Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MzaDR2ya9GdXWhWNM227LOe84FM.roa
File: MzaDR2ya9GdXWhWNM227LOe84FM.roa (raw, json)
Hash identifier: Avbq8jCmGwjp8l2pKOyb7nL7gZdis1LKVUxjq0ESdxw=
Subject key identifier: 33:36:83:47:6C:9A:F4:67:57:5A:15:8D:33:6D:BB:2C:E7:BC:E0:53
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01982E0D145EC82615D74C92CC8C8E4105C6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MzaDR2ya9GdXWhWNM227LOe84FM.roa
Signing time: Mon 21 Jul 2025 17:34:25 +0000
ROA not before: Mon 21 Jul 2025 17:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:20c0::/29 maxlen: 29
2a12:d180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:0d:14:5e:c8:26:15:d7:4c:92:cc:8c:8e:41:05:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 21 17:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333683476c9af467575a158d336dbb2ce7bce053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:b8:48:5a:70:bf:f1:c5:71:0d:cb:c2:00:
73:6f:d0:b2:d5:cf:4a:0c:f6:ee:c6:88:d0:d2:c6:
ac:5b:80:a9:90:f6:8e:82:51:97:e1:83:b4:1a:b3:
37:73:7a:42:66:5e:21:a1:05:29:8b:9b:58:8c:94:
93:bb:13:0f:ac:9d:6d:14:fe:e4:77:65:0a:24:34:
fa:c0:6e:27:25:37:a8:1b:b2:93:3e:09:b2:f0:e2:
43:eb:41:c9:2c:d9:08:8a:da:1a:20:fa:6d:63:d8:
60:24:91:34:d9:12:12:86:90:27:80:02:08:a9:93:
49:6a:f4:55:14:4e:6a:69:ca:e4:e0:b5:86:ad:40:
6b:e0:a5:be:4f:e4:76:93:9c:b8:9f:df:d4:f4:4c:
48:2e:58:d7:07:60:a2:68:8c:9f:90:98:76:63:5f:
d1:ab:60:2a:d6:27:d4:b4:bd:b2:6e:c3:e5:87:8d:
23:fb:6e:22:6f:be:f4:03:fd:2e:f7:3e:7a:86:5b:
6d:41:49:eb:63:5f:ba:b3:5b:11:44:ac:95:78:97:
9a:89:ea:ce:9d:03:79:47:77:76:64:83:aa:45:1a:
17:f5:80:90:60:32:2e:0a:c7:bd:b6:8c:90:95:18:
39:fb:42:e9:00:66:f3:3a:0f:2e:a1:a8:57:0b:cb:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:83:47:6C:9A:F4:67:57:5A:15:8D:33:6D:BB:2C:E7:BC:E0:53
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/MzaDR2ya9GdXWhWNM227LOe84FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:20c0::/29
2a12:d180::/29
Signature Algorithm: sha256WithRSAEncryption
4d:91:2e:8c:87:3a:62:33:a1:8d:ca:07:4c:ee:ea:8b:81:18:
0f:48:0b:37:e5:e5:19:36:db:f8:41:f9:00:e2:e0:4b:28:5d:
ba:76:15:97:63:13:d9:5c:29:40:0d:7f:24:1e:ba:0c:bc:5d:
34:f5:20:5b:88:5d:18:13:27:0f:cc:2f:9a:fe:b2:2e:78:8a:
a1:d6:3a:5a:69:89:16:d9:5c:e4:92:75:28:44:4a:94:50:ea:
7b:90:48:f8:d9:ca:74:ef:4b:9a:60:a9:db:1c:f4:67:73:c9:
2e:ee:cb:b4:cf:45:53:61:1d:63:f9:f6:a8:57:07:60:74:5f:
4f:6e:1b:51:04:26:8b:fb:0a:ef:d5:50:83:cf:c6:6c:67:c4:
b2:13:d0:05:3b:a1:d0:93:b7:5d:dd:fd:c8:e7:6a:e9:23:d8:
e3:c0:26:89:45:96:d6:8b:07:e7:7f:d3:8c:ab:a2:9c:c3:eb:
80:ca:3b:71:5e:c1:ef:fc:44:e8:1c:cf:d1:4a:5d:cc:32:5e:
aa:96:33:eb:2f:48:cf:db:af:9c:cb:be:fa:72:2d:75:f4:4a:
19:e6:82:aa:11:10:bf:cd:6b:54:f3:d2:6f:f5:55:30:e3:3e:
5d:b0:88:e3:bc:b2:4a:ed:3f:27:49:21:c9:d6:d3:f0:2f:72:
1d:cd:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:36:33 2025 by rpki-client