Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa
File: 1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa (raw, json)
Hash identifier: SkCOrOVawqubIGJ5nSRzyPM3ZK7PA9iP1A0fEWvNw7w=
Subject key identifier: F9:45:63:ED:A8:3F:77:DA:2B:17:FD:33:57:31:B4:EC:BC:65:E6:64
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0198349DFD589A0E5A3C1141F0D8E2C43420
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa
Signing time: Wed 23 Jul 2025 00:10:25 +0000
ROA not before: Wed 23 Jul 2025 00:10:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 2a13:c7c0:1230::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:9d:fd:58:9a:0e:5a:3c:11:41:f0:d8:e2:c4:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jul 23 00:10:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f94563eda83f77da2b17fd335731b4ecbc65e664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:da:6a:c9:f1:48:c1:bc:60:b6:76:ae:15:
ac:d2:ef:e3:74:3c:f6:ff:f5:69:f7:0d:20:4f:56:
75:46:9a:51:a2:89:8c:a2:15:77:03:8e:14:d4:17:
aa:9d:b7:d9:dc:6d:0a:e5:da:15:69:1d:fb:2b:f7:
4a:dc:d2:46:2d:50:90:21:d6:8d:70:1a:11:1f:f0:
26:8a:69:3d:e6:c4:ee:d5:48:e5:3d:1e:28:94:91:
db:db:a0:37:96:bd:05:cf:4f:21:3c:e0:62:85:a7:
d4:3a:18:0b:46:70:6c:33:c2:f6:68:6c:ed:be:38:
51:01:6f:10:59:29:2e:f8:9e:0e:f8:05:e7:17:17:
87:66:a2:dd:86:20:59:05:d0:52:06:f3:38:51:a0:
17:a8:45:dc:fc:66:90:cc:6c:03:a1:4c:0e:e2:52:
57:77:bb:ac:ba:97:df:da:d0:e7:65:c1:b6:f8:42:
66:a3:8d:f1:03:f1:6d:41:89:51:d3:29:95:4f:97:
2d:67:9f:57:25:f5:f6:c0:22:8d:6c:ee:8b:a1:8e:
97:5a:b3:8d:5c:e8:1d:97:6e:d5:20:0a:5c:30:e9:
ca:7b:1a:41:f7:a9:34:81:ae:02:37:a0:ab:2f:44:
c1:90:af:c9:5a:54:4d:c0:63:9f:77:4f:eb:05:36:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:63:ED:A8:3F:77:DA:2B:17:FD:33:57:31:B4:EC:BC:65:E6:64
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c7c0:1230::/44
Signature Algorithm: sha256WithRSAEncryption
1e:b1:89:8a:b4:07:e3:7f:08:ed:18:56:6a:5e:d0:62:b9:4f:
2f:96:5b:ea:6e:63:83:7f:5c:f6:81:09:c9:80:97:13:a0:cc:
71:f7:ff:be:a6:59:7f:c2:6a:3e:5b:9f:c5:b2:67:27:64:14:
2e:05:ad:f1:4f:aa:b8:45:d6:f9:ad:f6:ac:d7:07:09:d7:20:
02:10:7f:eb:96:28:aa:46:8b:5e:b4:bb:99:c8:38:bd:f9:0f:
8b:14:f1:74:d1:2b:0b:c8:4e:8f:7d:8c:4e:77:ba:b4:69:b8:
a3:cb:18:77:4b:49:f8:1b:69:8e:22:6e:89:34:47:c1:4d:b6:
5e:3a:d4:33:d1:7d:8a:04:6e:49:1f:f5:09:0e:6b:94:f4:ce:
66:f2:b9:4b:f5:13:fd:94:cc:9e:b3:e7:b6:81:01:4a:44:eb:
f7:01:1c:87:a7:d8:89:ec:fd:77:a7:d0:64:30:8c:93:01:db:
4f:ed:2f:a2:84:23:62:a7:64:3d:27:fe:9b:43:48:b3:bd:d5:
4a:cb:34:6f:f6:cc:b1:fb:b8:6e:16:d5:86:1b:74:55:61:a4:
26:48:cf:74:b5:47:7d:4a:10:ea:3a:28:d6:52:69:0f:bb:19:
5a:12:db:e9:e3:ab:a6:dc:70:11:94:38:08:a5:49:01:b7:65:
ce:07:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:45:23 2025 by rpki-client