Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XAF2nAYop71Hh8Tb7_HOyi66maI.roa
File: XAF2nAYop71Hh8Tb7_HOyi66maI.roa (raw, json)
Hash identifier: tdAuUgyz5suYZW0ncsFGdtTO9JJGRHO3a39OyKfTCvk=
Subject key identifier: 5C:01:76:9C:06:28:A7:BD:47:87:C4:DB:EF:F1:CE:CA:2E:BA:99:A2
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0198419D9D4D6841379FDA41D79121406087
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XAF2nAYop71Hh8Tb7_HOyi66maI.roa
Signing time: Fri 25 Jul 2025 12:45:05 +0000
ROA not before: Fri 25 Jul 2025 12:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206129
IP address blocks: 2a14:67c1:a180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:9d:9d:4d:68:41:37:9f:da:41:d7:91:21:40:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 25 12:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c01769c0628a7bd4787c4dbeff1ceca2eba99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:9c:61:e1:bf:91:94:e8:8b:a2:67:fd:29:
97:c9:3c:d3:45:f2:16:03:28:df:34:f2:8a:b8:c3:
86:dc:a2:9d:97:ae:20:d8:5d:01:7e:c9:51:2c:5f:
d4:20:19:15:de:28:ee:38:94:c0:86:e4:df:49:42:
18:46:35:94:c6:be:13:3d:14:45:7e:6d:79:f8:ad:
a4:ec:98:c8:9f:9a:e4:ea:81:c0:2a:86:bc:67:ee:
fb:f8:93:9f:ec:98:ac:21:b5:b7:16:ac:8e:ad:55:
1f:9e:85:d4:1a:dd:f7:ae:6f:a5:3a:f0:02:fc:d0:
b3:db:0c:67:a2:c5:79:ee:c1:5e:9d:86:93:83:38:
64:e8:49:70:e9:47:4f:77:0e:53:de:2a:51:7a:a4:
8e:68:d9:6d:11:05:01:3e:0a:23:08:7d:51:76:71:
4c:da:60:3b:6b:94:b4:cb:83:b6:db:1d:03:38:35:
9a:38:69:06:d5:64:32:bc:d6:41:f0:67:c5:d8:18:
79:bc:68:39:69:1e:b1:c9:67:70:80:67:65:0d:ff:
ce:d2:1b:3f:34:2a:07:92:74:38:e1:b0:58:2f:3e:
82:53:97:d1:25:cb:eb:b5:a7:8a:44:9f:bc:f6:fd:
7c:a9:02:4c:45:43:3e:3b:c9:b8:29:92:ed:bb:ee:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:76:9C:06:28:A7:BD:47:87:C4:DB:EF:F1:CE:CA:2E:BA:99:A2
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XAF2nAYop71Hh8Tb7_HOyi66maI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a180::/44
Signature Algorithm: sha256WithRSAEncryption
cc:85:58:31:fb:bb:0b:d7:c2:a6:77:66:b5:62:96:52:c0:df:
d6:8d:70:67:d0:91:8e:a0:d3:2c:81:5d:52:de:d8:a8:d8:31:
4d:72:f4:2b:74:97:0b:2f:2b:77:7e:95:a8:05:a9:cf:94:cd:
d6:a8:d6:df:4b:7b:07:57:e4:ab:c4:88:2b:c0:de:f5:79:66:
30:64:32:f0:df:ea:1a:0f:4b:8e:f8:02:f9:2f:25:d5:b7:f9:
c1:48:c0:b2:dd:40:d2:0d:98:ce:59:52:2d:13:09:a8:56:61:
96:bd:99:ee:0c:37:61:74:46:b1:b5:c8:7e:46:73:ff:e6:2c:
5a:1e:b2:ed:24:23:05:52:e3:89:46:97:ee:a7:a9:2a:69:d7:
0f:cd:30:b4:4d:b3:a4:16:96:9a:80:f2:24:7e:09:47:1e:20:
83:6a:91:43:9a:d0:50:50:02:21:bc:0c:43:70:32:d7:26:fd:
a3:ed:a6:4e:b6:53:bd:db:15:7a:0d:81:fe:83:a4:d6:33:8a:
1f:52:ec:7f:f0:e9:25:75:8d:28:0d:cb:fe:86:16:74:4a:a1:
d0:0f:ba:d9:6d:41:6e:c7:37:08:b6:7a:41:42:1e:1b:14:89:
eb:79:f0:ec:85:52:0f:e8:bf:bb:5d:fd:03:cc:03:2b:01:b2:
55:2f:e6:c0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZhBnZ1NaEE3n9pB15EhQGCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwNzI1MTI0NTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzAxNzY5YzA2MjhhN2JkNDc4N2M0ZGJlZmYxY2VjYTJlYmE5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUacYeG/kZToi6Jn/SmXyTzTRfIW
AyjfNPKKuMOG3KKdl64g2F0BfslRLF/UIBkV3ijuOJTAhuTfSUIYRjWUxr4TPRRF
fm15+K2k7JjIn5rk6oHAKoa8Z+77+JOf7JisIbW3FqyOrVUfnoXUGt33rm+lOvAC
/NCz2wxnosV57sFenYaTgzhk6Elw6UdPdw5T3ipReqSOaNltEQUBPgojCH1RdnFM
2mA7a5S0y4O22x0DODWaOGkG1WQyvNZB8GfF2Bh5vGg5aR6xyWdwgGdlDf/O0hs/
NCoHknQ44bBYLz6CU5fRJcvrtaeKRJ+89v18qQJMRUM+O8m4KZLtu+4flwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFwBdpwGKKe9R4fE2+/xzsouupmiMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvWEFGMm5BWW9wNzFIaDhUYjdfSE95aTY2bWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaGA
MA0GCSqGSIb3DQEBCwUAA4IBAQDMhVgx+7sL18Kmd2a1YpZSwN/WjXBn0JGOoNMs
gV1S3tio2DFNcvQrdJcLLyt3fpWoBanPlM3WqNbfS3sHV+SrxIgrwN71eWYwZDLw
3+oaD0uO+AL5LyXVt/nBSMCy3UDSDZjOWVItEwmoVmGWvZnuDDdhdEaxtch+RnP/
5ixaHrLtJCMFUuOJRpfup6kqadcPzTC0TbOkFpaagPIkfglHHiCDapFDmtBQUAIh
vAxDcDLXJv2j7aZOtlO92xV6DYH+g6TWM4ofUux/8OkldY0oDcv+hhZ0SqHQD7rZ
bUFuxzcItnpBQh4bFInrefDshVIP6L+7Xf0DzAMrAbJVL+bA
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:56 2025 by rpki-client