Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0NsblolZdhQf6HryGcB18n8J9N4.roa
File: 0NsblolZdhQf6HryGcB18n8J9N4.roa (raw, json)
Hash identifier: u77IJyYZcK7YzbDTrAdipNzKO31d/DqdTktE+euJndQ=
Subject key identifier: D0:DB:1B:96:89:59:76:14:1F:E8:7A:F2:19:C0:75:F2:7F:09:F4:DE
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 019A07E4739A7F1D1CCD4836FD2C98E0CDBD
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0NsblolZdhQf6HryGcB18n8J9N4.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a12:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:73:9a:7f:1d:1c:cd:48:36:fd:2c:98:e0:cd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0db1b96895976141fe87af219c075f27f09f4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:17:9d:c3:4a:d6:42:69:9a:e6:f6:fe:8b:
6e:f2:7c:0c:fd:62:4e:70:72:9d:ed:1f:f9:09:23:
74:56:54:fc:04:b7:05:27:37:2a:00:33:6e:7e:f9:
0b:72:73:73:20:d3:37:4e:d0:eb:9c:fc:ac:25:a1:
af:42:23:16:00:38:54:74:2d:b6:c9:73:7a:15:c8:
90:b7:f9:ab:19:ae:47:a7:66:89:75:df:f3:d5:08:
15:f4:48:83:e4:4e:83:9a:34:79:d3:b4:5a:47:3a:
5b:4e:dc:75:52:91:68:ed:bd:ed:96:e0:a8:3f:0b:
ae:b6:24:e4:05:7d:26:db:90:11:10:fc:a8:7b:2d:
39:25:62:95:b7:8a:ea:2f:b4:74:99:ad:8c:65:14:
c7:af:e7:bd:83:10:c8:45:0b:d0:a6:34:e7:0e:c3:
7a:d6:6f:f3:44:24:a5:4d:f6:fb:91:10:56:39:70:
65:d9:39:47:1b:54:3e:32:1d:04:b0:7d:74:34:82:
4a:73:e4:f4:8c:80:bc:7a:6d:ba:c9:f1:d9:e2:d5:
fd:ff:d5:3a:0f:c7:bd:0b:a8:bf:27:30:e7:cd:67:
13:19:61:3a:35:92:46:36:49:37:ca:de:27:92:2f:
7a:f0:60:59:19:a7:92:c2:b9:0f:67:7b:0b:9f:87:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:1B:96:89:59:76:14:1F:E8:7A:F2:19:C0:75:F2:7F:09:F4:DE
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/0NsblolZdhQf6HryGcB18n8J9N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2740::/29
Signature Algorithm: sha256WithRSAEncryption
21:9f:f5:21:aa:d9:ec:52:6e:eb:7f:8e:54:cf:b5:72:af:07:
bb:00:a3:25:05:5f:54:bf:1d:80:92:3e:2e:de:25:02:31:75:
a1:c0:75:7f:c2:0b:fb:cc:e6:81:8c:04:80:dc:76:59:dd:62:
e2:e3:86:fc:d2:06:b1:75:9b:ac:3a:f7:d9:a8:9b:02:78:b6:
e6:77:9f:86:f0:ac:7d:a1:42:5a:2b:ab:a5:26:c5:6d:5b:0e:
c2:17:a5:ef:9f:d3:70:10:a6:75:00:f4:1a:a6:a3:9c:a4:bf:
fe:46:65:70:19:c6:c1:f5:12:e1:c4:61:9f:fe:f4:39:14:d8:
e3:c8:c4:61:f0:6c:68:80:3f:88:46:dc:e2:50:65:39:5f:74:
8e:ff:f0:b2:2a:de:d4:71:63:df:6a:20:22:87:ec:00:2b:0e:
9d:8a:4c:eb:7b:5e:3b:3d:bb:be:f3:9f:f0:9b:a1:7b:14:9b:
0c:9e:0d:28:6b:10:46:56:0a:84:8b:34:12:6e:16:e5:84:02:
b9:42:ce:8f:6f:38:c5:d4:a0:97:5d:f0:df:aa:31:76:cf:10:
33:57:71:69:c4:d7:a9:ae:17:d1:11:8d:76:c2:74:a2:4d:d9:
6e:a9:d0:6f:a3:20:62:c6:68:ff:b7:17:bf:28:a4:6f:23:5d:
1f:99:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:04:48 2025 by rpki-client