Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/O47iRpmVJrN5kyLHejtw1EVG-MI.roa
File: O47iRpmVJrN5kyLHejtw1EVG-MI.roa (raw, json)
Hash identifier: YFHAgBAtSXAS/PD/F6eJBYD3guMI7Imk/Lvqn022i00=
Subject key identifier: 3B:8E:E2:46:99:95:26:B3:79:93:22:C7:7A:3B:70:D4:45:46:F8:C2
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 01981BED2F95CE28052C190961955BD20C96
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/O47iRpmVJrN5kyLHejtw1EVG-MI.roa
Signing time: Fri 18 Jul 2025 05:06:25 +0000
ROA not before: Fri 18 Jul 2025 05:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47975
IP address blocks: 2a03:2300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1b:ed:2f:95:ce:28:05:2c:19:09:61:95:5b:d2:0c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jul 18 05:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8ee246999526b3799322c77a3b70d44546f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:4e:d0:3c:95:0c:04:07:e5:2b:a3:d2:16:
ec:e2:a1:92:19:44:ff:c6:10:e6:d1:7f:7d:05:f0:
1c:44:fc:bf:a8:f5:61:4d:d3:10:18:a0:9b:59:ff:
35:d1:4a:4c:ca:bf:b4:d1:d4:9d:80:a4:24:e4:cf:
09:1f:11:1a:48:37:9a:62:ad:a3:50:67:fb:3b:3f:
31:31:2d:cb:08:c4:79:9b:a6:44:cb:06:e5:5d:4b:
af:9f:77:dd:08:62:5b:3d:62:19:59:35:8b:54:7e:
0c:f0:a4:42:d2:4c:da:a8:8a:40:58:c0:24:ad:2a:
9e:01:3b:e5:1a:79:1f:60:ad:7f:b9:21:88:78:56:
88:03:66:38:46:53:a0:0d:1f:db:74:01:03:76:20:
fc:ce:76:7e:85:89:69:ea:0d:69:78:56:f8:9e:fe:
29:1f:fe:bd:b4:c7:97:cd:a3:04:f5:b1:97:7d:b3:
3c:18:27:4c:61:71:71:81:b4:5f:a4:cb:d0:d4:c0:
81:9f:ad:5c:09:9f:e1:dd:04:13:19:de:09:2b:f3:
b2:71:11:5f:a8:ac:7b:28:c6:23:8c:1a:13:51:5d:
db:91:fa:31:c0:59:24:24:d2:87:de:5b:3c:71:6d:
a7:7d:d9:f7:cb:89:2d:f2:6c:32:78:3a:f3:e6:44:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:E2:46:99:95:26:B3:79:93:22:C7:7A:3B:70:D4:45:46:F8:C2
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/O47iRpmVJrN5kyLHejtw1EVG-MI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
0d:74:46:b0:74:e5:d0:bd:2c:e7:6c:02:0d:6c:1e:7a:03:5a:
66:5b:a4:63:7f:8a:67:db:fb:41:4d:76:94:7c:35:fc:1d:5a:
5c:94:18:d9:02:40:4c:95:9c:5a:a6:ae:c0:6d:b3:dd:e0:60:
45:ff:2a:4d:d3:c9:92:be:dd:3a:16:1d:d1:81:e0:ed:37:cc:
1e:d3:c7:e0:e0:2b:b0:1b:d4:0e:f0:9d:d6:2f:82:23:8f:5a:
6b:36:f9:13:a0:40:a7:52:46:3b:f8:8d:94:15:2c:63:da:9a:
59:a8:80:3c:7b:3f:64:97:30:c4:8c:6e:a3:de:7c:10:e3:50:
56:17:11:86:66:bf:31:33:f9:a4:9e:0d:ea:bd:8d:fd:75:34:
75:06:04:01:1b:2b:24:b0:53:b5:d9:96:8c:e4:42:de:02:8f:
70:de:20:a2:fa:98:07:1e:dd:89:92:48:e6:65:58:42:02:1c:
1a:17:19:3b:cb:aa:74:0d:a2:df:53:8e:bf:70:5c:b5:54:57:
8f:ae:2d:18:3a:0b:85:1c:00:7a:a1:9d:52:35:9e:6b:25:af:
18:e6:20:11:94:27:84:b1:0a:b5:69:e5:29:c4:13:1f:aa:33:
a0:c6:7b:2c:bf:0e:ae:7a:8c:02:44:f9:5c:65:36:13:7c:7e:
41:99:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:24:03 2025 by rpki-client