Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SrGEFkRv-kGu56ttKL_qFdN3BDI.roa
File: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (raw, json)
Hash identifier: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=
Subject key identifier: 4A:B1:84:16:44:6F:FA:41:AE:E7:AB:6D:28:BF:EA:15:D3:77:04:32
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01982DD6263B379896850785DD111A1AFD5E
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SrGEFkRv-kGu56ttKL_qFdN3BDI.roa
Signing time: Mon 21 Jul 2025 16:34:25 +0000
ROA not before: Mon 21 Jul 2025 16:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 2a10:9681::/32 maxlen: 32
2a10:9682::/32 maxlen: 32
2a10:9683::/32 maxlen: 32
2a10:9687::/32 maxlen: 32
2a11:c880::/29 maxlen: 29
2a12:6c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:d6:26:3b:37:98:96:85:07:85:dd:11:1a:1a:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jul 21 16:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab18416446ffa41aee7ab6d28bfea15d3770432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:ce:22:40:80:b8:ce:2d:a7:ef:70:83:b8:
75:37:38:35:6c:92:23:fc:e1:b9:16:05:ba:56:e8:
d0:ba:59:4b:ca:17:73:1e:e4:10:8b:86:8a:6d:70:
0f:10:84:da:ce:fb:aa:19:86:27:58:95:f0:03:84:
84:73:9a:f5:c6:ab:27:2c:df:7f:19:12:92:1b:85:
c1:2b:62:15:28:0a:d2:e0:da:05:76:94:51:40:09:
ff:93:a5:ed:6e:87:c4:da:de:7b:f5:af:75:57:1a:
9a:57:06:29:83:a0:8b:28:6f:fb:ac:e7:bb:96:a0:
f5:93:b8:c1:24:7f:5d:5a:12:ba:19:7f:bc:ed:5e:
74:74:70:95:25:4e:d6:21:02:72:6b:06:37:51:02:
b6:f8:b0:06:e1:63:f8:fc:e1:28:b8:e2:2d:6e:94:
19:0d:3c:ec:5c:aa:a9:41:a8:ec:c2:1b:f3:19:89:
77:cd:47:fa:1d:81:9f:76:8c:9a:db:59:f1:6a:19:
0d:cc:07:14:c4:51:64:cb:1e:e9:a8:88:cd:dd:50:
27:10:34:a0:b6:48:0e:81:ee:3f:85:03:cf:03:b1:
26:0f:4f:df:68:c1:5d:3f:42:05:f3:39:c7:ff:8d:
0e:f3:c4:17:77:6e:c6:55:03:6f:3a:36:bb:7e:b9:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:84:16:44:6F:FA:41:AE:E7:AB:6D:28:BF:EA:15:D3:77:04:32
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SrGEFkRv-kGu56ttKL_qFdN3BDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9681::-2a10:9683:ffff:ffff:ffff:ffff:ffff:ffff
2a10:9687::/32
2a11:c880::/29
2a12:6c40::/32
Signature Algorithm: sha256WithRSAEncryption
20:7c:f0:5e:68:1b:86:7d:f9:c1:38:12:99:9b:18:00:95:5c:
8e:9f:00:29:c9:f5:78:5d:01:66:17:9c:09:fc:8b:f0:97:cb:
c2:65:ce:34:c8:61:74:f8:78:c1:27:c7:35:13:5a:ba:76:bf:
39:32:b0:a1:57:6d:cb:42:5a:a0:29:ed:1c:d2:ee:f2:2d:88:
6d:e2:6f:9d:dc:d2:af:f4:8a:30:42:f1:96:f6:16:2a:b3:95:
1f:74:59:4b:69:ab:23:5b:f9:a7:1d:e3:86:c8:58:e5:1b:9b:
ac:1c:50:d0:1d:4c:87:e6:6c:d1:29:fc:70:e6:24:49:89:ed:
34:23:19:c1:ef:31:31:4f:0d:f9:e8:c7:8e:d4:bf:08:fc:e9:
74:47:f5:fe:ab:8f:9b:06:68:d6:74:c4:1c:e6:cd:e9:19:6f:
bd:0f:84:55:00:a0:41:98:57:3e:ad:40:ed:f9:e7:27:c4:08:
67:88:7e:07:3c:08:9b:ff:e3:66:f6:dd:8c:06:02:f4:bf:c5:
0b:5a:bf:13:4d:d6:8d:c8:c2:ca:58:94:52:8b:8b:7e:48:53:
95:0b:4e:e6:49:e9:ec:ea:60:30:8f:6b:c2:62:20:21:e8:ec:
3d:c3:e7:68:49:d3:56:66:4d:7e:3a:f9:16:a8:6e:ae:7e:52:
8f:08:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:11 2025 by rpki-client