Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/M2qfiHxlvyqX5khJIeCk4BAzw-M.roa
File: M2qfiHxlvyqX5khJIeCk4BAzw-M.roa (raw, json)
Hash identifier: 2wSt8AsR9BQPYP7f67EqXqK56sykUCRKKl1aHVsfKpw=
Subject key identifier: 33:6A:9F:88:7C:65:BF:2A:97:E6:48:49:21:E0:A4:E0:10:33:C3:E3
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0197C0924BD9A62B4E6F0A37FCBADE51FB1D
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/M2qfiHxlvyqX5khJIeCk4BAzw-M.roa
Signing time: Mon 30 Jun 2025 11:21:42 +0000
ROA not before: Mon 30 Jun 2025 11:21:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200350
IP address blocks: 2a0b:1447::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:92:4b:d9:a6:2b:4e:6f:0a:37:fc:ba:de:51:fb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jun 30 11:21:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336a9f887c65bf2a97e6484921e0a4e01033c3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:74:eb:9e:90:80:3c:4c:b4:c3:bb:6c:4d:
ad:cd:73:de:d2:ce:26:11:55:1c:6a:e6:a0:73:9d:
99:69:b8:81:8d:f4:bd:e7:6a:aa:60:86:3c:eb:36:
ef:e2:c6:c4:21:df:30:dd:37:18:83:56:f3:2a:b7:
3d:dd:f0:57:a3:b2:0b:8b:d9:e6:39:69:04:31:34:
a9:30:18:01:bb:10:3d:1b:e1:ff:09:1e:32:57:01:
5b:e2:ff:fa:c1:01:65:b9:fb:d6:ca:ce:00:29:25:
e2:c8:fa:0e:ee:19:68:2e:5c:e7:f2:b6:2e:24:98:
57:cf:49:97:df:b3:95:66:71:7d:31:83:31:20:5a:
f7:a1:d2:a8:4f:37:ce:7d:a0:24:77:90:e6:c0:bb:
48:52:50:c7:d3:e9:fd:1b:5c:bd:85:15:47:fa:f9:
90:ba:e7:cb:00:df:32:d2:ec:2a:03:d7:ad:c0:87:
61:cf:9a:a1:c3:16:ad:f5:1a:b9:f9:bf:66:b4:1a:
2b:54:4c:f6:2c:48:b4:33:33:0f:39:26:0a:52:4c:
70:89:4d:59:f0:30:33:85:1b:50:82:7c:4f:84:94:
25:3c:a7:39:e7:43:36:98:8b:34:7e:a6:ca:a8:5c:
a7:a4:2c:b2:cc:82:23:ce:12:0c:0d:69:96:ee:83:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:9F:88:7C:65:BF:2A:97:E6:48:49:21:E0:A4:E0:10:33:C3:E3
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/M2qfiHxlvyqX5khJIeCk4BAzw-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1447::/32
Signature Algorithm: sha256WithRSAEncryption
5e:f6:77:d9:20:b7:c5:c6:23:59:11:72:bc:fe:d5:c8:10:0d:
bc:d0:ed:06:31:d1:69:85:96:f2:21:29:27:bb:92:5e:6c:0f:
9b:c1:05:66:9f:3b:b4:2e:0c:5a:35:55:d5:04:ae:52:6d:b6:
5f:8e:84:7d:9f:07:9f:ff:0b:3c:65:6a:5d:81:69:e0:7e:54:
cf:cb:99:44:66:d4:e4:45:95:5e:b3:c7:86:4a:c0:30:14:5f:
14:e8:e2:18:21:06:e0:0e:04:e6:79:91:e4:1e:7a:19:3a:a7:
d9:bd:6f:ce:09:e5:83:85:fe:ee:22:3a:a7:af:7c:46:e5:62:
db:e3:4c:6f:1d:aa:d8:1d:39:02:6a:98:1f:f5:7e:1c:bc:a1:
09:98:f9:6c:c1:52:26:85:e5:20:21:7d:1b:e9:9d:59:35:8d:
75:1b:15:88:91:2a:d6:49:12:a3:00:06:ee:3f:5e:12:61:d9:
12:4d:2c:96:f5:4f:cc:4f:1e:c8:a5:44:bf:7d:c0:d8:9a:f0:
4b:87:b3:95:e5:9a:02:96:56:3b:f1:89:d0:55:a7:00:35:aa:
be:de:20:db:0d:68:59:0d:8d:fe:79:47:85:34:f5:1c:da:13:
0e:61:47:a7:5e:10:28:d0:79:4a:b4:67:8b:dc:d0:02:88:22:
1d:a6:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 20:44:29 2025 by rpki-client