e5:50:
92:b5:22:15:29:a1:1e:40:2b:2a:b5:99:ac:f1:a2:
7a:76:81:33:14:87:40:aa:79:39:37:d1:e1:64:c7:
5c:15:da:55:2e:1c:2b:98:a8:1e:42:7e:b0:ac:71:
9d:42:9f:49:1f:f5:65:03:48:01:b1:27:5d:ad:18:
fd:2b:54:0d:bf:b7:6e:9d:83:07:d8:e3:1c:9b:c3:
f9:ca:55:b4:74:2c:c9:20:9f:7a:58:0a:53:6f:8b:
c1:1a:90:70:29:33:42:ac:2d:59:50:80:1d:c0:94:
7a:f9:3d:04:03:31:7e:4c:47:c6:3a:ab:75:a6:88:
07:65:32:bf:f9:f3:c5:f7:1f:77:fd:41:ec:14:ed:
35:fa:bc:ef:ed:95:38:7c:b6:b1:ce:f5:bf:d1:6c:
48:fa:b9:7e:21:29:f1:56:18:01:19:1f:3e:e5:4f:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:A2:CB:40:16:10:70:D5:65:70:32:B5:37:D8:67:B0:1D:E4:0A
X509v3 Authority Key Identifier:
keyid:9C:9E:CE:4E:6D:06:59:30:05:B7:73:F8:5F:AF:E0:E5:13:3C:3A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/snaiy0AWEHDVZXAytTfYZ7Ad5Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6cda74-5514-490a-be26-b1d3bcee2c7e/1/nJ7OTm0GWTAFt3P4X6_g5RM8Ouc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.45.0/24
Signature Algorithm: sha256WithRSAEncryption
af:95:55:82:18:a5:ea:8f:33:34:b6:d5:53:a6:99:a6:62:2f:
5b:3c:37:58:27:3d:ec:c1:4f:74:d0:33:9d:39:c6:d1:ad:84:
e7:8d:11:d1:01:eb:e3:90:cf:64:ac:27:63:ad:df:ca:6a:3d:
d1:2f:8d:7e:8f:af:87:3d:09:ed:a8:82:bc:0c:87:68:d2:39:
74:88:14:08:8a:7d:11:49:81:9c:47:eb:f2:a3:5c:78:44:5e:
65:f2:6f:19:1a:73:9b:db:b9:73:e5:07:27:7f:9e:2c:ab:0d:
87:af:c7:2f:e2:1f:6e:e6:46:3b:a3:f9:2a:6a:c9:ae:f4:9c:
3c:78:4c:23:9b:a3:68:92:73:77:3c:44:97:be:54:b7:76:22:
e2:d4:32:5f:a7:a2:fb:92:50:8f:a5:d6:77:60:97:cd:c7:d0:
5e:89:20:b2:55:6e:5f:b3:17:cd:0a:23:69:d4:4a:6a:3a:2e:
4f:40:e4:ad:c4:3d:17:e3:32:07:37:9c:f0:84:01:81:c4:53:
b6:55:ec:c1:98:e4:bb:f3:ad:69:c4:41:ee:5a:2c:be:ee:39:
38:f9:7e:e4:ad:fa:b0:cb:f9:37:5b:ee:90:60:c4:86:d7:d1:
9d:fc:45:24:27:a4:2d:cc:fa:fe:2d:f7:d0:17:0d:02:58:09:
6c:01:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:34 2025 by rpki-client