Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Kcn00ncHNEC4teVRwNmLYgJJBl8.roa
File: Kcn00ncHNEC4teVRwNmLYgJJBl8.roa (raw, json)
Hash identifier: ZM2cHlKba3YUH3uQ1CaA6CmJi6+0AYo//r2ySJ6HY5Y=
Subject key identifier: 29:C9:F4:D2:77:07:34:40:B8:B5:E5:51:C0:D9:8B:62:02:49:06:5F
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0198F17115AC4FD3A3DA25D5681A39B9FDE8
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Kcn00ncHNEC4teVRwNmLYgJJBl8.roa
Signing time: Thu 28 Aug 2025 16:09:36 +0000
ROA not before: Thu 28 Aug 2025 16:09:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:4347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:71:15:ac:4f:d3:a3:da:25:d5:68:1a:39:b9:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Aug 28 16:09:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c9f4d277073440b8b5e551c0d98b620249065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:1a:b7:b4:fb:3e:30:42:69:47:bb:29:d8:
02:10:a9:5b:c8:cc:a7:32:c4:53:0f:71:3a:6b:8d:
37:53:ca:fa:74:c9:87:0e:89:fe:91:57:4d:44:e6:
a8:eb:5b:93:66:31:81:14:aa:35:2b:46:d8:f0:62:
36:2d:ba:00:cc:99:12:79:fe:60:b7:44:0f:72:64:
88:fe:63:fd:23:5c:eb:22:dd:5a:74:8a:5b:53:38:
ba:4a:a0:31:12:38:b4:df:19:26:32:fc:39:fb:97:
7d:eb:09:35:0d:dd:27:3e:41:f0:59:c7:e1:27:01:
1f:0b:2e:23:8c:45:3a:a3:20:e3:f4:de:14:7c:4c:
7f:d1:13:9b:48:a0:0d:f0:42:8c:5b:24:ed:e6:17:
0c:8b:34:c9:25:24:af:d9:38:f6:fa:c6:de:ac:14:
c8:cf:23:33:c0:55:10:77:fe:cd:65:e0:3f:b7:4b:
2a:33:63:ec:57:1a:f4:da:94:cb:38:4a:3e:97:3a:
d7:af:1c:a6:d4:11:73:d5:32:89:41:fe:cb:cf:92:
a0:5e:4a:21:17:0c:47:f2:3d:f9:01:d8:fa:dd:1d:
ec:d7:66:a7:55:93:62:e0:21:53:02:2f:13:b8:09:
9c:24:ee:f3:26:2b:fa:0b:64:66:82:ea:42:cc:0e:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:F4:D2:77:07:34:40:B8:B5:E5:51:C0:D9:8B:62:02:49:06:5F
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/Kcn00ncHNEC4teVRwNmLYgJJBl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4347::/32
Signature Algorithm: sha256WithRSAEncryption
21:0f:26:5d:51:78:c3:5a:98:e1:f4:29:fc:f5:b7:01:a4:e6:
24:1c:81:f2:d7:3c:ea:77:70:8d:7b:d1:92:e9:e2:a6:86:96:
aa:66:fe:46:d4:94:a7:d2:b0:9f:46:e9:9c:f7:5a:da:29:43:
4a:88:5d:04:e2:80:12:e5:59:c1:6d:3c:7b:c0:db:aa:fc:23:
13:f1:e3:34:8d:9a:05:67:84:7c:3f:7d:93:a9:13:3b:8d:a5:
fe:8d:93:19:ca:68:cd:d7:f0:35:52:4d:87:2a:23:42:3c:7b:
4f:e7:b1:36:31:bb:92:01:63:8c:69:ec:49:5f:c8:87:c5:51:
ea:41:d4:92:42:45:14:db:ab:30:65:b6:6b:af:b0:b0:e1:f9:
f0:f0:4a:ec:4d:4c:ae:a9:6e:a6:0b:e2:86:31:41:c1:88:58:
c9:db:fe:08:01:3c:94:1b:54:43:2b:86:25:d4:41:29:58:9e:
cd:f3:bc:9c:90:f9:57:c6:c4:c6:dc:07:7b:2e:85:89:4d:f7:
a2:75:b8:d9:07:e7:84:5f:81:8f:92:36:ec:f1:3f:cc:4c:9d:
24:65:bc:bf:cb:a4:2d:8f:02:0b:c7:ad:22:3e:dc:e6:44:3b:
9a:3a:f6:b9:7a:d2:39:8c:e9:14:30:38:78:a1:00:61:79:11:
15:48:ae:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZjxcRWsT9Oj2iXVaBo5uf3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwODI4MTYwOTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWM5ZjRkMjc3MDczNDQwYjhiNWU1NTFjMGQ5OGI2MjAyNDkwNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruAat7T7PjBCaUe7KdgCEKlbyMyn
MsRTD3E6a403U8r6dMmHDon+kVdNROao61uTZjGBFKo1K0bY8GI2LboAzJkSef5g
t0QPcmSI/mP9I1zrIt1adIpbUzi6SqAxEji03xkmMvw5+5d96wk1Dd0nPkHwWcfh
JwEfCy4jjEU6oyDj9N4UfEx/0RObSKAN8EKMWyTt5hcMizTJJSSv2Tj2+sberBTI
zyMzwFUQd/7NZeA/t0sqM2PsVxr02pTLOEo+lzrXrxym1BFz1TKJQf7Lz5KgXkoh
FwxH8j35Adj63R3s12anVZNi4CFTAi8TuAmcJO7zJiv6C2RmgupCzA4gJQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCnJ9NJ3BzRAuLXlUcDZi2ICSQZfMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvS2NuMDBuY0hORUM0dGVWUndObUxZZ0pKQmw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhFDRzAN
BgkqhkiG9w0BAQsFAAOCAQEAIQ8mXVF4w1qY4fQp/PW3AaTmJByB8tc86ndwjXvR
kunipoaWqmb+RtSUp9Kwn0bpnPda2ilDSohdBOKAEuVZwW08e8DbqvwjE/HjNI2a
BWeEfD99k6kTO42l/o2TGcpozdfwNVJNhyojQjx7T+exNjG7kgFjjGnsSV/Ih8VR
6kHUkkJFFNurMGW2a6+wsOH58PBK7E1MrqlupgvihjFBwYhYydv+CAE8lBtUQyuG
JdRBKViezfO8nJD5V8bExtwHey6FiU33onW42QfnhF+Bj5I27PE/zEydJGW8v8uk
LY8CC8etIj7c5kQ7mjr2uXrSOYzpFDA4eKEAYXkRFUiu6g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:26:41 2025 by rpki-client