Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dAC2GLLnuP3dogD0JGdrX2daeeM.roa
File: dAC2GLLnuP3dogD0JGdrX2daeeM.roa (raw, json)
Hash identifier: iM+rgJ0rit47HCIo1jDExJJ2osAP3O/11TPPT1f3tsY=
Subject key identifier: 74:00:B6:18:B2:E7:B8:FD:DD:A2:00:F4:24:67:6B:5F:67:5A:79:E3
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01999C448FF67C48090344EA6C54455A843D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dAC2GLLnuP3dogD0JGdrX2daeeM.roa
Signing time: Tue 30 Sep 2025 20:16:02 +0000
ROA not before: Tue 30 Sep 2025 20:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 213.145.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9c:44:8f:f6:7c:48:09:03:44:ea:6c:54:45:5a:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 30 20:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7400b618b2e7b8fddda200f424676b5f675a79e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:41:95:e5:25:56:ca:68:ee:69:e8:98:f9:
e6:99:8b:56:d5:f2:5a:97:0b:74:9c:30:19:15:8b:
6c:03:8e:f7:e0:d0:13:9b:05:f5:a9:8a:43:65:9e:
5d:4a:34:c2:66:0d:a8:8d:e5:27:3a:4d:6d:12:32:
01:34:6a:73:3e:c9:28:74:e0:88:a7:4e:1c:eb:76:
ba:ec:31:57:c1:e0:96:6d:d3:38:20:c2:81:ea:29:
db:20:bd:c7:23:54:cb:08:2d:ab:b3:af:fe:97:44:
fe:f0:aa:59:e7:1d:3c:0c:b0:70:18:48:db:b9:ce:
14:42:ef:9a:4d:ad:00:93:24:41:2b:3e:b6:52:fe:
4e:be:1b:50:81:81:6f:38:4b:c4:55:e6:64:c6:88:
29:1b:39:41:28:91:e0:83:8e:d5:c2:24:31:22:59:
4c:08:be:1c:8c:46:e6:d3:fc:d2:ba:eb:b6:20:01:
ff:ce:f2:91:c8:75:f5:da:bc:56:ef:46:9e:eb:55:
a4:46:31:8d:da:8f:95:a3:c1:1a:ef:58:da:83:25:
67:8a:3a:06:a1:10:80:ff:2f:26:08:f6:a2:10:97:
bd:4d:87:61:a3:f9:6b:9f:35:5c:f9:48:22:61:fd:
fe:2e:77:e4:12:c6:a1:32:4d:d2:7a:bc:d0:49:61:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:B6:18:B2:E7:B8:FD:DD:A2:00:F4:24:67:6B:5F:67:5A:79:E3
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/dAC2GLLnuP3dogD0JGdrX2daeeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:da:e9:a4:10:28:2c:c1:60:be:8e:46:e8:25:19:96:d3:
85:93:66:f0:df:0e:d7:f2:0f:83:b9:b7:f2:73:09:b8:86:c4:
c4:eb:39:c3:eb:67:6e:b4:0d:98:e3:3d:f0:52:71:1b:7b:fe:
12:f2:02:b7:9b:c3:b1:47:10:35:c5:c1:0d:8c:3c:46:4d:48:
cf:ad:4c:ac:8a:62:8b:70:cd:75:dc:f2:2b:1f:e0:4b:96:16:
15:64:74:75:06:91:9a:64:31:87:49:6c:53:09:81:3a:6d:61:
ea:f4:70:16:6b:52:f9:9c:1f:b7:9d:32:4b:54:f3:6a:cd:7a:
67:e5:88:68:87:ac:dd:9f:3f:ba:f0:9c:a4:8e:73:03:ec:2b:
10:4e:58:cf:4d:b2:90:de:a8:ab:ba:ff:26:d2:b1:e0:3c:c8:
48:6b:de:d9:5d:a3:f0:db:57:6f:fe:66:7a:45:92:60:d7:43:
04:c5:b0:ab:08:74:a2:6d:5a:5a:47:e5:e7:94:03:d4:71:be:
01:a5:e1:28:61:bd:ba:eb:fe:4e:85:9a:92:56:61:ef:24:3d:
59:4f:d4:02:6b:54:59:9a:d5:8b:62:9a:78:d9:fe:52:71:9d:
0a:22:96:bd:0c:aa:16:9f:bb:ed:cc:00:5b:2e:b1:8c:7c:a4:
7b:c8:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:13:41 2025 by rpki-client