Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NcuYckFsbhGXR63QxvJVssgBjvM.roa
File: NcuYckFsbhGXR63QxvJVssgBjvM.roa (raw, json)
Hash identifier: 2CP3G27IDQxqbn6OfzwNR2DL3orsMq8GV2TOUh3pB4o=
Subject key identifier: 35:CB:98:72:41:6C:6E:11:97:47:AD:D0:C6:F2:55:B2:C8:01:8E:F3
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019842FB591D96675FBEF2F311B132795583
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NcuYckFsbhGXR63QxvJVssgBjvM.roa
Signing time: Fri 25 Jul 2025 19:07:05 +0000
ROA not before: Fri 25 Jul 2025 19:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a06:4382::/32 maxlen: 32
2a0e:7f06::/32 maxlen: 32
2a0f:1803::/32 maxlen: 32
2a0f:1805::/32 maxlen: 32
2a0f:9d02::/32 maxlen: 32
2a0f:9d06::/32 maxlen: 32
2a11:3c43::/32 maxlen: 32
2a11:6bc3::/32 maxlen: 32
2a12:2fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:fb:59:1d:96:67:5f:be:f2:f3:11:b1:32:79:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 25 19:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35cb9872416c6e119747add0c6f255b2c8018ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:e6:e0:10:43:68:3b:5f:f3:72:0d:df:d9:
78:ea:5d:3e:d4:f8:94:b3:72:95:e2:06:bc:05:3e:
19:91:0c:e4:f3:99:fc:b8:bd:99:31:5b:7b:99:9f:
05:a0:44:57:67:82:e3:c7:ed:6c:7f:a6:f2:68:00:
f7:10:41:6f:d4:02:1f:d3:2b:85:40:07:1b:a9:c0:
39:09:04:41:7f:95:75:81:e4:6b:81:b4:ee:c8:05:
1b:54:c2:5f:3a:84:dc:8a:f1:97:c6:86:4c:70:e0:
d8:8e:ac:e7:e9:59:08:23:e5:55:70:1c:ff:51:d4:
ee:5b:27:23:d7:d4:f1:de:db:a3:c2:8c:a4:92:e0:
56:17:d7:d1:19:d3:a8:1e:96:6f:42:11:b9:21:4c:
c5:66:fe:a2:d2:30:2b:52:bd:9e:67:92:46:9b:d6:
2a:0c:50:9e:45:7e:c9:9a:9f:48:e1:eb:29:b5:11:
50:2a:3d:f7:e7:a2:92:09:7b:7b:7f:02:f1:cd:f3:
cd:8f:50:ac:48:81:b7:13:4b:ff:09:a8:a9:f6:ac:
36:a9:a7:6d:a2:93:ff:4d:ec:7d:e7:c4:1e:5b:c5:
9a:b7:bb:97:ee:e3:37:51:7b:0a:8b:ec:78:97:c5:
83:e7:38:90:cf:45:3b:cd:bf:24:e2:26:a9:74:ca:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:98:72:41:6C:6E:11:97:47:AD:D0:C6:F2:55:B2:C8:01:8E:F3
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/NcuYckFsbhGXR63QxvJVssgBjvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4382::/32
2a0e:7f06::/32
2a0f:1803::/32
2a0f:1805::/32
2a0f:9d02::/32
2a0f:9d06::/32
2a11:3c43::/32
2a11:6bc3::/32
2a12:2fc2::/32
Signature Algorithm: sha256WithRSAEncryption
82:83:51:38:74:f2:bd:69:ce:5c:e3:d7:0e:c2:77:e5:57:80:
02:a3:86:07:eb:17:b5:99:05:6e:ce:91:89:7a:ff:bf:6e:3f:
1e:14:c8:76:c4:74:40:ba:ea:b2:e1:c2:3f:d8:e5:17:7f:30:
c7:33:65:68:ea:b2:11:37:1a:f5:c1:35:20:ec:26:0c:16:79:
c8:e7:e0:5b:60:d1:4d:c5:25:79:9d:9c:9d:96:30:75:fb:9d:
55:8e:81:87:55:61:49:97:ae:4f:27:54:e1:05:4d:32:10:d7:
46:26:dc:73:b5:6f:6b:ce:65:9b:ce:7c:f3:ca:57:d2:13:d7:
27:8b:84:79:77:03:82:1c:15:8e:1b:a5:9f:8a:70:7e:16:a4:
19:14:65:c4:ed:95:d9:ff:0d:5c:8a:8d:b0:4f:93:aa:95:e3:
b0:a3:82:46:1f:b0:63:85:cc:09:34:7c:9a:7e:bd:9e:86:88:
b6:47:73:ae:e4:87:8f:e9:78:2e:9d:e2:fb:45:4d:3b:78:42:
b5:32:9a:2c:0a:37:9f:7c:46:28:4f:e4:61:b8:50:df:7d:21:
bd:bb:fa:38:c1:0d:c6:00:67:74:83:6d:7a:d0:47:bf:06:38:
99:eb:a6:5f:a8:b9:4a:d9:1c:6e:64:89:55:96:c5:4f:9f:9c:
db:75:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:21:44 2025 by rpki-client