Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/w8IJJcJuFsc4TJlSHs0_xUR41Ho.roa
File: w8IJJcJuFsc4TJlSHs0_xUR41Ho.roa (raw, json)
Hash identifier: 2ehPyuE4Y8Y0gd7Tj7BAVhzAFS0n3TWe3z7iSaXJ2SU=
Subject key identifier: C3:C2:09:25:C2:6E:16:C7:38:4C:99:52:1E:CD:3F:C5:44:78:D4:7A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019A2F3042CFA372E748046AA17CDF3F140F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/w8IJJcJuFsc4TJlSHs0_xUR41Ho.roa
Signing time: Wed 29 Oct 2025 08:58:03 +0000
ROA not before: Wed 29 Oct 2025 08:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204329
IP address blocks: 2a0c:9a40:8730::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:30:42:cf:a3:72:e7:48:04:6a:a1:7c:df:3f:14:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 29 08:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c20925c26e16c7384c99521ecd3fc54478d47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:2d:b6:23:0a:29:7e:c5:55:cb:9e:e4:a6:
7d:75:fb:8b:66:44:7c:c7:bf:9b:fb:2b:81:09:67:
db:75:d0:ba:d1:07:f7:4b:45:dd:e3:3f:ed:f2:27:
04:a4:69:46:fd:bb:57:ae:3f:5c:6c:da:8e:7f:b3:
68:04:97:13:d3:8a:7e:dd:a4:ef:e2:11:22:9a:22:
28:33:12:7b:58:e9:39:ec:f5:4f:c7:f5:d3:34:b4:
e0:7a:06:ae:1b:f7:81:56:26:b9:c5:23:ac:25:fa:
e0:f9:f8:5e:9f:9b:f9:a1:12:2e:37:fb:44:d4:35:
75:38:cb:55:a3:75:1a:22:1b:45:7d:5b:46:51:05:
8f:13:5d:2e:3a:a2:29:bb:62:a7:9b:46:3f:5e:82:
6d:e1:a8:53:41:72:54:cc:62:96:58:d8:56:46:ad:
42:52:ce:2d:ad:ef:46:a7:d6:1d:4d:ef:76:4e:d2:
96:a3:f3:a4:64:8a:da:b6:ae:41:44:11:bd:24:50:
c5:f2:c2:cf:8b:d8:39:7c:36:07:28:69:60:70:bf:
8b:df:95:23:e4:68:65:77:14:ce:f8:37:21:b9:62:
ca:9c:99:1e:13:ab:21:97:c4:a8:7d:19:7c:72:2c:
d2:f1:b9:b2:73:6b:26:d1:e5:93:c8:44:85:2d:2d:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:09:25:C2:6E:16:C7:38:4C:99:52:1E:CD:3F:C5:44:78:D4:7A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/w8IJJcJuFsc4TJlSHs0_xUR41Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8730::/48
Signature Algorithm: sha256WithRSAEncryption
9e:82:87:12:f9:bc:64:92:13:58:cd:cb:a0:40:65:95:32:7e:
ee:6b:c0:9a:dd:58:cb:95:48:11:7c:5a:76:0e:5c:a9:96:bc:
3c:65:fd:b7:51:27:79:de:f7:98:d1:4f:53:ba:59:b7:25:3d:
35:0a:d9:4e:2c:bd:10:2b:a3:73:4e:1b:0d:99:ad:76:b3:d5:
d2:0c:e8:0a:3d:83:c1:c3:a5:9a:b3:1a:8a:fe:05:fd:a4:60:
22:b1:ad:b2:09:a3:b7:42:34:12:17:26:1b:4d:2a:d3:23:41:
e5:de:2d:cc:2b:11:b1:fe:d7:e2:75:dd:e4:53:e6:bc:d6:2e:
93:0e:29:a2:ba:e6:99:64:23:62:20:c7:ed:e0:5c:bb:e2:91:
51:4e:c3:77:bb:2a:29:d6:81:e2:c4:0b:7d:d7:3c:5e:c0:db:
41:e7:8b:ca:ca:3c:2f:ea:43:32:3f:de:fe:c6:92:21:52:fc:
24:c6:42:36:1d:78:45:e9:93:25:73:9e:c2:68:5b:17:a0:b8:
33:d6:3e:b6:45:6e:b0:44:08:d2:1c:89:8c:dc:d4:9b:c8:01:
2e:54:2b:6e:4b:4c:63:92:a9:02:3d:dd:3b:6c:30:1f:11:f6:
83:5a:8c:17:8b:13:59:f9:e4:c2:f3:df:a5:ac:74:96:dc:3c:
d4:de:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:39:43 2025 by rpki-client