Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/jCGGbslP38BuOy2f_eS54xc-hWg.roa
File: jCGGbslP38BuOy2f_eS54xc-hWg.roa (raw, json)
Hash identifier: rfVT0PEc4ZDXhhwqi4mRItGvqKV42ncM8sTUj9MUtx0=
Subject key identifier: 8C:21:86:6E:C9:4F:DF:C0:6E:3B:2D:9F:FD:E4:B9:E3:17:3E:85:68
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 0198E29BC0FADF1C26252918FFCAEA0A3924
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/jCGGbslP38BuOy2f_eS54xc-hWg.roa
Signing time: Mon 25 Aug 2025 19:01:55 +0000
ROA not before: Mon 25 Aug 2025 19:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:9b:c0:fa:df:1c:26:25:29:18:ff:ca:ea:0a:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Aug 25 19:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c21866ec94fdfc06e3b2d9ffde4b9e3173e8568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:b7:20:bd:be:cd:f4:26:5a:35:d5:5a:7a:
26:57:66:f1:d7:6b:f4:d9:4d:78:d3:75:58:a1:76:
19:ce:59:a3:b9:22:e4:99:45:bd:e2:e4:85:ce:33:
a2:36:c3:3d:95:2d:ee:d0:ab:ac:db:4f:85:72:7d:
ca:01:5c:03:8a:d8:f5:d7:61:fa:07:7d:4e:bf:5c:
47:cb:e8:c9:12:89:5f:4d:64:19:ec:d9:b3:46:75:
26:f0:ce:c1:3c:41:85:90:89:70:53:c7:5b:c2:b3:
75:00:df:be:1e:a5:e3:30:5a:63:6e:2d:62:d6:5a:
eb:19:c1:09:f5:0b:b8:4a:f7:35:df:d8:34:28:5e:
ef:d0:be:7f:2d:bb:7b:6c:97:ef:2f:f8:72:ba:27:
24:62:ca:98:c9:1e:93:f9:0d:35:a6:9a:ec:00:26:
d2:70:c9:92:dc:60:fc:90:b2:87:82:80:64:b0:b3:
59:9a:f7:f2:dc:91:59:4e:ef:03:e7:84:db:e3:08:
0d:38:ed:55:21:bf:cd:21:cc:c2:ae:0d:af:09:f1:
a8:2a:2b:60:08:7e:95:e9:e1:58:f0:5f:a5:74:d4:
2f:d7:16:83:d5:76:d1:d5:3e:ca:34:99:e1:fc:e8:
dc:99:e8:d3:13:3a:f8:d7:a4:c9:f0:a3:92:d2:da:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:21:86:6E:C9:4F:DF:C0:6E:3B:2D:9F:FD:E4:B9:E3:17:3E:85:68
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/jCGGbslP38BuOy2f_eS54xc-hWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:fa:8e:e3:a1:fc:0b:43:79:b7:54:ba:d0:5f:49:08:e4:5e:
3b:50:81:88:17:fc:5c:6d:a1:9c:db:d4:1b:cd:d9:a2:2b:2b:
5c:63:27:f5:4e:63:e1:f4:99:af:06:ef:bf:8b:bd:6e:67:c3:
bb:2b:d0:41:14:cb:86:1f:36:3f:d7:58:be:4a:05:f6:04:9d:
0e:a9:29:e9:bb:e8:87:ae:4e:42:3b:35:b4:ac:88:eb:ac:92:
c5:a7:c3:23:78:ea:a2:7a:c8:72:ec:d2:07:dc:ed:a7:d9:fe:
46:d7:c1:8b:23:29:2b:9b:e0:8a:4e:54:c3:25:47:f7:75:7d:
65:05:b1:1e:17:5f:7a:af:57:ff:18:89:24:93:b0:82:d4:b9:
70:c2:27:cc:0a:a7:4c:60:3f:ab:87:7a:95:96:59:f5:8c:11:
ab:67:9d:c2:8d:62:04:8d:ee:c1:8a:57:9a:a1:f3:19:09:97:
e0:a5:6a:d7:4f:d3:e1:3f:69:21:fc:f5:34:e6:a1:81:a5:ff:
48:1b:95:f2:bf:76:aa:30:90:ec:6e:2e:5f:d2:3f:6c:8a:93:
86:72:3f:9b:7a:72:c0:75:0e:b4:78:c6:61:82:07:0e:1e:b9:
12:94:56:57:bf:80:c5:ff:4c:35:d9:1c:40:92:a9:1a:92:31:
d0:a6:4c:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZjim8D63xwmJSkY/8rqCjkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjUwODI1MTkwMTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzIxODY2ZWM5NGZkZmMwNmUzYjJkOWZmZGU0YjllMzE3M2U4NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty23IL2+zfQmWjXVWnomV2bx12v0
2U1403VYoXYZzlmjuSLkmUW94uSFzjOiNsM9lS3u0Kus20+Fcn3KAVwDitj112H6
B31Ov1xHy+jJEolfTWQZ7NmzRnUm8M7BPEGFkIlwU8dbwrN1AN++HqXjMFpjbi1i
1lrrGcEJ9Qu4Svc139g0KF7v0L5/Lbt7bJfvL/hyuickYsqYyR6T+Q01pprsACbS
cMmS3GD8kLKHgoBksLNZmvfy3JFZTu8D54Tb4wgNOO1VIb/NIczCrg2vCfGoKitg
CH6V6eFY8F+ldNQv1xaD1XbR1T7KNJnh/OjcmejTEzr416TJ8KOS0trfPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIwhhm7JT9/Abjstn/3kueMXPoVoMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvakNHR2JzbFAzOEJ1T3kyZl9lUzU0eGMtaFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHzwDAN
BgkqhkiG9w0BAQsFAAOCAQEAePqO46H8C0N5t1S60F9JCOReO1CBiBf8XG2hnNvU
G83ZoisrXGMn9U5j4fSZrwbvv4u9bmfDuyvQQRTLhh82P9dYvkoF9gSdDqkp6bvo
h65OQjs1tKyI66ySxafDI3jqonrIcuzSB9ztp9n+RtfBiyMpK5vgik5UwyVH93V9
ZQWxHhdfeq9X/xiJJJOwgtS5cMInzAqnTGA/q4d6lZZZ9YwRq2edwo1iBI3uwYpX
mqHzGQmX4KVq10/T4T9pIfz1NOahgaX/SBuV8r92qjCQ7G4uX9I/bIqThnI/m3py
wHUOtHjGYYIHDh65EpRWV7+Axf9MNdkcQJKpGpIx0KZMHw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:35:50 2025 by rpki-client