Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K88PAGFDEz_prHIf-wjkRyH6S2w.roa
File: K88PAGFDEz_prHIf-wjkRyH6S2w.roa (raw, json)
Hash identifier: 2MiUiCugJO9oKzYQCp9Fhhz9EGf0dK1kP36PbNGi4Hg=
Subject key identifier: 2B:CF:0F:00:61:43:13:3F:E9:AC:72:1F:FB:08:E4:47:21:FA:4B:6C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019817594FABD3D57F5871C9703429E8975E
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K88PAGFDEz_prHIf-wjkRyH6S2w.roa
Signing time: Thu 17 Jul 2025 07:46:25 +0000
ROA not before: Thu 17 Jul 2025 07:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215397
IP address blocks: 2a03:5840:12a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:59:4f:ab:d3:d5:7f:58:71:c9:70:34:29:e8:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 17 07:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bcf0f006143133fe9ac721ffb08e44721fa4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:4a:49:25:d0:dd:7a:35:97:06:ae:5b:37:
e6:c1:78:5d:1c:46:04:d8:71:cd:1d:b2:42:3a:5d:
26:3f:1e:a3:b0:99:7d:c8:65:91:c4:74:e5:99:1a:
c3:67:b5:1c:1d:d2:6b:92:35:8c:79:a1:6c:93:ae:
09:51:78:7d:24:b5:11:67:9b:4e:f2:ca:01:9b:e0:
28:a0:d0:55:88:86:4f:2d:15:ae:c1:18:2b:b0:6d:
1b:24:97:1a:ef:9c:cd:43:1d:0a:62:79:cd:6f:72:
59:f5:6c:eb:45:0b:33:e1:ee:41:05:bd:01:b4:d6:
82:99:70:fc:44:4a:ba:cb:cc:c2:f3:e1:7c:53:c6:
93:6c:3b:c6:68:92:07:ef:3c:94:dd:1c:62:2d:c9:
62:5e:53:3f:cc:57:e6:36:dd:d9:e2:bc:49:57:11:
aa:31:b0:5b:ab:36:0f:39:a7:12:3b:cf:79:24:8e:
df:77:b3:ec:36:90:c9:5d:80:d8:11:1a:7f:48:ac:
3b:40:b6:25:06:ca:1d:ae:8b:3e:ac:0b:29:a6:71:
34:58:59:91:14:06:82:f6:50:2a:02:e1:70:00:9c:
82:29:25:3a:7a:a3:2b:f0:b8:1f:84:31:8b:be:6e:
b7:22:74:3e:e8:42:a3:76:5a:ed:f1:cc:75:3d:5e:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:0F:00:61:43:13:3F:E9:AC:72:1F:FB:08:E4:47:21:FA:4B:6C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/K88PAGFDEz_prHIf-wjkRyH6S2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:12a::/48
Signature Algorithm: sha256WithRSAEncryption
96:fe:71:22:c3:c2:3d:ea:bd:ca:99:d5:f8:9a:69:61:99:bc:
9c:10:f8:17:65:b1:5c:37:cb:06:a2:1d:bf:e3:ed:5f:4f:48:
1f:ee:0d:57:86:ac:a7:db:0d:ef:6a:39:30:8a:5c:40:fb:f2:
f8:cf:f2:aa:1a:00:a0:33:75:29:7d:da:f0:71:b9:dd:01:e6:
f5:56:46:6b:fe:b6:b6:72:ca:73:94:fd:d2:ff:52:a8:2e:67:
b5:86:7d:ba:6b:ac:0c:5f:34:67:c8:ef:3d:53:5a:71:75:34:
9f:96:d2:c7:2c:1e:7c:48:24:9c:65:6d:ab:7f:52:b2:d6:b5:
1d:4b:0f:f8:37:23:f9:cc:ef:71:35:2e:1f:5d:2b:1f:fd:75:
75:22:ae:a4:c7:6d:e7:ec:ee:97:fe:09:0b:15:54:4f:0d:26:
14:79:5a:1d:a7:ca:3e:e2:de:a4:7c:b0:fb:9f:04:5f:40:eb:
ac:bf:5c:b8:a8:5c:df:0e:f4:d4:39:04:de:fc:75:b4:f1:39:
1d:2d:a4:db:c6:ed:aa:89:2c:94:8d:45:55:4a:74:67:1f:e3:
03:13:14:fa:94:3b:6b:f8:30:3d:53:d1:8a:6a:e9:17:fc:c3:
ce:07:c2:a9:5b:fa:3b:7e:d2:0b:71:a5:d5:03:a7:b8:2b:2a:
14:5c:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:41:30 2025 by rpki-client