Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/C36HYE9g7Segc4lKsITQsAPbk3A.roa
File: C36HYE9g7Segc4lKsITQsAPbk3A.roa (raw, json)
Hash identifier: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=
Subject key identifier: 0B:7E:87:60:4F:60:ED:27:A0:73:89:4A:B0:84:D0:B0:03:DB:93:70
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 01985F553FE97763313FB26C326DF9CF8A2F
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/C36HYE9g7Segc4lKsITQsAPbk3A.roa
Signing time: Thu 31 Jul 2025 07:14:38 +0000
ROA not before: Thu 31 Jul 2025 07:14:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214937
IP address blocks: 2a0b:d502::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:55:3f:e9:77:63:31:3f:b2:6c:32:6d:f9:cf:8a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jul 31 07:14:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7e87604f60ed27a073894ab084d0b003db9370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:d6:0d:eb:80:02:2a:c9:74:bc:3a:75:81:
67:d3:0c:48:6e:85:27:b6:53:e9:7b:7d:49:bf:14:
10:60:cd:46:62:f9:01:09:c1:ab:2f:a2:6a:1a:8d:
a5:68:6a:9f:58:09:ef:23:5a:54:3c:c1:9c:85:68:
3d:77:dd:1c:b0:43:53:5d:86:df:22:2f:a2:7e:30:
7f:d3:4e:e0:c8:9e:b0:68:9b:74:3e:5a:5b:f8:ab:
2a:8a:e0:9f:1a:47:b1:ad:31:d0:29:fb:fd:1d:1b:
0e:d8:8a:7b:17:27:18:71:8f:0d:71:e7:53:82:47:
ea:76:39:04:5b:b8:25:c4:b9:29:8f:23:9d:75:0b:
4c:6e:c2:8f:4a:89:0a:d5:2c:27:5c:9f:08:1d:0b:
0b:27:29:b3:60:1b:c7:dc:eb:f9:5b:e2:8e:42:50:
3e:55:07:72:78:eb:84:14:9b:25:11:b4:1a:44:fb:
c4:76:48:2e:b6:29:b8:08:94:36:fd:68:9d:68:76:
9e:df:fb:9a:05:96:af:a4:61:c8:77:d5:b0:fa:11:
76:2d:ce:ff:c6:d7:42:bf:ac:02:f8:f0:a0:24:85:
71:9b:dd:19:7d:d4:14:ae:c5:86:b9:9e:7f:81:f7:
55:74:c3:04:da:03:49:d1:2c:7b:79:a1:6a:60:c8:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:87:60:4F:60:ED:27:A0:73:89:4A:B0:84:D0:B0:03:DB:93:70
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/C36HYE9g7Segc4lKsITQsAPbk3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:d502::/32
Signature Algorithm: sha256WithRSAEncryption
53:f8:fc:db:51:a7:6d:29:fc:3d:f4:ab:ec:60:1d:f2:41:68:
3f:4f:c6:e2:4c:26:29:85:8b:95:7d:b5:7a:0f:a6:13:eb:bc:
f1:4a:4d:d4:37:6f:cb:5e:98:f5:c1:41:ee:26:d0:0c:f3:f1:
6a:8f:cd:87:88:b2:d3:a9:77:ba:cc:b2:fe:21:81:e7:e8:61:
43:e1:22:80:19:84:5a:40:6f:0e:06:a2:92:0d:97:93:13:17:
1b:51:50:ff:07:f2:bb:3c:b1:86:65:be:12:f7:80:d5:65:68:
38:8e:9a:af:2e:d9:e0:bb:38:7b:70:e7:f9:dc:50:a1:63:c5:
66:e8:59:1e:30:d2:a3:a8:14:9f:5d:36:15:48:28:c0:8d:51:
06:f5:0e:e7:e4:1a:a8:91:b1:31:dc:48:31:69:16:0b:cd:cd:
76:60:68:0d:57:54:e2:38:2f:e2:46:dc:9d:44:c1:34:be:c9:
b3:63:d8:4b:f9:30:10:cd:97:3c:58:0e:b3:2f:6b:2d:f7:75:
66:af:d8:20:22:ab:3c:65:28:0b:b9:e9:5e:06:2c:63:38:a3:
c7:f0:06:41:78:5a:90:5f:72:79:ac:05:bd:2b:a8:aa:6b:cc:
f0:ba:13:53:6d:1b:be:bc:01:8a:68:ef:ba:e8:2a:6d:79:90:
a8:18:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:08 2025 by rpki-client