Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/RG7fXecCgltP9RGkiJ-aVXS-wsM.roa
File: RG7fXecCgltP9RGkiJ-aVXS-wsM.roa (raw, json)
Hash identifier: qs5jUi+jVQdO/5VzCetY5ouvlERqA5awKhxjDrx/XnU=
Subject key identifier: 44:6E:DF:5D:E7:02:82:5B:4F:F5:11:A4:88:9F:9A:55:74:BE:C2:C3
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019807A14F71332E64CAE68BACF1DC45F481
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/RG7fXecCgltP9RGkiJ-aVXS-wsM.roa
Signing time: Mon 14 Jul 2025 06:31:08 +0000
ROA not before: Mon 14 Jul 2025 06:31:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6848
IP address blocks: 2a03:1e84:9bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:a1:4f:71:33:2e:64:ca:e6:8b:ac:f1:dc:45:f4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jul 14 06:31:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=446edf5de702825b4ff511a4889f9a5574bec2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:56:03:7f:3d:a4:b0:ac:ab:65:3e:ab:47:
8f:ce:a4:10:1c:e9:de:e8:f6:d1:b9:2e:a4:1b:df:
39:61:32:78:7d:d3:10:b5:5e:c0:f3:02:07:a0:8b:
38:4f:9a:e3:39:4b:ae:07:23:bd:0e:ac:05:3a:19:
49:5b:57:b7:c7:b3:02:74:8c:a5:f0:fb:07:8c:c0:
3d:ff:26:f1:8c:a2:5e:e6:64:1e:17:b7:02:67:d4:
7c:02:92:39:4e:5a:1d:a0:0f:54:27:bc:d5:56:62:
88:3a:87:46:b4:31:08:57:db:64:ef:07:59:28:aa:
6f:4e:ad:55:08:0a:20:06:83:cb:c5:dd:d1:f6:d7:
29:d6:13:2d:96:9c:bd:5d:c5:8f:bf:66:bb:80:e4:
3f:03:e7:b2:18:f1:51:9a:31:c0:47:6c:db:d8:fc:
6c:a6:b0:69:2a:d9:56:31:4e:e9:1f:ff:5e:71:c3:
55:42:86:61:29:2d:8b:83:6d:83:98:0c:f1:d7:f0:
a1:7c:62:bd:81:6a:e5:73:8d:20:87:1e:72:25:e8:
02:88:45:71:e1:28:a2:00:f2:70:f9:49:40:a2:bc:
76:6e:ab:ec:06:13:c7:ed:8d:d3:9d:1e:13:e5:c6:
b7:6c:28:8e:20:57:4a:fc:31:28:a0:6b:e4:ca:60:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:DF:5D:E7:02:82:5B:4F:F5:11:A4:88:9F:9A:55:74:BE:C2:C3
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/RG7fXecCgltP9RGkiJ-aVXS-wsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e84:9bf::/48
Signature Algorithm: sha256WithRSAEncryption
b5:d1:7c:fd:02:21:a5:bc:64:01:a9:81:cd:1f:e1:29:17:71:
d3:8e:2c:c6:32:15:9e:5d:e0:a6:4e:ff:e9:54:41:1e:cd:8e:
2d:a9:02:9e:5d:69:d1:f3:30:c7:ea:1f:8c:d4:4c:e8:d4:94:
fb:c5:c8:67:4d:00:94:50:1f:d5:dc:92:97:12:a0:43:01:26:
67:6f:c1:1e:e3:5f:ee:fd:5f:c2:23:49:05:63:12:64:35:c6:
07:b3:2a:09:8d:d8:ce:ef:46:27:2b:80:fa:6a:9a:30:90:1a:
20:e2:a8:31:82:89:5c:7d:10:5d:3a:6c:b9:11:ba:50:37:66:
b9:57:11:1a:68:09:5b:52:25:43:26:ec:f7:ac:f7:ec:d9:dc:
24:d1:43:37:52:40:47:da:c4:95:c1:8d:9d:03:5b:16:da:d0:
41:7a:08:6a:dc:d6:da:df:73:33:5e:32:14:4a:26:d8:b9:3d:
eb:05:42:4b:84:f8:17:5f:8d:6f:97:a0:4e:4b:f8:1b:b1:4c:
66:45:81:3c:e2:3e:ca:69:5a:e1:b0:cb:8e:df:29:ee:08:fa:
51:b5:aa:72:89:67:03:7a:90:4a:d2:7c:3f:d7:13:52:82:3f:
fa:f5:5c:3d:9e:b0:d3:a9:63:c6:1a:ae:4e:5e:ea:8b:d1:9b:
23:68:b0:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZgHoU9xMy5kyuaLrPHcRfSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5
MmFjOTIwHhcNMjUwNzE0MDYzMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDZlZGY1ZGU3MDI4MjViNGZmNTExYTQ4ODlmOWE1NTc0YmVjMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvdWA389pLCsq2U+q0ePzqQQHOne
6PbRuS6kG985YTJ4fdMQtV7A8wIHoIs4T5rjOUuuByO9DqwFOhlJW1e3x7MCdIyl
8PsHjMA9/ybxjKJe5mQeF7cCZ9R8ApI5TlodoA9UJ7zVVmKIOodGtDEIV9tk7wdZ
KKpvTq1VCAogBoPLxd3R9tcp1hMtlpy9XcWPv2a7gOQ/A+eyGPFRmjHAR2zb2Pxs
prBpKtlWMU7pH/9eccNVQoZhKS2Lg22DmAzx1/ChfGK9gWrlc40ghx5yJegCiEVx
4SiiAPJw+UlAorx2bqvsBhPH7Y3TnR4T5ca3bCiOIFdK/DEooGvkymB/XQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFERu313nAoJbT/URpIifmlV0vsLDMB8GA1UdIwQY
MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt
NTdlOTBjNTZhMGUyLzEvUkc3ZlhlY0NnbHRQOVJHa2lKLWFWWFMtd3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy
LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMehAm/
MA0GCSqGSIb3DQEBCwUAA4IBAQC10Xz9AiGlvGQBqYHNH+EpF3HTjizGMhWeXeCm
Tv/pVEEezY4tqQKeXWnR8zDH6h+M1Ezo1JT7xchnTQCUUB/V3JKXEqBDASZnb8Ee
41/u/V/CI0kFYxJkNcYHsyoJjdjO70YnK4D6apowkBog4qgxgolcfRBdOmy5EbpQ
N2a5VxEaaAlbUiVDJuz3rPfs2dwk0UM3UkBH2sSVwY2dA1sW2tBBeghq3Nba33Mz
XjIUSibYuT3rBUJLhPgXX41vl6BOS/gbsUxmRYE84j7KaVrhsMuO3ynuCPpRtapy
iWcDepBK0nw/1xNSgj/69Vw9nrDTqWPGGq5OXuqL0ZsjaLDB
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:03:06 2025 by rpki-client