Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa
File: 4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa (raw, json)
Hash identifier: 9LRN3dhEIGXRSt5kx+/0cte7If5ewtrmgKSLFoQCoRA=
Subject key identifier: E1:63:8A:D8:F9:1D:DD:D3:8E:22:83:46:8E:98:8B:15:EF:0E:28:22
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01987A813298C117A07326AEF3EDD6FA71DF
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa
Signing time: Tue 05 Aug 2025 13:52:24 +0000
ROA not before: Tue 05 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 2a02:c6c1:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:81:32:98:c1:17:a0:73:26:ae:f3:ed:d6:fa:71:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 5 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1638ad8f91dddd38e2283468e988b15ef0e2822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:14:04:16:38:bd:03:9e:cd:79:bf:24:f5:
b9:4c:3b:19:05:dc:25:60:34:40:db:3e:98:3c:e9:
54:ea:e0:6d:5c:07:65:11:5c:d6:91:53:51:82:8b:
78:e3:b5:14:d9:ff:41:2b:1b:d9:a6:08:77:43:ff:
79:59:e2:b5:42:73:0e:c6:c9:4b:71:1e:65:9d:cd:
1e:ea:40:89:5b:9f:73:33:0c:d5:44:8b:e8:4a:95:
db:46:33:f5:24:d2:9b:81:e7:68:74:21:90:a5:28:
bc:ec:1f:c4:1a:e4:c2:8e:e7:9d:45:0b:af:2d:dc:
0a:3b:40:5d:e2:bc:b9:9d:4c:d0:d4:fc:22:ff:c4:
5c:58:27:e6:ba:4e:80:25:54:ae:fb:b3:12:18:80:
23:86:6e:95:bf:bd:e2:01:d6:22:80:d5:51:a7:85:
06:e2:d8:25:ab:76:bf:1f:ac:cc:66:70:dc:0b:ac:
d8:52:1f:bc:a8:d7:77:db:12:57:b1:35:b3:da:1f:
c5:60:62:9b:11:32:09:aa:cd:e1:83:58:1b:32:28:
90:db:53:97:18:4f:9a:d6:5b:7e:49:1d:c9:a3:8d:
a8:7b:11:e3:d6:3d:e6:86:ea:12:e3:7c:b2:92:86:
68:41:cf:03:37:51:60:94:09:35:05:5b:7d:d2:69:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:8A:D8:F9:1D:DD:D3:8E:22:83:46:8E:98:8B:15:EF:0E:28:22
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4WOK2Pkd3dOOIoNGjpiLFe8OKCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c6c1:c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:c6:70:1c:64:75:a8:40:30:42:b6:4e:ef:37:a6:a9:96:f4:
f7:05:74:de:78:54:24:92:c2:52:54:51:f3:41:25:6f:4d:e9:
f8:3e:04:09:28:ac:24:d8:00:37:54:a3:63:62:bc:e1:ef:2d:
e1:49:bf:a8:e2:ce:cf:97:ab:c4:28:a3:c5:0f:4b:6a:53:05:
3b:75:ec:15:97:f8:3e:71:75:dd:bb:4a:cc:59:18:47:9f:c2:
78:aa:1a:5e:38:1e:1c:68:da:8e:5f:e6:49:40:b9:c9:64:a9:
82:8b:23:eb:c5:10:f7:fa:f6:4b:d0:f7:7e:68:07:05:f6:5d:
14:3e:ed:44:3b:97:15:2b:fe:c4:c8:71:61:f8:71:12:3e:35:
e7:0e:fb:b8:de:71:99:ba:bc:ab:80:e7:0d:14:2c:47:c1:2f:
eb:20:fd:16:3b:e1:9d:5c:4d:15:4c:28:1c:21:0a:49:9f:43:
72:2f:89:01:d6:a5:e7:df:af:9b:07:7f:fb:a7:b1:5c:c3:9b:
03:30:34:e2:5e:ab:48:c0:57:41:71:40:d5:03:43:f9:68:35:
72:62:b7:48:b1:4e:d6:2a:c2:e0:11:24:4f:84:b9:57:25:cd:
44:c9:96:34:4e:bb:41:63:88:c3:c2:81:74:af:6d:d9:7f:d0:
a5:81:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:16 2025 by rpki-client