Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/THPKpUh65UgvaSFY3d7jD_pK7xU.roa
File: THPKpUh65UgvaSFY3d7jD_pK7xU.roa (raw, json)
Hash identifier: CmxyhRdfFNIYGpfHSTVG1Zxah0j7K9yj0m4sRxzbzpQ=
Subject key identifier: 4C:73:CA:A5:48:7A:E5:48:2F:69:21:58:DD:DE:E3:0F:FA:4A:EF:15
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01980E6BE93ECCCBC4D2818A2CBA41C5C3A4
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/THPKpUh65UgvaSFY3d7jD_pK7xU.roa
Signing time: Tue 15 Jul 2025 14:10:09 +0000
ROA not before: Tue 15 Jul 2025 14:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213983
IP address blocks: 2a03:5840:1800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:6b:e9:3e:cc:cb:c4:d2:81:8a:2c:ba:41:c5:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jul 15 14:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c73caa5487ae5482f692158dddee30ffa4aef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:a0:06:be:29:f3:42:e0:a9:b6:08:d1:92:
c8:8e:c7:0f:e0:a4:84:56:c9:ae:a3:cc:63:2e:61:
c6:0f:cd:59:e4:53:31:62:66:f4:d8:56:14:c0:aa:
d4:65:de:89:79:2e:9b:59:ed:19:08:52:d7:f4:14:
96:53:ea:5b:a9:96:66:64:ad:46:a6:36:ac:dc:8b:
da:a8:1b:7a:ba:a8:ab:39:25:8b:d3:a8:56:69:73:
54:8d:a4:11:06:d3:c1:94:f7:8f:51:af:f8:07:85:
db:d4:e6:c7:cb:9a:e3:af:22:89:bb:31:38:d9:9d:
f2:a6:e6:11:f9:56:37:46:4a:8b:3f:67:bc:ad:97:
93:29:d1:f5:24:b9:b6:7c:f0:0e:90:83:bf:a9:80:
d7:ec:99:c8:33:d8:bd:67:d5:4b:3f:10:83:ad:1a:
be:54:f8:4d:07:5f:c2:69:4d:ce:e3:40:8c:60:f8:
98:f8:9f:eb:93:80:1c:5f:eb:f7:9f:2b:70:0a:3a:
76:c9:1d:4a:0e:2d:3d:cd:5d:ec:c1:5a:6d:c5:29:
ad:5f:a4:ab:17:83:6e:a9:b0:2f:73:63:c8:fd:92:
89:41:f0:e3:3f:44:3d:75:d2:d6:6e:bf:c3:a2:ed:
da:35:e5:21:f5:57:24:d8:f7:fc:12:1b:27:af:ab:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:CA:A5:48:7A:E5:48:2F:69:21:58:DD:DE:E3:0F:FA:4A:EF:15
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/THPKpUh65UgvaSFY3d7jD_pK7xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:1800::/37
Signature Algorithm: sha256WithRSAEncryption
17:96:62:0a:8c:99:89:42:5b:e9:e3:00:cd:41:c9:d3:48:c3:
c2:4f:70:2c:da:94:6f:e2:45:08:7b:b1:75:90:8a:89:58:b8:
36:ba:c8:2e:ee:96:bc:a0:61:e2:e6:7f:11:4a:e0:45:38:70:
75:17:e1:2c:22:81:69:be:d8:86:6e:99:44:d8:0e:80:ef:a2:
1b:5c:96:d1:fc:78:d9:05:98:3f:fe:88:ac:74:fd:84:50:0f:
95:42:5b:96:1a:8e:6a:2e:3d:b6:87:84:1c:fe:12:80:55:f5:
9a:90:f7:77:4f:d3:ad:7a:ad:40:ca:db:9f:08:f2:6c:5c:e9:
0e:0b:bb:10:2c:11:53:82:51:e3:c8:16:ba:73:9c:cd:c8:74:
a2:b3:9d:89:83:5f:5c:8f:11:0d:72:7a:e3:3d:7f:ec:08:75:
ba:34:25:3e:ca:5e:b5:aa:df:14:4f:23:a5:af:2b:6a:8d:2d:
55:63:1e:eb:e6:22:c7:f0:92:ad:90:71:40:2c:ce:f1:46:6e:
59:53:98:6e:d6:3d:59:21:67:b3:21:df:68:46:2b:19:e2:9a:
f5:51:3d:3a:8d:72:a4:8f:d1:88:63:36:e0:06:06:cf:b8:1f:
05:f8:a3:e1:65:e1:78:f3:17:e6:23:0d:04:a5:a4:02:00:dd:
65:b6:b4:15
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZgOa+k+zMvE0oGKLLpBxcOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjUwNzE1MTQxMDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzczY2FhNTQ4N2FlNTQ4MmY2OTIxNThkZGRlZTMwZmZhNGFlZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttmgBr4p80LgqbYI0ZLIjscP4KSE
Vsmuo8xjLmHGD81Z5FMxYmb02FYUwKrUZd6JeS6bWe0ZCFLX9BSWU+pbqZZmZK1G
pjas3IvaqBt6uqirOSWL06hWaXNUjaQRBtPBlPePUa/4B4Xb1ObHy5rjryKJuzE4
2Z3ypuYR+VY3RkqLP2e8rZeTKdH1JLm2fPAOkIO/qYDX7JnIM9i9Z9VLPxCDrRq+
VPhNB1/CaU3O40CMYPiY+J/rk4AcX+v3nytwCjp2yR1KDi09zV3swVptxSmtX6Sr
F4NuqbAvc2PI/ZKJQfDjP0Q9ddLWbr/Dou3aNeUh9Vck2Pf8Ehsnr6twcwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFExzyqVIeuVIL2khWN3e4w/6Su8VMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvVEhQS3BVaDY1VWd2YVNGWTNkN2pEX3BLN3hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgNYQBgw
DQYJKoZIhvcNAQELBQADggEBABeWYgqMmYlCW+njAM1BydNIw8JPcCzalG/iRQh7
sXWQiolYuDa6yC7ulrygYeLmfxFK4EU4cHUX4SwigWm+2IZumUTYDoDvohtcltH8
eNkFmD/+iKx0/YRQD5VCW5YajmouPbaHhBz+EoBV9ZqQ93dP0616rUDK258I8mxc
6Q4LuxAsEVOCUePIFrpznM3IdKKznYmDX1yPEQ1yeuM9f+wIdbo0JT7KXrWq3xRP
I6WvK2qNLVVjHuvmIsfwkq2QcUAszvFGbllTmG7WPVkhZ7Mh32hGKxnimvVRPTqN
cqSP0YhjNuAGBs+4HwX4o+Fl4XjzF+YjDQSlpAIA3WW2tBU=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:54 2025 by rpki-client