Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/CjQoEIYqa3VtH111fKEBqeleqlM.roa
File: CjQoEIYqa3VtH111fKEBqeleqlM.roa (raw, json)
Hash identifier: UvEWMazTA8cqsYu1UIhBAG0KtE9R4iCvRATXvg7Pnog=
Subject key identifier: 0A:34:28:10:86:2A:6B:75:6D:1F:5D:75:7C:A1:01:A9:E9:5E:AA:53
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 019A34252E4ECFA1AFCB6B11F370BABEB305
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/CjQoEIYqa3VtH111fKEBqeleqlM.roa
Signing time: Thu 30 Oct 2025 08:04:03 +0000
ROA not before: Thu 30 Oct 2025 08:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15943
IP address blocks: 2a0b:29c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:25:2e:4e:cf:a1:af:cb:6b:11:f3:70:ba:be:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Oct 30 08:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a342810862a6b756d1f5d757ca101a9e95eaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:9c:c5:e2:a8:dd:9f:55:fa:eb:82:03:4b:
75:ed:a2:b6:79:88:5f:d6:34:84:f7:61:94:d3:29:
bc:41:66:1b:1a:e4:18:e2:12:fe:83:c2:d3:7d:8a:
d8:28:e6:c8:17:d2:f9:80:f6:71:75:3f:4a:66:f3:
e2:8f:5e:36:ba:1d:a0:cd:8c:67:d8:f2:14:bd:31:
59:25:1a:e2:5d:5c:09:1d:f6:f2:0b:71:5d:c0:8f:
32:87:fb:db:52:c5:72:48:fc:db:11:b5:88:01:18:
d8:c8:6c:bf:2d:59:69:76:1d:ad:11:72:63:6e:15:
52:0d:90:eb:cb:c4:96:ce:90:63:db:b1:70:c6:85:
c8:b2:8c:d5:9f:50:d0:13:b8:bc:ec:98:0a:f8:2b:
2a:ba:e8:0e:b5:5c:35:fe:0d:ed:ff:99:9b:65:28:
f6:94:7d:48:43:b0:d9:5d:a5:62:bc:0c:a1:aa:ce:
aa:a7:25:61:b3:08:ff:53:af:5f:0b:3a:cf:d1:63:
b0:27:e1:bf:4a:ae:12:af:55:df:6e:7b:99:74:8e:
8d:4b:11:b6:24:d9:b4:f3:bf:eb:65:44:b9:f6:81:
78:7e:bc:1b:d7:e7:52:0a:a7:0e:11:bd:de:03:c0:
55:a8:25:11:69:44:5e:4a:ba:12:41:b6:68:7b:9d:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:28:10:86:2A:6B:75:6D:1F:5D:75:7C:A1:01:A9:E9:5E:AA:53
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/CjQoEIYqa3VtH111fKEBqeleqlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:29c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
50:09:34:25:4c:07:73:4b:eb:13:d7:39:95:62:04:fa:c5:3e:
ea:05:e1:79:63:3f:22:15:b7:7a:08:e7:61:03:f3:07:23:8a:
e2:e7:c4:d3:4e:51:4d:b3:48:1d:eb:c3:35:62:b3:e6:99:82:
4b:e0:df:93:4e:a0:04:b2:37:2a:e7:25:4e:7f:ae:7f:83:6b:
be:e6:c8:eb:2f:60:23:c3:ec:40:7a:cd:36:4d:55:34:cc:22:
45:38:5c:d9:fc:64:14:50:37:03:22:fa:90:ee:2d:4d:16:f1:
61:92:8a:50:0c:e9:35:90:ac:91:fc:1f:7e:86:94:9f:91:5a:
5e:63:e9:8b:b8:ef:e7:06:5b:e2:b9:81:c3:2d:62:bf:b1:ac:
c7:35:62:98:6e:57:fd:1a:54:99:c6:b7:8c:17:67:b4:95:ce:
24:c2:eb:2f:50:c9:91:8b:53:fc:59:fe:4f:c9:49:eb:f5:01:
40:62:cc:fc:23:d7:26:dd:b2:a3:7e:ef:28:5a:62:9e:1e:d4:
ac:4f:eb:22:fa:f6:2a:47:ec:c7:d6:6a:80:00:3e:72:29:3e:
de:65:b1:14:6a:d1:f8:53:d7:61:43:dc:66:06:2e:38:64:49:
f9:dd:37:96:41:af:a6:8f:66:07:7a:91:ad:c0:27:30:ce:8a:
3a:52:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:00:59 2025 by rpki-client