Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/VnWBSIofzpiIChVy5VaCLbOrKuE.roa
File: VnWBSIofzpiIChVy5VaCLbOrKuE.roa (raw, json)
Hash identifier: n4Pjt5REvHccwjD3WmZQU5I3ehXb6sJY91R5vA4Pyfs=
Subject key identifier: 56:75:81:48:8A:1F:CE:98:88:0A:15:72:E5:56:82:2D:B3:AB:2A:E1
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01990628B9C672984B06691C5B5BD0474D4C
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/VnWBSIofzpiIChVy5VaCLbOrKuE.roa
Signing time: Mon 01 Sep 2025 16:42:36 +0000
ROA not before: Mon 01 Sep 2025 16:42:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a09:6800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:28:b9:c6:72:98:4b:06:69:1c:5b:5b:d0:47:4d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Sep 1 16:42:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567581488a1fce98880a1572e556822db3ab2ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b1:c2:56:a8:de:bd:12:c6:3b:7a:28:b6:7b:
ac:bd:86:be:44:46:11:10:f9:e7:07:6c:4b:26:93:
47:74:ee:07:01:f5:06:6f:d1:1e:9a:c2:6e:1a:c7:
b2:1a:0e:f0:6c:47:ee:c7:dc:8f:38:08:6d:91:48:
a1:bd:1d:e9:24:2f:01:05:e0:77:9c:7d:75:d6:d7:
14:8e:7e:ac:f8:27:41:da:7c:75:30:93:58:18:0a:
41:06:5c:5a:7a:86:6d:f4:25:71:34:25:ac:29:54:
df:ff:e3:89:f8:c2:58:d2:7e:a5:07:b5:8d:46:31:
dc:7f:27:33:f3:d6:80:e4:83:2b:9c:22:8e:33:60:
60:6c:ff:a9:d4:0b:32:00:da:3d:d9:55:aa:86:1f:
a6:44:24:29:4c:51:05:f0:ca:1c:a9:d7:e7:1f:cd:
f9:ea:dd:7d:eb:99:17:48:7f:82:60:ce:fc:e1:a3:
2d:d5:35:98:6b:a6:41:30:cf:d1:47:28:16:fa:c8:
cb:66:94:71:86:ea:1d:08:ea:49:ca:a1:06:43:86:
e6:53:28:0c:35:c5:fd:06:af:39:11:3c:36:e2:3a:
1b:b3:56:f0:55:47:9b:94:92:76:13:ed:52:49:1e:
a3:27:c4:65:bc:3b:e5:05:e2:55:db:94:d1:38:92:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:81:48:8A:1F:CE:98:88:0A:15:72:E5:56:82:2D:B3:AB:2A:E1
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/VnWBSIofzpiIChVy5VaCLbOrKuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6800::/29
Signature Algorithm: sha256WithRSAEncryption
ad:f9:8a:85:f2:84:01:15:0b:9a:4d:43:26:15:c5:a9:56:aa:
d4:17:9b:1f:16:6d:ce:4a:fc:69:8e:1e:e4:b6:0a:2e:29:6d:
59:08:6d:34:74:78:7d:39:76:33:31:a3:5e:bf:c7:26:de:5e:
f3:4f:14:96:7f:61:20:50:30:2a:ba:b2:4b:fe:33:b4:5c:ca:
a2:c3:c8:68:ab:2e:a0:0d:d4:ed:90:73:3f:1f:90:ab:5c:91:
9e:42:e1:a1:94:70:d6:38:61:7d:44:14:6c:e0:e7:0c:ab:da:
6d:5e:a3:7d:4f:f3:53:18:63:7f:e5:5b:db:20:c3:bc:99:f7:
be:bd:d0:c5:ac:a8:c0:2e:05:ea:5f:5f:c4:ac:40:2d:f7:40:
12:52:2f:e1:38:4d:95:c6:52:cb:40:72:1d:71:0c:90:54:6a:
00:2e:04:aa:ad:9f:87:d4:78:ed:75:9e:64:6a:66:dc:64:c5:
5a:d4:47:6c:d6:bb:aa:49:64:5e:ab:41:ed:ef:88:c8:bb:16:
5e:be:fb:70:7d:72:72:dc:09:db:72:c7:39:c2:2a:fb:dc:4c:
f1:8a:e5:55:11:2d:fc:33:3c:e6:28:e1:f3:3b:1c:0c:e2:da:
d9:19:43:5d:05:f0:54:88:9a:ec:c5:87:2d:66:28:75:63:b2:
e6:7b:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 19:39:44 2025 by rpki-client