Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/cM2WijieWcfz1get8DBHQkXXH94.roa
File: cM2WijieWcfz1get8DBHQkXXH94.roa (raw, json)
Hash identifier: YN463PMg+163k21SmND+h8gKso19maJII2obZdv1r0M=
Subject key identifier: 70:CD:96:8A:38:9E:59:C7:F3:D6:07:AD:F0:30:47:42:45:D7:1F:DE
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01987EB0731729B95E74FBB3B12BAA7151D2
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/cM2WijieWcfz1get8DBHQkXXH94.roa
Signing time: Wed 06 Aug 2025 09:22:29 +0000
ROA not before: Wed 06 Aug 2025 09:22:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a02:6fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:b0:73:17:29:b9:5e:74:fb:b3:b1:2b:aa:71:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Aug 6 09:22:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70cd968a389e59c7f3d607adf030474245d71fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:68:8a:10:db:fd:f9:e7:78:e4:ac:37:47:
28:a3:4a:cc:d8:55:19:07:85:f8:92:b5:4b:18:bd:
af:bb:89:1c:79:9a:64:0a:3b:03:29:5e:4c:63:1d:
ee:0e:2d:ec:14:14:fa:4d:98:d4:fa:ea:60:17:cd:
8f:47:71:0a:46:1e:74:0e:a5:73:e0:04:e2:66:f3:
53:79:84:3d:66:c2:de:af:5c:cc:5c:4c:bb:82:8b:
74:6d:98:73:dc:e4:3c:20:bf:43:db:c9:77:a4:c9:
e6:e5:62:57:96:9c:13:ad:ea:3b:2f:d3:1d:ff:27:
55:2a:7d:b3:ba:6d:24:45:92:ae:61:38:fb:2b:b1:
8e:00:10:e9:92:a3:fa:07:3a:77:0a:be:59:b5:6b:
de:d0:93:52:49:f0:5b:6c:97:48:73:e7:20:6d:e5:
89:9e:36:f1:fb:48:08:6c:0d:d8:1a:9e:1c:ad:8e:
8d:d2:49:2d:b4:10:ca:8d:72:47:11:1c:ea:21:5c:
ab:98:21:b9:96:df:14:cc:f6:fe:ec:eb:a5:dc:14:
80:c5:1e:8e:c7:8f:cd:9f:d1:42:b2:fd:7a:4f:8a:
16:36:42:10:55:de:52:e6:c9:92:75:29:fb:c9:91:
09:e2:f9:1f:e0:33:f9:3f:da:21:a1:50:d8:03:08:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:96:8A:38:9E:59:C7:F3:D6:07:AD:F0:30:47:42:45:D7:1F:DE
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/cM2WijieWcfz1get8DBHQkXXH94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:8c:42:fb:28:e3:3a:ec:d4:76:ac:02:36:de:e2:45:cc:a2:
c1:3f:b5:37:72:78:57:36:f6:3b:03:f5:6c:cd:fb:75:15:35:
c7:d1:25:24:ad:4b:a6:24:ea:32:2c:04:a5:2f:14:d6:49:0e:
95:4e:40:ab:b9:76:da:7f:16:07:89:29:fc:f5:5b:e7:77:14:
1e:12:94:c1:d9:0c:7f:02:ae:d2:da:a0:09:51:44:c4:59:2d:
66:d1:e1:db:a4:eb:2e:b5:a0:53:82:8f:4f:94:24:03:31:6e:
2b:cd:78:f2:22:74:d5:43:3a:4d:a2:b8:a8:0a:7d:0e:25:12:
44:6b:96:90:8f:ee:3d:41:64:51:8b:45:f3:ce:2e:99:13:fb:
55:6d:21:44:71:80:8b:ab:d1:b8:3f:62:45:e8:72:0c:ee:b9:
6b:52:a9:78:8b:eb:ae:86:60:e5:30:12:6f:f6:c9:93:8b:dc:
44:be:bc:a6:57:6d:82:1a:e0:c4:f0:12:03:6c:89:a6:e2:2d:
38:e2:07:1a:0a:da:69:5f:e3:cb:33:9b:65:94:59:57:01:89:
30:82:80:48:c1:d3:b5:a8:d9:ce:f2:06:49:c2:d2:37:a0:46:
2d:55:f7:1f:1f:7d:c3:91:ac:49:13:f5:cd:61:84:ec:92:3e:
b2:f1:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:42 2025 by rpki-client