Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/RofW49sTTwfaty3DbeO6RxtjIRQ.roa
File: RofW49sTTwfaty3DbeO6RxtjIRQ.roa (raw, json)
Hash identifier: /28yrEiRSbjSvgU8rZuOfpUnr9f8bCOIx1ejs7B/hsw=
Subject key identifier: 46:87:D6:E3:DB:13:4F:07:DA:B7:2D:C3:6D:E3:BA:47:1B:63:21:14
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01982F01199606545C47CB7A2F4EF4E3A1A2
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/RofW49sTTwfaty3DbeO6RxtjIRQ.roa
Signing time: Mon 21 Jul 2025 22:00:57 +0000
ROA not before: Mon 21 Jul 2025 22:00:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 2a03:5840:115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:01:19:96:06:54:5c:47:cb:7a:2f:4e:f4:e3:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 21 22:00:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4687d6e3db134f07dab72dc36de3ba471b632114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:7f:d2:f7:c9:e4:7d:fb:64:d3:10:d0:aa:
dd:f4:86:12:07:bf:08:06:52:61:5a:03:c3:7c:2b:
f3:65:e2:01:fc:9b:a9:1e:b1:0c:81:bf:ff:7a:91:
bf:e0:58:80:82:ba:23:cf:9e:b9:c7:79:fc:ef:23:
ac:41:f2:b0:82:ab:53:9b:5e:48:40:ad:bf:07:60:
1f:b2:f8:d7:73:02:4b:87:e7:90:8a:13:a3:53:65:
98:f5:09:b2:ab:ad:0d:2d:b1:48:0b:47:df:bd:58:
6c:c1:68:29:82:e4:e2:48:47:f6:12:1a:f0:f9:99:
11:e0:f7:52:90:b1:0f:88:0f:ed:ab:6d:ff:d3:4e:
24:d4:eb:72:a0:9a:0c:41:df:48:6c:47:2a:1c:74:
a5:60:95:9c:b7:08:c9:84:8d:61:1d:48:93:cb:f0:
6a:b9:25:31:dd:99:e0:75:f8:52:89:23:17:c9:ef:
5e:2d:a8:ef:aa:1f:51:4f:1b:13:78:d3:3a:be:8e:
65:d3:9e:2e:72:62:14:f3:89:05:d7:c2:e5:60:1e:
55:03:c1:2e:6c:2e:bc:97:4d:3a:33:5d:24:50:40:
07:97:7e:2b:66:7f:38:c3:47:56:49:c8:33:3f:89:
42:1e:ce:cd:3b:d2:66:cd:2b:2f:f8:af:bc:1d:86:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:D6:E3:DB:13:4F:07:DA:B7:2D:C3:6D:E3:BA:47:1B:63:21:14
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/RofW49sTTwfaty3DbeO6RxtjIRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:115::/48
Signature Algorithm: sha256WithRSAEncryption
8c:49:b5:ee:8d:c8:cb:17:6e:bd:b0:b9:f0:8f:71:12:6e:a9:
08:6c:26:dc:c5:4c:ea:db:71:ef:d1:b1:91:ae:61:11:c4:b4:
f4:92:9d:d4:7b:50:09:d5:48:70:df:06:d4:b7:79:ce:17:3e:
db:64:d4:df:f8:f3:42:9b:1a:71:80:fa:ef:0f:19:e4:fb:79:
ef:5f:4a:5b:20:ac:57:a4:b1:13:88:6a:01:09:8e:62:d4:03:
55:df:b7:a3:25:25:0a:43:5f:eb:43:37:a1:ed:c0:ae:67:c2:
29:f9:98:ff:66:71:36:47:96:b1:5c:00:c8:ac:ad:ac:95:b3:
9c:6e:f4:10:a5:1f:76:07:87:04:cf:2f:33:e2:52:73:4b:c8:
68:04:3b:97:4c:a6:b3:88:ed:4a:f1:4e:cd:9b:dd:9c:4f:7a:
d9:12:28:40:e3:2d:0b:cf:c5:bf:9e:a4:45:df:06:dd:77:1e:
b9:7a:e3:ae:5b:4e:05:cd:bd:2b:60:2d:54:4f:22:19:04:5b:
5e:fd:59:27:27:65:af:2c:83:c2:f6:d2:d7:a2:19:ad:da:7e:
c2:ff:3c:d9:9b:09:16:b2:9f:fb:7e:52:99:94:62:0d:19:2a:
09:8b:42:da:3e:7c:1e:fe:11:2c:59:35:7d:36:d5:f4:57:1c:
96:98:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:43:15 2025 by rpki-client