Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/r8tw2lqmRxIqDqSaZV85AKO7YAw.roa
File: r8tw2lqmRxIqDqSaZV85AKO7YAw.roa (raw, json)
Hash identifier: skNsm+5I5NpCsA3HZFqqTKD9Ia9FTphSikNr/ECAuOw=
Subject key identifier: AF:CB:70:DA:5A:A6:47:12:2A:0E:A4:9A:65:5F:39:00:A3:BB:60:0C
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01982D7170D9AE2EF65A505065781D929C10
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/r8tw2lqmRxIqDqSaZV85AKO7YAw.roa
Signing time: Mon 21 Jul 2025 14:44:25 +0000
ROA not before: Mon 21 Jul 2025 14:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212577
IP address blocks: 2a0e:8f02:f02a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:71:70:d9:ae:2e:f6:5a:50:50:65:78:1d:92:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jul 21 14:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afcb70da5aa647122a0ea49a655f3900a3bb600c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:a8:12:2e:4e:9f:c4:c9:41:bd:9c:42:49:
72:cc:5c:b4:39:4b:ae:58:69:e8:2e:67:0c:8f:af:
3c:36:0e:5c:8c:e1:b3:01:4b:64:a5:cf:7b:05:37:
ec:ec:39:09:4e:a5:60:91:80:82:58:00:08:ea:ea:
cb:00:7b:60:0d:16:35:bb:44:44:f3:d7:fa:a7:a3:
c3:2d:cd:a1:6c:f9:ed:b0:2e:c8:12:0d:8f:e5:35:
11:66:8a:b6:f1:08:42:c3:e2:3e:3a:c4:bd:05:7f:
6c:0e:fc:f3:48:99:1a:fc:22:d8:6b:11:97:54:a3:
ed:52:22:ac:97:c1:5d:b6:fc:9a:e9:37:ae:ad:6d:
0a:ef:2e:88:0d:cd:a7:84:6e:00:a0:e8:b2:da:4a:
61:18:70:2a:c0:35:2f:b0:ad:51:e3:20:85:9e:0a:
ed:71:4b:68:1e:0e:a6:d5:64:7d:f7:35:b9:ee:dd:
53:e3:35:13:3c:99:0c:59:91:7b:e2:8e:c1:b7:67:
45:61:b7:59:9e:a6:af:55:a9:84:fc:96:d2:74:27:
d3:0a:70:84:26:a5:8a:d7:13:63:ba:e3:27:fa:19:
ed:cf:98:a5:42:fa:3f:15:66:af:13:1e:9d:40:51:
95:28:21:e5:94:ba:10:53:42:1f:cc:bd:1b:47:5c:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:70:DA:5A:A6:47:12:2A:0E:A4:9A:65:5F:39:00:A3:BB:60:0C
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/r8tw2lqmRxIqDqSaZV85AKO7YAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02a::/48
Signature Algorithm: sha256WithRSAEncryption
7b:7d:c1:ed:d0:ce:01:81:56:5b:77:f4:8e:40:c8:95:c6:b5:
dc:26:38:56:90:bf:0d:c0:15:2e:13:3e:53:4f:0c:81:a2:fb:
99:fa:18:fc:51:fc:7e:48:32:a7:c8:12:1f:74:fc:5f:aa:4c:
86:85:c2:ac:2a:d3:b8:93:17:e4:76:26:68:fc:15:84:6f:01:
3b:26:c4:d8:e7:29:72:f5:83:ea:4b:37:3e:46:f8:d4:2c:e0:
b8:82:eb:73:19:64:37:71:3a:df:d8:06:d4:b7:4d:eb:c2:68:
87:d7:3d:24:b7:b1:ce:96:83:3f:50:71:96:55:c1:8a:29:4d:
ea:50:8d:80:5f:41:cc:25:68:be:c4:c9:3f:78:98:30:74:18:
e4:72:69:4e:7e:a3:05:b2:7c:e8:e8:eb:d0:1d:0d:ad:4c:6d:
ef:88:4d:ec:bb:03:96:ab:23:4e:23:01:e8:e5:44:71:68:84:
12:e5:55:2c:ff:e7:cb:8a:46:b8:55:26:45:bd:42:32:0e:1f:
75:6b:75:64:f2:f1:c1:2d:54:38:4d:3c:e0:22:54:e7:c4:47:
04:32:a5:df:8d:90:7a:c6:15:71:c2:62:68:98:ad:bc:f4:f3:
9c:c6:53:df:95:39:67:d5:c7:d5:b0:13:f9:a4:9e:9e:03:aa:
4b:d5:f7:59
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZgtcXDZri72WlBQZXgdkpwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwNzIxMTQ0NDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmNiNzBkYTVhYTY0NzEyMmEwZWE0OWE2NTVmMzkwMGEzYmI2MDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuoEi5On8TJQb2cQklyzFy0OUuu
WGnoLmcMj688Ng5cjOGzAUtkpc97BTfs7DkJTqVgkYCCWAAI6urLAHtgDRY1u0RE
89f6p6PDLc2hbPntsC7IEg2P5TURZoq28QhCw+I+OsS9BX9sDvzzSJka/CLYaxGX
VKPtUiKsl8Fdtvya6TeurW0K7y6IDc2nhG4AoOiy2kphGHAqwDUvsK1R4yCFngrt
cUtoHg6m1WR99zW57t1T4zUTPJkMWZF74o7Bt2dFYbdZnqavVamE/JbSdCfTCnCE
JqWK1xNjuuMn+hntz5ilQvo/FWavEx6dQFGVKCHllLoQU0IfzL0bR1y92wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK/LcNpapkcSKg6kmmVfOQCju2AMMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvcjh0dzJscW1SeElxRHFTYVpWODVBS083WUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvAq
MA0GCSqGSIb3DQEBCwUAA4IBAQB7fcHt0M4BgVZbd/SOQMiVxrXcJjhWkL8NwBUu
Ez5TTwyBovuZ+hj8Ufx+SDKnyBIfdPxfqkyGhcKsKtO4kxfkdiZo/BWEbwE7JsTY
5yly9YPqSzc+RvjULOC4gutzGWQ3cTrf2AbUt03rwmiH1z0kt7HOloM/UHGWVcGK
KU3qUI2AX0HMJWi+xMk/eJgwdBjkcmlOfqMFsnzo6OvQHQ2tTG3viE3suwOWqyNO
IwHo5URxaIQS5VUs/+fLika4VSZFvUIyDh91a3Vk8vHBLVQ4TTzgIlTnxEcEMqXf
jZB6xhVxwmJomK289POcxlPflTln1cfVsBP5pJ6eA6pL1fdZ
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:24:50 2025 by rpki-client