Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/6vvf0gyYCc5zR3uujS0xGb6b3n8.roa
File: 6vvf0gyYCc5zR3uujS0xGb6b3n8.roa (raw, json)
Hash identifier: zngkJv70qUXqPNjBBuw0RYlE38iva+rkrXYPwV7JMdk=
Subject key identifier: EA:FB:DF:D2:0C:98:09:CE:73:47:7B:AE:8D:2D:31:19:BE:9B:DE:7F
Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial: 019864C85D045FC4DFB9E0321722B276205A
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/6vvf0gyYCc5zR3uujS0xGb6b3n8.roa
Signing time: Fri 01 Aug 2025 08:38:29 +0000
ROA not before: Fri 01 Aug 2025 08:38:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134835
IP address blocks: 2a09:a702:1c::/48 maxlen: 48
2a09:a702:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:c8:5d:04:5f:c4:df:b9:e0:32:17:22:b2:76:20:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Validity
Not Before: Aug 1 08:38:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eafbdfd20c9809ce73477bae8d2d3119be9bde7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:23:d5:47:6d:f5:a4:67:cd:a6:46:c4:d4:
ee:48:7f:6f:54:cc:ea:c9:0e:d3:59:de:45:d4:8f:
1b:1f:fd:8b:f9:0d:55:28:de:67:0f:31:85:8a:3a:
fb:dd:bf:af:09:53:26:f6:9e:53:0a:ec:04:92:a7:
82:fa:5e:2f:4f:8b:31:1c:74:56:f9:2d:04:39:93:
c7:5c:07:1c:88:95:4b:52:00:5b:9f:0a:7c:2a:81:
72:51:73:5d:79:04:8f:1a:13:a2:ec:c9:d6:be:18:
f5:c9:f9:0c:ba:83:55:e6:6a:3c:d1:b7:3c:d4:15:
a9:8c:e9:a0:41:cd:39:c4:03:bb:c5:ff:14:83:bf:
85:b9:68:5c:62:9e:d8:ec:56:38:63:fb:0d:72:93:
46:24:c2:de:a5:31:a8:3b:b4:d4:9c:0d:b5:b2:da:
9a:97:0f:b5:aa:62:8d:d7:06:c5:a3:08:77:75:00:
fc:7d:52:48:96:14:6e:1a:ef:f5:07:4d:9f:f0:fa:
3f:5f:87:b5:8e:f4:b4:e0:b0:9c:e2:34:3d:94:1d:
2f:f2:c3:19:91:6d:e7:9b:a4:18:e7:4e:51:52:73:
45:e1:b4:b6:1f:8a:df:18:67:43:3d:94:4f:1d:ae:
92:e0:ac:1a:32:c7:e0:94:7c:92:5a:80:d0:ef:e1:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:DF:D2:0C:98:09:CE:73:47:7B:AE:8D:2D:31:19:BE:9B:DE:7F
X509v3 Authority Key Identifier:
keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/6vvf0gyYCc5zR3uujS0xGb6b3n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a702:1c::/47
Signature Algorithm: sha256WithRSAEncryption
07:e2:45:17:73:a9:56:d8:d0:b2:9c:33:3a:76:f8:4a:69:83:
53:a6:5d:59:81:7e:08:5b:88:00:a3:ff:e5:da:69:89:1d:83:
65:bc:da:bc:d6:6e:f5:3c:72:90:7e:a0:23:34:fe:53:be:f7:
f5:84:d8:a5:e0:68:60:88:37:8a:6c:6b:24:80:36:37:20:49:
69:c3:a9:e9:fc:66:f2:1f:74:b9:36:51:ae:15:ef:c4:2b:df:
16:94:1d:a1:2e:19:4e:3c:84:da:b5:78:3c:72:10:46:a0:b8:
a7:63:15:52:fc:31:16:87:bb:f9:9f:85:2a:e3:0d:e5:74:0d:
63:be:87:64:cb:a8:5b:b3:14:09:73:9d:9a:14:b6:e8:2a:9a:
f1:59:02:a4:63:34:35:13:86:eb:16:fe:c2:b4:be:7e:60:6c:
f7:89:50:2a:41:f3:90:c0:a3:83:62:5f:82:c3:87:62:b7:ce:
5b:2a:f0:39:c6:b4:9e:9a:42:2f:24:18:ee:b9:3c:88:b8:1f:
4a:b5:e0:fb:b0:ff:78:67:d5:05:94:9d:bf:60:24:7f:eb:52:
0f:6e:f2:d1:ac:a5:b9:b0:99:8d:47:7a:85:8a:88:7f:42:fd:
f9:3f:61:81:92:8d:42:f7:6d:91:6b:dc:40:9b:86:63:81:e9:
ec:88:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:43 2025 by rpki-client