Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa
File: n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa (raw, json)
Hash identifier: j/RbuEbSmCY6X+urcyJxBIm09OVw0mWKye4GRN1M584=
Subject key identifier: 9F:56:74:43:E6:10:55:05:6C:A7:A1:2D:69:27:55:E6:4C:73:2B:CA
Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial: 019864D52793C87A15DD4A707C0A836CCC6C
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa
Signing time: Fri 01 Aug 2025 08:52:27 +0000
ROA not before: Fri 01 Aug 2025 08:52:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59653
IP address blocks: 81.94.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:d5:27:93:c8:7a:15:dd:4a:70:7c:0a:83:6c:cc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Validity
Not Before: Aug 1 08:52:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f567443e61055056ca7a12d692755e64c732bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:99:f1:39:22:3f:81:ea:f4:f7:43:98:14:
ae:ee:3c:d4:ba:27:ef:e2:5e:dd:6b:13:31:7e:08:
37:80:0c:41:c8:74:72:55:d7:87:dc:aa:6c:0b:0a:
44:48:22:f9:05:66:71:50:3f:5c:fe:b7:0e:07:8d:
ba:74:7d:58:1f:90:4c:6c:6d:ca:ee:40:eb:47:9a:
1f:f0:a1:4f:f9:25:cc:79:12:2f:24:d7:55:21:04:
93:09:6f:68:6c:ad:99:6f:d8:08:4f:e2:94:df:8e:
13:6d:e7:50:9c:05:95:34:79:96:55:29:0e:cd:1a:
c5:b3:0d:84:54:b7:23:3e:7a:ac:48:0c:f2:b0:ff:
3c:8f:a0:31:f0:28:16:f0:c7:e9:a1:2b:01:b1:ee:
0e:68:15:4b:da:1f:aa:4d:ed:7c:0f:40:4a:2b:03:
ef:5e:8f:a7:21:37:98:12:51:f5:38:0e:5b:ee:fe:
bf:48:07:54:4a:16:56:9a:8c:82:bc:14:4b:a9:20:
ff:cb:87:c1:5e:e2:24:cc:1c:c3:fa:9d:fa:82:08:
97:9e:93:aa:54:ba:f8:a8:4b:70:97:23:00:55:97:
8e:6e:0b:d7:4d:23:04:46:b9:e4:b3:cc:96:af:2a:
3c:37:c8:ee:e5:6c:09:e9:3c:2b:2c:7a:5e:3f:47:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:74:43:E6:10:55:05:6C:A7:A1:2D:69:27:55:E6:4C:73:2B:CA
X509v3 Authority Key Identifier:
keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/n1Z0Q-YQVQVsp6EtaSdV5kxzK8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.40.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0d:a8:1d:ae:9f:63:73:bf:ac:0c:f8:f9:a1:0a:fc:4f:de:
d7:95:3c:93:c1:56:b4:87:eb:0f:d9:30:67:90:cf:5a:16:2c:
b1:b9:5c:04:3a:63:25:d0:21:90:85:a6:00:02:79:af:e3:1d:
12:b6:99:22:90:c8:f2:b5:cd:70:88:ad:50:41:7f:56:ef:49:
4f:19:76:99:60:12:90:a9:93:38:55:87:d3:22:c9:2a:f9:2d:
68:ee:92:69:7b:87:7b:49:09:ae:48:6a:f4:27:4c:ca:bd:cb:
86:16:06:ba:19:9e:c3:d3:ad:7b:48:6f:ac:fc:5d:a2:95:be:
b3:e4:3a:06:94:a0:2a:70:a8:b1:a3:d3:32:15:ef:15:96:c7:
d9:1a:43:1e:46:d0:d4:55:29:86:05:2b:99:58:d6:44:e3:af:
47:44:11:10:3b:92:41:6a:11:85:f1:2e:5c:f2:2e:f6:d9:8f:
52:b7:78:43:a8:30:23:71:24:3e:88:50:98:e1:ee:25:79:d1:
bb:8b:a9:e1:90:5b:bb:87:0f:ad:5f:71:af:5e:bb:be:59:0a:
f5:6c:08:38:60:85:56:31:c2:9d:5e:c6:39:5b:13:95:e4:86:
25:3a:dd:05:f8:13:4e:5c:50:69:e3:9d:05:54:b5:cd:34:79:
0f:5d:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:39 2025 by rpki-client