Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lKggvuEjEQ3eznbN-jTLdKy484U.roa
File: lKggvuEjEQ3eznbN-jTLdKy484U.roa (raw, json)
Hash identifier: njO7P3neHEc6lr5Jxm+17IU4CqSyszP6uD4snmWLen4=
Subject key identifier: 94:A8:20:BE:E1:23:11:0D:DE:CE:76:CD:FA:34:CB:74:AC:B8:F3:85
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019A38FEA23178A647846F6AFE9982753E06
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lKggvuEjEQ3eznbN-jTLdKy484U.roa
Signing time: Fri 31 Oct 2025 06:40:03 +0000
ROA not before: Fri 31 Oct 2025 06:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401297
IP address blocks: 2a0b:6b82::/32 maxlen: 32
2a0b:6b86:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:fe:a2:31:78:a6:47:84:6f:6a:fe:99:82:75:3e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Oct 31 06:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94a820bee123110ddece76cdfa34cb74acb8f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:89:aa:aa:e4:3e:25:34:fb:78:83:04:77:
63:04:3e:76:b0:e2:6f:da:26:03:e2:ee:4c:61:d6:
c4:ae:ae:6a:e1:8d:6f:d7:88:72:20:63:ed:af:bc:
4f:d9:24:60:bf:e2:b3:92:63:26:5d:3d:e4:51:90:
3e:4c:f3:6e:97:fb:69:aa:24:7c:4c:4b:df:cf:d7:
60:9d:03:b3:1e:4f:9e:ca:1c:81:1b:e3:6c:ee:69:
8f:02:0d:10:e2:5f:6e:45:80:03:16:40:cc:11:54:
82:f0:6e:d9:23:28:7d:b8:fd:c2:d7:5b:57:58:1e:
67:6f:bd:a6:b5:ed:ed:19:eb:f9:1f:ea:e3:21:0b:
fb:67:8e:10:3c:25:92:bc:44:05:2c:f4:bd:ff:71:
72:de:3f:21:2f:ee:94:13:83:74:d5:95:60:c3:20:
f9:03:95:2d:65:e9:78:62:d1:7d:48:b9:f3:af:a5:
68:16:ac:97:f8:4f:03:81:2a:38:cb:fe:d6:ea:78:
1f:1e:5c:50:68:5e:c0:9d:d2:b2:f1:f0:36:b6:d3:
78:60:ea:6b:12:70:c5:dd:42:22:8b:d1:9d:83:45:
b5:18:64:36:f5:34:ae:14:26:6b:ee:a0:5f:7e:96:
fb:41:10:71:29:39:92:04:fd:2c:bc:cd:04:d9:47:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:20:BE:E1:23:11:0D:DE:CE:76:CD:FA:34:CB:74:AC:B8:F3:85
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/lKggvuEjEQ3eznbN-jTLdKy484U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b82::/32
2a0b:6b86:1300::/40
Signature Algorithm: sha256WithRSAEncryption
89:25:dd:4d:08:57:6a:cc:50:df:92:3a:23:b8:fd:d2:53:68:
1e:3a:40:72:54:ad:77:f1:8b:5f:9d:22:bd:30:df:44:f3:64:
05:cf:12:14:cd:2a:b3:68:ab:e0:66:3b:7b:d1:4d:99:09:37:
09:99:1c:33:cf:d7:ea:56:2e:a9:21:f2:ca:73:8e:b3:a1:92:
de:02:b6:71:ed:11:0b:19:28:11:73:80:be:77:e7:76:c2:c1:
1c:4a:94:ac:07:9a:ac:bf:65:8f:3e:9e:79:cc:47:77:15:4d:
5e:ef:cd:d9:88:0b:1d:a2:06:f1:a8:2d:f2:7e:4a:da:17:fa:
a6:52:4c:05:a8:43:0c:ba:e1:e9:a2:5e:38:e0:ab:9c:7b:5a:
77:19:e7:f0:f6:06:35:ea:b7:15:0e:f2:52:9e:e6:52:69:14:
c8:0d:43:24:7a:2a:a1:5e:57:5f:ac:e3:af:f1:45:0d:2b:06:
e9:f8:e0:55:ed:7e:34:a0:22:bb:8f:0f:ba:8c:24:ce:c1:35:
aa:16:94:85:7e:77:5c:69:64:98:df:94:7c:e8:08:16:e8:6d:
ca:90:47:dc:de:99:e2:69:19:5d:81:2b:79:ad:7d:90:c5:0d:
ca:2e:d6:64:95:48:fa:7d:d9:de:53:3b:48:3e:5a:1b:cf:21:
13:9d:dd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:09:11 2025 by rpki-client