Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/y1KiIU2GhHjjuvfOR3lz8y0STtE.roa
File: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (raw, json)
Hash identifier: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=
Subject key identifier: CB:52:A2:21:4D:86:84:78:E3:BA:F7:CE:47:79:73:F3:2D:12:4E:D1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0198173EB5576790BD3FE0A0F61A39EDC813
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/y1KiIU2GhHjjuvfOR3lz8y0STtE.roa
Signing time: Thu 17 Jul 2025 07:17:22 +0000
ROA not before: Thu 17 Jul 2025 07:17:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208483
IP address blocks: 2a14:4b80::/32 maxlen: 32
2a14:4b81::/32 maxlen: 32
2a14:4b82::/32 maxlen: 32
2a14:4b83::/32 maxlen: 32
2a14:4b84::/32 maxlen: 32
2a14:4b85::/32 maxlen: 32
2a14:4b86::/32 maxlen: 32
2a14:4b87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:3e:b5:57:67:90:bd:3f:e0:a0:f6:1a:39:ed:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 17 07:17:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb52a2214d868478e3baf7ce477973f32d124ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:8f:70:94:a5:db:6c:17:ed:63:5b:ce:6d:
52:84:94:5c:48:7a:a6:12:a5:07:ce:c3:6d:46:e6:
ba:cf:f7:83:99:3a:6b:97:1c:ce:f3:99:a1:6a:f2:
19:08:a3:f2:c0:90:34:1f:d6:53:e4:44:bd:10:19:
fe:30:f2:63:c1:55:fe:7a:6e:c5:a1:7d:c0:b0:63:
d0:4d:b8:7e:74:ec:ab:28:8b:29:83:0a:8f:c6:8e:
3a:d2:17:ed:f7:1f:ca:ce:20:31:4a:6d:f0:da:36:
81:52:0b:17:73:e4:6c:9f:16:71:03:23:34:e5:a4:
f2:09:b8:bb:1b:e0:fb:32:5b:37:4a:29:ee:de:27:
9f:09:da:5d:d5:00:e6:bd:7f:4f:0c:e7:f3:23:72:
4f:d0:03:99:89:46:17:e6:19:29:82:6d:22:ee:ff:
cd:31:e8:a1:95:8b:60:c0:7d:78:fb:73:85:c5:d1:
3f:3e:ce:17:b4:50:3c:27:fa:f1:a2:f0:01:da:26:
2e:d4:bc:5e:ab:fd:13:58:bf:29:fb:49:ff:ca:40:
5a:5b:70:dc:d1:07:8d:30:7e:15:bd:98:91:d8:ab:
7a:43:9c:92:aa:c4:8b:4e:e5:54:29:43:66:d7:db:
e0:29:72:d3:78:ca:02:d0:31:2c:51:43:2e:e1:3b:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:A2:21:4D:86:84:78:E3:BA:F7:CE:47:79:73:F3:2D:12:4E:D1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/y1KiIU2GhHjjuvfOR3lz8y0STtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
28:0a:7b:3f:57:ed:1d:d6:1a:56:08:15:e8:ce:17:97:7d:d3:
2c:4b:49:fe:cf:ce:b5:5b:fb:7f:1b:68:f5:23:a1:ff:d6:f8:
b1:28:f4:d8:07:29:0b:11:ce:62:8d:de:56:ce:59:06:a0:8a:
10:ca:dc:1a:ee:04:54:d2:9b:f1:17:ac:b9:0e:19:b1:75:c8:
c2:5b:de:b6:85:7f:33:60:50:57:b7:3f:76:05:c5:e3:fa:e0:
c0:35:34:63:bf:18:1e:ea:c4:3e:32:b8:3b:c4:d2:94:c3:83:
0b:99:2d:19:9a:dc:09:45:a9:c7:4c:47:1e:69:85:e1:88:52:
f9:11:32:7f:3b:17:db:2c:06:78:e2:a3:9a:d9:23:f9:ca:40:
26:2f:8e:44:63:bb:1f:1a:95:84:58:d5:c5:34:3b:03:ce:45:
09:61:0c:22:1b:23:be:67:5f:1c:5c:46:48:b2:67:91:98:aa:
cc:62:e1:d8:16:ca:49:e0:70:16:6d:97:1f:be:3b:77:12:57:
2c:38:ca:fd:3b:e8:0a:17:4a:08:1a:70:ae:57:61:9b:7b:e2:
64:ec:25:9f:17:f3:78:65:ba:f5:83:6e:fa:db:19:01:cf:8e:
44:78:e0:aa:01:b4:12:2e:50:d8:a7:71:a4:20:37:b6:6a:00:
0d:05:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:14:35 2025 by rpki-client