Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBib9KTApfDl5686MoPjZXg_Pvc.roa
File: yBib9KTApfDl5686MoPjZXg_Pvc.roa (raw, json)
Hash identifier: jT2Qa82amPGlsUd8Vxhcj6dzKjOjSYzy0L+9qI9LRc4=
Subject key identifier: C8:18:9B:F4:A4:C0:A5:F0:E5:E7:AF:3A:32:83:E3:65:78:3F:3E:F7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01981835A74794EDB8461CD8B26F2F668263
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBib9KTApfDl5686MoPjZXg_Pvc.roa
Signing time: Thu 17 Jul 2025 11:47:06 +0000
ROA not before: Thu 17 Jul 2025 11:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209883
IP address blocks: 2a0e:f8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:35:a7:47:94:ed:b8:46:1c:d8:b2:6f:2f:66:82:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 11:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8189bf4a4c0a5f0e5e7af3a3283e365783f3ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:73:0f:70:76:97:92:7c:78:a4:1d:6a:09:
6e:ea:eb:03:07:15:33:e3:6b:5a:d5:a7:17:42:60:
ed:64:8a:0d:a9:9f:82:b1:2b:21:61:d7:79:fa:35:
52:ae:7e:46:9d:7e:e6:bf:53:dd:9f:53:11:d9:cc:
05:9a:46:25:b2:7f:0d:cc:d1:45:b0:18:c7:eb:1a:
c4:36:6d:27:5e:c7:66:c1:85:4f:6f:1e:21:4e:51:
6d:16:ae:c8:85:6f:dc:0c:9b:38:c8:dc:52:07:ec:
40:21:69:3b:1e:c1:bc:57:11:a1:31:ba:34:bc:93:
8c:82:cc:94:40:cd:86:94:bf:35:4d:f9:f5:b5:71:
cb:22:c9:af:9e:07:d2:be:1e:be:62:22:d5:eb:16:
b9:ed:d8:14:35:06:73:7d:78:d7:83:01:a4:55:c8:
52:00:78:b0:91:e5:f9:bf:25:fe:9c:6a:d9:c9:9d:
1d:61:c9:c4:77:e1:b5:ca:f8:55:13:65:ba:4a:ff:
4e:ec:a0:c5:33:2a:24:82:b3:e7:e2:98:63:37:73:
d8:87:2d:56:73:f0:98:af:38:42:8d:82:d5:4f:4f:
b1:e5:9d:0b:8e:54:8d:3c:4e:53:9b:08:2a:60:d9:
78:04:34:bb:08:b3:58:a9:21:38:e0:f5:7c:57:a9:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:18:9B:F4:A4:C0:A5:F0:E5:E7:AF:3A:32:83:E3:65:78:3F:3E:F7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yBib9KTApfDl5686MoPjZXg_Pvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:f6:d4:a0:99:10:53:ea:b3:98:24:7a:37:77:9b:64:86:b7:
83:d1:8e:6d:1c:d0:0b:9e:95:b2:48:93:01:98:b2:a0:77:fb:
4c:f4:2e:dc:1a:f0:df:77:f3:cc:4e:1b:fc:cb:e4:01:67:08:
5c:2b:7d:33:90:e7:21:15:ef:98:5c:7f:c9:90:7d:e7:5f:a0:
dc:03:25:79:cb:3d:c5:e4:e2:92:10:eb:54:3b:0c:39:d9:7a:
53:96:f6:f6:71:e0:cf:34:1e:d7:23:76:44:93:c0:69:90:be:
7c:a9:87:5f:5d:5f:7e:01:d0:d9:8c:db:ef:79:fe:af:04:42:
39:9f:d9:70:21:89:c6:06:74:92:ec:e4:bb:93:61:90:d5:47:
dd:94:62:4e:6c:16:e3:97:f4:17:93:90:16:48:22:82:95:12:
97:d9:8c:e0:9a:e0:98:77:e0:e9:61:51:e4:27:5b:9d:b2:68:
19:bb:03:2a:13:96:70:32:2d:48:a6:bb:ec:46:53:50:8f:0e:
f4:44:dc:84:89:88:58:6d:3f:96:32:ea:65:a2:8e:ae:41:55:
51:95:3b:91:9c:bb:4c:7f:c1:09:3f:0b:fd:fa:a1:9c:f9:e3:
a6:8d:e0:a1:21:d6:77:a5:d7:03:ab:8e:30:7c:f7:72:32:20:
c6:e7:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 22:39:42 2025 by rpki-client