Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n40E_mpSUbDrPRin7wGLybLjxqo.roa
File: n40E_mpSUbDrPRin7wGLybLjxqo.roa (raw, json)
Hash identifier: n8pRkvwikyBf8VB7ZruFdea9HTihfe0isjxqpvjQRDY=
Subject key identifier: 9F:8D:04:FE:6A:52:51:B0:EB:3D:18:A7:EF:01:8B:C9:B2:E3:C6:AA
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019A0B20FF00E3F986FD6ABB3661DEA33960
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n40E_mpSUbDrPRin7wGLybLjxqo.roa
Signing time: Wed 22 Oct 2025 08:55:03 +0000
ROA not before: Wed 22 Oct 2025 08:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16200
IP address blocks: 2a06:9640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:20:ff:00:e3:f9:86:fd:6a:bb:36:61:de:a3:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 22 08:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f8d04fe6a5251b0eb3d18a7ef018bc9b2e3c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:f6:2d:8a:2a:a2:26:0e:39:cf:a6:9a:d5:
a7:37:83:ee:0b:50:34:21:52:31:98:ea:4d:31:d6:
f3:dc:79:52:5c:8c:d4:ba:13:1f:ab:dd:06:66:30:
82:1c:79:75:f1:53:a8:a6:eb:a0:70:89:1b:93:1a:
0e:16:fe:f9:dc:4c:d6:81:19:a3:52:6d:a6:34:a1:
f0:ee:9a:90:b6:4b:e1:3c:34:31:90:40:be:ad:b1:
5f:03:51:88:5f:02:30:c3:61:35:59:6e:13:96:fa:
da:f4:6c:19:0e:a8:46:0e:8b:d8:2e:e3:f9:22:62:
c2:ba:5b:fd:cd:fa:79:39:be:ca:ef:4b:ff:5d:fb:
e8:61:51:1f:ab:0f:59:52:17:f8:11:c5:f4:af:00:
19:02:20:fa:c7:0a:be:df:a2:c0:1e:d5:0c:62:d6:
0a:59:fb:b1:8b:d8:50:8f:50:fc:f3:96:5f:c4:28:
42:88:23:dd:61:d1:08:ed:44:df:8e:0a:9b:ab:cb:
bf:73:a2:1e:fd:db:50:84:77:11:6d:0b:31:39:ec:
de:d5:e5:ef:7b:21:2c:8f:b1:be:71:67:2e:5f:bd:
06:11:db:96:7e:26:42:11:a4:8b:42:cb:88:f8:cb:
7c:0b:e5:4e:1a:af:53:12:fa:8b:02:fa:5c:a3:e0:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:04:FE:6A:52:51:B0:EB:3D:18:A7:EF:01:8B:C9:B2:E3:C6:AA
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n40E_mpSUbDrPRin7wGLybLjxqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9640::/29
Signature Algorithm: sha256WithRSAEncryption
85:1f:5a:7c:be:f3:1e:9b:75:11:37:b2:2f:a8:10:b4:92:12:
d0:a8:4e:5e:4d:a2:92:d8:2d:8e:3b:d8:e3:e1:61:7c:1d:1a:
ca:a8:a9:3d:97:c1:9e:7f:44:bd:1f:0c:5b:62:bc:24:73:7b:
43:fd:92:c5:49:7f:c4:81:5f:55:b1:10:69:5f:e8:c4:76:ff:
f1:fb:d5:19:5f:1c:ac:b5:a7:74:c0:a8:84:78:83:81:42:81:
94:8d:bb:0a:f7:13:94:16:42:f3:62:ee:39:ae:bf:bd:24:db:
c4:c3:94:c2:7c:ca:c4:82:af:c8:da:6b:a2:72:c3:5d:8c:55:
22:35:3e:5c:b2:3b:67:b5:52:ce:4b:73:e2:0e:ba:2e:b9:e2:
6d:8b:5f:29:f4:1d:c5:83:97:04:9b:f4:42:e1:13:9d:64:74:
4c:77:54:57:ac:e6:a6:8c:d4:73:d2:b0:b3:cc:f1:1d:af:49:
ca:8c:a2:67:b6:4e:fb:3c:d1:2b:23:5e:7a:6d:af:81:45:50:
ac:6f:85:c9:d3:40:90:a8:cf:00:4c:b3:5a:04:b9:a7:b7:cc:
d2:45:a9:77:3d:44:33:8b:12:ee:51:28:4c:6f:4f:d1:e5:9c:
9a:db:a5:35:cc:82:ee:60:d7:04:27:a2:06:53:c8:1b:42:c7:
57:47:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:51 2025 by rpki-client