Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xRsccpvpSiiTwttx3dpa06OlRpg.roa
File: xRsccpvpSiiTwttx3dpa06OlRpg.roa (raw, json)
Hash identifier: orBoyMh9VeDFLJFJ4WX7x0O+gFyLVR8gpkTZp4d5t+w=
Subject key identifier: C5:1B:1C:72:9B:E9:4A:28:93:C2:DB:71:DD:DA:5A:D3:A3:A5:46:98
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0197FE3A62A0695BDCAB88039552A9F509C4
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xRsccpvpSiiTwttx3dpa06OlRpg.roa
Signing time: Sat 12 Jul 2025 10:42:08 +0000
ROA not before: Sat 12 Jul 2025 10:42:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207091
IP address blocks: 2a14:67c1:a140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:3a:62:a0:69:5b:dc:ab:88:03:95:52:a9:f5:09:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 12 10:42:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51b1c729be94a2893c2db71ddda5ad3a3a54698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:f5:2f:8b:86:84:66:72:a5:2a:6c:31:4d:
d5:fe:c0:64:c3:f1:96:ff:b2:43:62:d0:20:57:73:
b6:5f:bb:19:27:53:53:f8:c7:44:12:9c:ae:7a:cc:
08:3a:55:24:52:41:2a:e9:49:6b:11:94:5c:40:24:
25:58:c0:cd:7f:59:06:89:06:20:07:a5:91:50:88:
e5:13:ac:da:39:49:06:af:82:79:3f:d9:87:6c:22:
f6:ee:d7:c3:99:27:66:7c:42:f5:92:4a:1a:b8:78:
ac:6d:f9:a6:cd:d8:1c:9c:1b:7a:3e:c7:39:62:c3:
c6:d7:49:4e:2b:4e:77:8b:d2:2d:18:85:ab:9f:54:
30:64:8c:22:79:56:9b:02:d0:35:40:68:10:d0:b9:
6c:38:d1:19:c6:46:b2:bd:84:b1:db:4c:da:8b:68:
b2:73:78:9e:7c:c1:47:d6:74:bf:86:bf:98:33:64:
a8:06:04:02:c0:db:9e:8d:d0:e1:a1:9e:5f:0c:b0:
3b:10:9a:87:ab:40:d2:b3:a4:69:5b:9c:b2:86:d9:
6a:1a:54:78:ec:76:03:d1:16:f5:08:d1:48:85:a0:
42:09:0f:6d:54:3d:4d:30:55:26:98:31:56:0b:7f:
6e:4c:81:dc:94:50:c2:c4:0b:df:73:26:a0:8f:c5:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:1C:72:9B:E9:4A:28:93:C2:DB:71:DD:DA:5A:D3:A3:A5:46:98
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/xRsccpvpSiiTwttx3dpa06OlRpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a140::/44
Signature Algorithm: sha256WithRSAEncryption
84:74:22:ad:9d:2c:c1:87:50:ed:53:f4:20:87:94:6c:03:56:
d9:41:c0:db:a5:36:69:c4:df:4f:08:c4:bb:1a:9d:b9:9a:b9:
cc:d0:da:31:06:a8:62:e2:ad:02:2e:e6:22:04:ae:0a:01:35:
55:f3:31:40:b4:e7:0a:35:d1:e5:05:79:81:c5:1d:6e:a7:4a:
24:55:a7:7c:26:c9:43:b0:cf:cc:65:bd:a3:13:03:bc:42:24:
98:6f:83:9f:88:02:ef:db:a9:c7:2c:47:11:15:d4:25:eb:0b:
03:e8:12:c3:e5:e0:b1:ca:a5:d2:d5:39:24:6d:fb:da:3a:f2:
7e:47:8b:c9:1e:bb:88:ba:68:0a:36:c6:a6:43:f1:ae:91:90:
5a:97:23:ca:dc:84:20:9a:08:d1:f4:65:cd:e0:86:cb:44:53:
b5:bc:5a:38:dc:67:38:82:d6:51:45:f9:57:d9:5a:b6:fd:5e:
27:1d:0e:5c:ba:54:31:f7:e1:b4:ec:f6:28:08:af:6e:2a:67:
d7:49:43:21:37:f7:f1:0b:8a:17:06:74:7f:f8:c8:fa:47:24:
91:b8:a1:45:9c:a7:74:fb:82:5e:b7:60:0a:36:9e:b8:0c:88:
b7:af:2c:a4:46:2e:1e:61:61:5b:6e:2a:69:0e:76:b8:10:d8:
dd:44:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:13:19 2025 by rpki-client