Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa
File: Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa (raw, json)
Hash identifier: ielywtJAKkxMoIx1w7LZ3LEuLxtsUUXOXr+8Yf+miBs=
Subject key identifier: 3E:FE:3C:70:44:69:1E:06:6B:90:47:7E:A4:0D:9C:C7:99:F4:0F:1E
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01981EF3B83E7527C586FC0B62D7E0CA3E16
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa
Signing time: Fri 18 Jul 2025 19:12:25 +0000
ROA not before: Fri 18 Jul 2025 19:12:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:2985::/32 maxlen: 32
2a09:af82::/32 maxlen: 32
2a09:d702::/32 maxlen: 32
2a09:dd02::/32 maxlen: 32
2a09:e301::/32 maxlen: 32
2a09:ef00::/32 maxlen: 32
2a14:a404::/32 maxlen: 32
2a14:a407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:f3:b8:3e:75:27:c5:86:fc:0b:62:d7:e0:ca:3e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jul 18 19:12:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3efe3c7044691e066b90477ea40d9cc799f40f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:71:99:aa:94:c2:a5:85:24:70:12:ee:42:
93:51:08:3f:8b:f5:fd:9b:3a:3e:53:f9:00:3e:46:
e2:b3:6d:53:bb:7a:7a:be:35:89:e6:ed:a2:d1:91:
7b:1c:7c:0d:2d:cc:d3:45:4e:56:4c:fc:20:97:5a:
35:00:65:cb:45:10:15:7e:f2:75:77:dd:8b:f0:05:
fb:ca:28:c9:6d:e0:5a:e0:9a:f6:9e:21:ea:03:55:
a2:af:c6:bc:4f:5c:73:89:75:16:49:bb:21:31:6c:
18:d6:ea:b6:84:fe:c2:1b:0e:d5:dd:3c:65:d1:ad:
76:65:61:f9:6d:db:5d:86:c3:a7:70:4d:b5:1d:05:
0e:76:89:fc:b2:f6:79:0d:b8:36:93:82:9d:aa:af:
28:6d:5b:1b:e7:d1:02:f0:a1:f5:66:3a:41:37:25:
7c:60:c6:b4:9b:13:bb:3b:95:53:be:a5:9f:68:48:
4e:f7:58:ca:08:4e:51:4e:33:3d:c3:db:69:17:47:
e3:d7:24:9e:6d:3e:0a:7b:53:36:59:db:b5:5f:28:
fc:81:17:5e:7d:1c:d2:a2:99:3c:75:27:5b:f1:a2:
f7:8d:16:b8:9f:f0:a3:e6:23:69:64:53:71:9e:0d:
35:04:e2:aa:59:a6:32:03:bd:4a:1e:7d:bb:88:2e:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:3C:70:44:69:1E:06:6B:90:47:7E:A4:0D:9C:C7:99:F4:0F:1E
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/Pv48cERpHgZrkEd-pA2cx5n0Dx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2985::/32
2a09:af82::/32
2a09:d702::/32
2a09:dd02::/32
2a09:e301::/32
2a09:ef00::/32
2a14:a404::/32
2a14:a407::/32
Signature Algorithm: sha256WithRSAEncryption
be:20:96:a9:33:d4:21:bc:19:82:ae:ff:7b:03:fa:54:3c:8b:
13:6a:75:5d:38:64:c0:7b:de:c3:d8:83:1c:6e:e4:c1:26:03:
83:3d:9e:f3:ba:9c:2e:d5:89:60:4b:99:51:ab:c9:e8:fe:39:
62:99:ec:3a:4e:9b:dc:96:ce:33:fa:22:12:e6:bc:99:c8:a9:
b1:d0:2f:d2:44:8c:17:76:11:0f:af:78:fc:c8:6c:d0:c8:9b:
65:72:85:9b:64:d9:3c:58:b1:58:38:11:a0:f3:a7:02:97:a7:
4a:05:6a:ae:e4:c3:d8:5f:3a:be:2a:eb:a3:b7:1d:87:4e:ec:
0d:e7:ee:d5:74:1b:73:29:4d:a8:0b:ce:f2:c8:29:1e:ff:70:
d0:54:8a:2a:3a:54:81:fe:70:90:7f:df:bf:8c:29:57:f7:e4:
14:ca:21:43:a8:79:05:75:ab:4a:7f:50:75:d7:53:62:a0:fb:
ac:6a:6b:db:90:b3:7a:00:55:1b:7d:7c:31:0f:e4:7d:16:45:
c7:32:89:fe:46:c0:81:51:fa:24:be:15:06:fd:5b:38:5e:be:
77:9a:3c:0e:f4:3f:82:a3:6f:31:a2:0c:2c:45:95:9a:46:c0:
53:42:c4:52:56:72:2d:b0:7a:e3:5d:94:70:85:e1:a4:e2:b8:
ca:48:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:12:05 2025 by rpki-client