Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/q9KAfK0rDP6HvDAvu6yCONcHo1A.roa
File: q9KAfK0rDP6HvDAvu6yCONcHo1A.roa (raw, json)
Hash identifier: rpaTArlwk3d6poFJ0BsdJJajMgWajOTxcwUJ1/mYsyQ=
Subject key identifier: AB:D2:80:7C:AD:2B:0C:FE:87:BC:30:2F:BB:AC:82:38:D7:07:A3:50
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019758FBAC2416AF18AD4F6FFEA1B6CD536A
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/q9KAfK0rDP6HvDAvu6yCONcHo1A.roa
Signing time: Tue 10 Jun 2025 08:36:17 +0000
ROA not before: Tue 10 Jun 2025 08:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:fb:ac:24:16:af:18:ad:4f:6f:fe:a1:b6:cd:53:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 10 08:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd2807cad2b0cfe87bc302fbbac8238d707a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:9b:6a:f0:95:c5:72:f0:ec:45:7e:9e:64:
c2:5c:d1:58:c1:b3:21:3d:c5:e0:47:83:6a:d4:17:
12:c8:84:c3:29:98:92:15:8d:20:4b:15:03:88:46:
2d:0d:6b:45:ea:2a:a3:e3:39:cb:ef:7d:2d:49:2e:
a2:dd:8b:ce:9e:73:af:ff:3c:66:76:c7:90:98:f5:
ed:fa:0d:a8:0a:14:8e:2e:0b:71:7a:39:e4:7f:d1:
66:c8:6b:c3:3b:44:39:db:e1:1c:c0:f8:24:5c:0b:
7b:59:5f:61:51:cc:b5:21:15:8f:cb:f0:5f:83:00:
2e:8f:65:7b:50:91:46:bf:1f:a7:fe:db:b7:30:73:
ff:07:6b:b5:eb:ff:c4:d3:ee:41:94:9b:ac:1d:cb:
00:e8:d1:19:44:d4:00:69:32:8e:52:8b:ab:31:52:
a7:6e:f4:7a:f2:26:aa:4a:b1:0e:c2:a1:05:05:7c:
c6:37:dc:09:81:e3:b4:fa:91:34:e2:55:12:43:43:
00:97:af:84:f9:fc:d9:92:b4:5d:f4:52:b1:1d:e0:
f7:a5:5d:a4:7b:44:ee:1b:74:6e:77:08:6e:9b:3f:
2f:58:2f:b8:e7:ca:df:2c:c0:ad:ce:90:e4:c6:ad:
1f:b6:4b:f8:3e:cc:30:fa:0e:58:24:fb:ad:e3:39:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:80:7C:AD:2B:0C:FE:87:BC:30:2F:BB:AC:82:38:D7:07:A3:50
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/q9KAfK0rDP6HvDAvu6yCONcHo1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080::/48
2a05:9080:4::/48
Signature Algorithm: sha256WithRSAEncryption
96:f1:00:95:fb:48:58:20:aa:31:4d:93:f5:3f:61:7b:f7:a4:
e2:46:24:d7:34:f7:6f:99:67:20:76:f0:0c:60:1d:99:c3:21:
04:67:58:aa:94:04:14:9b:f5:16:82:d3:f0:e5:6d:5a:20:88:
96:cb:ce:4c:74:4c:95:49:0b:e7:c4:1f:49:17:28:b6:5b:f0:
56:8f:b3:e6:71:6b:6f:3e:e7:01:b2:f8:d9:86:59:2f:7d:13:
73:0d:bc:8e:19:a5:bf:ff:b4:25:fc:34:c1:bf:f2:83:a7:61:
6a:0f:74:99:dd:0d:38:03:a8:53:c7:5e:26:7b:aa:a4:53:b2:
31:33:d3:f1:28:d3:54:ce:7a:c8:af:f5:70:43:9c:2c:c2:40:
15:2d:8d:f6:d6:90:74:52:25:e6:c9:6c:3a:e0:35:e4:42:92:
0b:fb:d7:f7:16:81:f8:7e:03:19:e3:c9:66:15:ba:e4:b4:89:
a0:ce:68:d2:a3:ba:de:56:56:89:60:d6:2c:e7:27:70:5b:e2:
38:b6:44:b2:99:42:7e:a2:a5:05:ae:9a:7c:10:f0:02:04:1f:
3e:42:ce:47:ed:13:b7:c2:9d:cf:ab:6f:70:3d:3c:84:65:6d:
e9:cd:0a:bd:de:25:64:95:65:1b:71:9b:d3:bb:39:61:63:23:
90:e2:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:48 2025 by rpki-client