Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/RSjnM6zCvAOEItwpVtC0m6KUGtw.roa
File: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (raw, json)
Hash identifier: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=
Subject key identifier: 45:28:E7:33:AC:C2:BC:03:84:22:DC:29:56:D0:B4:9B:A2:94:1A:DC
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0197D6C40EEE1E9AAD2F3F0A3CD777A196BC
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/RSjnM6zCvAOEItwpVtC0m6KUGtw.roa
Signing time: Fri 04 Jul 2025 18:47:42 +0000
ROA not before: Fri 04 Jul 2025 18:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:c4:0e:ee:1e:9a:ad:2f:3f:0a:3c:d7:77:a1:96:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Jul 4 18:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4528e733acc2bc038422dc2956d0b49ba2941adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:7a:af:81:b8:b9:7a:42:ed:84:75:cb:06:
79:10:c2:78:ee:7f:80:63:75:da:06:62:ab:45:dd:
3b:6a:58:5c:44:d6:55:62:d8:23:ba:d4:41:17:33:
47:82:1c:ae:6c:81:d6:85:25:74:2f:cf:f7:da:65:
6a:a9:40:80:fe:78:9b:b8:e8:79:54:d8:08:b7:19:
b8:23:b2:5a:bb:91:df:11:d1:a3:db:50:cc:98:32:
a2:17:77:7b:d1:c4:28:9b:34:32:08:aa:24:0e:a9:
39:08:50:01:cb:69:40:84:3e:39:f5:8f:97:85:9d:
a4:f2:46:20:7a:fd:dc:04:2c:68:56:b2:57:6d:37:
79:aa:85:83:8e:63:65:78:76:04:f3:db:e0:e3:a1:
67:b3:c2:cf:c9:0a:04:83:98:16:fc:b6:be:13:ed:
b6:88:ac:a9:ba:4a:57:dd:da:d4:dc:02:d4:fa:28:
28:c7:37:e3:31:19:3f:c3:73:1f:e1:de:56:a5:fe:
43:6a:98:0d:1f:e9:52:fd:6d:24:05:70:5d:35:44:
f0:4b:0d:99:29:c0:b7:36:eb:8d:44:71:d4:b8:51:
45:1c:29:2b:f1:bd:5c:a9:d0:72:12:54:8c:4d:a5:
64:21:b7:c3:39:62:f1:50:64:c1:2a:ea:e1:66:e8:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:E7:33:AC:C2:BC:03:84:22:DC:29:56:D0:B4:9B:A2:94:1A:DC
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/RSjnM6zCvAOEItwpVtC0m6KUGtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
Signature Algorithm: sha256WithRSAEncryption
92:b1:dd:e9:56:5f:2f:f3:b2:2d:9c:63:3b:37:b5:2e:53:64:
ce:32:01:c1:fb:bc:63:f3:3b:7a:bf:b9:61:bc:59:b5:76:cc:
db:b1:90:fa:d3:f9:f0:50:8f:35:6f:50:14:94:20:94:a3:dc:
52:9c:28:7c:14:da:f5:7a:d0:70:14:f2:e3:c4:26:b2:ca:5d:
97:07:23:6c:27:c8:40:6b:88:8e:6d:91:d7:db:45:ae:da:aa:
80:85:8d:fe:eb:59:d4:20:8c:32:57:c6:4d:bd:ef:d2:1c:15:
2a:13:d3:a6:da:29:0e:15:2d:ae:e8:d0:d2:1a:f4:62:97:e1:
d5:47:f9:f5:9a:7e:dc:1d:0f:ad:58:a4:8a:16:b1:41:55:47:
c9:97:e3:a6:45:cf:a6:6b:95:92:37:60:8d:3e:0c:bb:eb:9f:
0b:6a:a1:fc:61:37:c3:ff:7b:9f:d7:6e:63:ca:a0:92:7c:b9:
53:0d:6b:56:ab:a8:ae:e0:4b:ed:dd:3e:ec:d4:93:35:0a:01:
d3:04:c8:8a:ec:26:f0:26:2f:40:23:94:8a:94:49:7e:8d:ae:
10:6d:64:2a:a7:ba:b1:a4:d9:a1:66:44:01:26:27:68:dd:c4:
00:41:ea:93:14:41:b9:09:98:f8:72:7d:4f:1e:88:28:98:45:
2c:5e:62:f1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZfWxA7uHpqtLz8KPNd3oZa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTE5MzM0YWQyYWQ1MzYxNmMzNGZlY2U5NmNlMjkyMzBm
ODYzNDkwHhcNMjUwNzA0MTg0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTI4ZTczM2FjYzJiYzAzODQyMmRjMjk1NmQwYjQ5YmEyOTQxYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJR6r4G4uXpC7YR1ywZ5EMJ47n+A
Y3XaBmKrRd07alhcRNZVYtgjutRBFzNHghyubIHWhSV0L8/32mVqqUCA/nibuOh5
VNgItxm4I7Jau5HfEdGj21DMmDKiF3d70cQomzQyCKokDqk5CFABy2lAhD459Y+X
hZ2k8kYgev3cBCxoVrJXbTd5qoWDjmNleHYE89vg46Fns8LPyQoEg5gW/La+E+22
iKypukpX3drU3ALU+igoxzfjMRk/w3Mf4d5Wpf5DapgNH+lS/W0kBXBdNUTwSw2Z
KcC3NuuNRHHUuFFFHCkr8b1cqdByElSMTaVkIbfDOWLxUGTBKurhZui7qQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEUo5zOswrwDhCLcKVbQtJuilBrcMB8GA1UdIwQY
MBaAFMKRkzStKtU2FsNP7Ols4pIw+GNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDIt
MTY1MzE4OGQ4MTI2LzEvUlNqbk02ekN2QU9FSXR3cFZ0QzBtNktVR3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84OTRiZGMtMjhhNi00YzM2LWJhNDItMTY1MzE4OGQ4MTI2
LzEvd3BHVE5LMHExVFlXdzBfczZXemlrakQ0WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHwQDAN
BgkqhkiG9w0BAQsFAAOCAQEAkrHd6VZfL/OyLZxjOze1LlNkzjIBwfu8Y/M7er+5
YbxZtXbM27GQ+tP58FCPNW9QFJQglKPcUpwofBTa9XrQcBTy48QmsspdlwcjbCfI
QGuIjm2R19tFrtqqgIWN/utZ1CCMMlfGTb3v0hwVKhPTptopDhUtrujQ0hr0Ypfh
1Uf59Zp+3B0PrVikihaxQVVHyZfjpkXPpmuVkjdgjT4Mu+ufC2qh/GE3w/97n9du
Y8qgkny5Uw1rVquoruBL7d0+7NSTNQoB0wTIiuwm8CYvQCOUipRJfo2uEG1kKqe6
saTZoWZEASYnaN3EAEHqkxRBuQmY+HJ9Tx6IKJhFLF5i8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:18:05 2025 by rpki-client