Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/AF5LwWg1dao3w02VHECRUerpukU.roa
File: AF5LwWg1dao3w02VHECRUerpukU.roa (raw, json)
Hash identifier: Ncs14Dy32ScG4H2HyXyIY4G9gDsZB0rdLa7JZ2atlmg=
Subject key identifier: 00:5E:4B:C1:68:35:75:AA:37:C3:4D:95:1C:40:91:51:EA:E9:BA:45
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019851747BE2CD253E83A8E3DF03DECDF8C5
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/AF5LwWg1dao3w02VHECRUerpukU.roa
Signing time: Mon 28 Jul 2025 14:34:05 +0000
ROA not before: Mon 28 Jul 2025 14:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208707
IP address blocks: 2a14:ae00:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:74:7b:e2:cd:25:3e:83:a8:e3:df:03:de:cd:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jul 28 14:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=005e4bc1683575aa37c34d951c409151eae9ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:e3:08:0d:9b:aa:9a:75:c9:7b:0a:f0:d9:
17:7b:ba:a7:70:e3:46:72:87:43:e1:2d:44:ed:37:
42:0a:56:a4:21:0b:17:17:aa:26:f2:e4:23:46:4c:
27:0c:de:76:cd:0b:2c:60:72:68:3f:ba:28:41:b8:
59:91:b1:07:54:f6:92:49:85:b4:ff:d2:5c:f4:4c:
1d:34:cd:7c:25:a0:84:8f:aa:ea:a4:7d:f7:0c:da:
46:1b:02:da:20:78:10:e3:38:b9:ee:c0:a2:85:b3:
72:6e:83:f6:eb:4b:e0:3e:26:d0:48:74:9c:ae:16:
7b:6c:e6:25:f4:22:82:e4:19:44:61:91:ab:a3:6d:
8d:1f:48:70:fc:c9:bf:72:00:d3:af:07:7b:6b:b0:
fd:36:db:d3:ec:b3:c2:1f:30:64:a2:d5:5a:a2:2c:
ad:8a:e9:15:57:cf:8b:94:9c:18:ab:22:63:18:1a:
81:5f:75:e6:64:f6:d0:10:19:44:42:df:0a:03:d0:
67:35:ec:2f:b1:b7:22:1f:51:ec:b0:45:6b:d7:84:
04:f2:84:e9:a6:80:19:89:21:0b:ac:ea:7c:ec:2b:
88:e8:d3:42:c0:6e:97:7f:58:ed:e1:6f:d7:37:5f:
53:d7:b2:0a:c8:7f:dd:ab:b5:4a:ea:c9:ec:29:15:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:4B:C1:68:35:75:AA:37:C3:4D:95:1C:40:91:51:EA:E9:BA:45
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/AF5LwWg1dao3w02VHECRUerpukU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:20::/44
Signature Algorithm: sha256WithRSAEncryption
7e:d5:28:8b:e1:10:66:39:ca:d9:34:e3:37:4c:40:09:f4:6f:
a3:5b:6d:c5:30:70:a1:f8:04:89:d0:d6:c5:f3:48:22:28:01:
6f:ac:d3:8a:a3:c2:9d:8e:35:fa:bf:af:c5:51:e7:ae:67:5d:
c8:2f:6b:4d:5c:aa:50:db:bd:aa:df:e5:a5:98:60:e2:bd:98:
63:cc:66:1f:96:02:41:94:61:cc:68:30:d8:97:3d:5a:6e:a3:
67:f6:84:09:a5:65:4a:7b:24:cb:4f:62:d0:4e:b6:ad:a0:66:
11:23:8a:0b:63:29:78:0b:16:35:ee:71:8c:26:41:4e:55:9a:
5e:44:b7:89:39:63:e8:c5:15:a5:4b:66:ba:75:c2:30:18:52:
f1:f9:a2:c2:ca:58:2a:22:e1:ae:8f:a2:0f:73:a7:d2:3b:ee:
38:4e:fa:c3:5c:a7:a9:81:1c:b5:58:0d:7c:f5:b6:a5:49:0f:
d2:f0:0a:d9:3e:e4:28:3a:c5:f4:d4:25:62:d5:4b:3f:aa:11:
cc:b3:44:4b:d8:db:9c:49:e6:83:27:5a:58:1a:ed:86:f4:c2:
f0:51:36:ae:55:b3:bd:fa:15:e7:86:b6:05:61:e8:3c:03:40:
48:5e:12:8d:04:4c:4d:9b:ba:af:03:07:91:dd:ac:81:fa:07:
fa:68:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:12 2025 by rpki-client