Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Dbjt-eNOQq0vkX588ahhEsSBC10.roa
File: Dbjt-eNOQq0vkX588ahhEsSBC10.roa (raw, json)
Hash identifier: gMBsjhvs9eK+NmifzkCXlPidD/N/xDvVkgL0LPC5+mU=
Subject key identifier: 0D:B8:ED:F9:E3:4E:42:AD:2F:91:7E:7C:F1:A8:61:12:C4:81:0B:5D
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01978834FCD6C8B1A9F1DA15090E5B3C94B1
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Dbjt-eNOQq0vkX588ahhEsSBC10.roa
Signing time: Thu 19 Jun 2025 12:41:03 +0000
ROA not before: Thu 19 Jun 2025 12:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35704
IP address blocks: 2a02:11ff:400::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:34:fc:d6:c8:b1:a9:f1:da:15:09:0e:5b:3c:94:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jun 19 12:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db8edf9e34e42ad2f917e7cf1a86112c4810b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:d7:91:53:32:9e:ec:60:0c:fc:16:7a:9d:
65:18:a0:bd:e5:7c:54:1d:ac:a7:6d:d4:ff:eb:92:
a3:d3:f1:75:69:7d:09:f5:c1:af:3e:31:0f:aa:62:
17:39:82:ea:fa:01:be:a4:f4:75:01:7f:33:77:39:
0b:5a:ad:ae:36:b5:1a:9b:93:8d:9c:ae:f2:96:2c:
0d:f8:70:5f:50:2e:58:bb:9d:2f:2b:4d:08:f2:a8:
2e:b6:ed:7f:76:b4:bb:3c:72:ee:31:b7:1f:70:f1:
41:d8:2b:d0:d6:05:93:86:13:31:3a:07:63:7d:7d:
8a:ff:8b:76:0d:c4:b7:70:1e:bc:3c:db:bd:de:e2:
69:c7:b1:34:85:31:fe:45:a6:c3:8c:64:28:ee:25:
b7:f8:4e:3e:69:7d:95:bc:54:c5:53:43:12:76:46:
9f:9e:3f:4e:2f:37:b7:ef:83:73:7e:2a:c9:cc:af:
ae:8a:54:f7:95:2e:c2:a0:f3:56:3e:88:7a:01:d7:
f2:c5:34:13:03:b6:78:34:ed:0d:d3:31:db:64:51:
37:17:df:00:9f:84:41:ee:73:41:51:31:ef:c3:44:
a6:6a:fc:21:c6:97:89:9a:2f:66:24:8c:d7:52:b7:
48:e6:a8:83:73:9d:1d:77:8c:b4:c2:bc:53:04:82:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:ED:F9:E3:4E:42:AD:2F:91:7E:7C:F1:A8:61:12:C4:81:0B:5D
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Dbjt-eNOQq0vkX588ahhEsSBC10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11ff:400::/46
Signature Algorithm: sha256WithRSAEncryption
2d:e8:7b:b2:2c:4b:2b:9c:0d:2b:98:36:7b:de:df:7c:4b:aa:
40:57:16:34:67:ca:39:d6:86:ba:1e:eb:d3:04:35:07:79:c1:
33:1f:a9:21:df:64:3c:f8:4f:0c:a5:0e:f2:a7:62:c7:de:84:
0b:b7:8c:08:b5:35:be:82:3b:a3:b3:aa:19:7e:a8:c9:f8:b8:
88:f5:9e:43:87:e8:ab:b2:d1:74:98:61:ca:d1:f1:6f:bc:b2:
bb:a7:3d:a6:b9:52:e4:39:67:dd:fc:6b:92:54:ab:14:25:79:
75:d6:df:17:c0:f8:26:73:6e:02:9a:59:33:22:a3:af:d7:aa:
ca:0d:b3:a1:7d:86:96:a0:2e:5a:38:d3:ac:05:75:74:39:f2:
b9:aa:87:e9:3d:9b:a9:78:9e:38:20:f2:16:d0:52:74:6b:cd:
72:cf:90:c3:12:a2:ec:b4:a0:7c:01:81:e3:86:9d:7b:a8:30:
bd:3a:8c:6f:7f:00:4a:c4:af:41:ea:75:d3:5f:87:5a:69:83:
f6:b4:9c:ec:5d:ea:1f:90:45:77:3d:ca:1c:8a:f2:95:09:06:
55:68:6b:37:c1:bc:71:34:b8:44:00:22:29:42:6b:1d:4b:e1:
d8:bc:80:98:d5:96:0c:e4:17:f2:fe:5d:87:78:01:23:31:00:
04:70:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:28:15 2025 by rpki-client