Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PhdJzkVga1j1igX4qBRV4u6mNmI.roa
File: PhdJzkVga1j1igX4qBRV4u6mNmI.roa (raw, json)
Hash identifier: ifcwnXnDcnSOBy/kirGHe9z+tH0JiUJ+sKHQaAueb7s=
Subject key identifier: 3E:17:49:CE:45:60:6B:58:F5:8A:05:F8:A8:14:55:E2:EE:A6:36:62
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01980397AD5C2CA8FAF4438C606C6B4408E8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PhdJzkVga1j1igX4qBRV4u6mNmI.roa
Signing time: Sun 13 Jul 2025 11:42:08 +0000
ROA not before: Sun 13 Jul 2025 11:42:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215437
IP address blocks: 2a12:bec4:1b60::/48 maxlen: 48
2a12:bec4:1b61::/48 maxlen: 48
2a12:bec4:1b62::/48 maxlen: 48
2a12:bec4:1b63::/48 maxlen: 48
2a12:bec4:1b64::/48 maxlen: 48
2a12:bec4:1b65::/48 maxlen: 48
2a12:bec4:1b66::/48 maxlen: 48
2a12:bec4:1b67::/48 maxlen: 48
2a12:bec4:1b68::/48 maxlen: 48
2a12:bec4:1b69::/48 maxlen: 48
2a12:bec4:1b6a::/48 maxlen: 48
2a12:bec4:1b6b::/48 maxlen: 48
2a12:bec4:1b6c::/48 maxlen: 48
2a12:bec4:1b6d::/48 maxlen: 48
2a12:bec4:1b6e::/48 maxlen: 48
2a12:bec4:1b6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:03:97:ad:5c:2c:a8:fa:f4:43:8c:60:6c:6b:44:08:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 13 11:42:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1749ce45606b58f58a05f8a81455e2eea63662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:d8:ff:00:d9:be:74:5b:14:8e:80:8d:28:
e5:5a:61:97:05:51:90:9a:9e:e0:80:b9:ce:7c:6b:
67:4d:f8:57:2e:68:a3:69:7f:f3:e4:da:3c:2d:ef:
ee:4b:e1:55:3b:02:2c:32:37:ab:20:7c:8c:b7:ca:
51:0c:46:5d:fe:e4:36:c7:90:2d:ce:83:3d:8e:5f:
2f:1c:6d:15:38:50:a7:59:af:be:84:ef:2c:7a:ab:
f6:24:a7:4a:05:d5:d8:0f:fd:27:c7:8b:67:8f:85:
bb:f3:55:33:0f:39:45:69:63:c2:fc:4a:80:51:68:
e7:b6:e6:ae:bc:89:04:cf:86:60:b3:6e:39:e6:f4:
18:5a:bc:a5:28:84:11:e9:2c:ad:4c:a0:b4:90:d2:
7a:b3:e1:97:9d:2f:f3:43:74:b8:07:16:35:44:9c:
6d:8c:17:35:14:5d:29:3c:68:a1:0c:6e:6e:98:c2:
dc:70:2a:bc:3c:42:b8:60:2f:9b:bb:84:fe:f9:63:
63:6b:80:37:9f:91:91:6d:6f:49:d5:5b:1b:bd:a2:
c5:de:90:53:08:ab:3b:2e:e3:53:2a:f6:9e:68:2e:
1a:b0:1d:ba:e5:a9:9a:88:0a:80:36:56:61:3e:16:
8a:d5:ef:69:47:e5:2b:71:80:ef:55:76:aa:81:4f:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:17:49:CE:45:60:6B:58:F5:8A:05:F8:A8:14:55:E2:EE:A6:36:62
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PhdJzkVga1j1igX4qBRV4u6mNmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
1c:9f:6d:60:8c:4e:fc:62:a1:66:ca:eb:c9:95:ca:2e:d3:b9:
a3:2e:a8:a0:05:ab:d2:22:20:ee:1a:39:f0:2d:36:ab:55:48:
4e:e3:95:39:cd:5a:55:4b:0d:06:08:99:c3:20:23:24:70:33:
20:3d:7a:38:93:5e:06:31:32:be:99:a6:47:58:56:5f:35:f9:
c3:e7:65:47:da:5a:96:41:2b:48:1f:19:02:80:d9:22:59:2a:
94:29:56:4f:a6:91:ee:c9:b7:d9:85:a7:20:b8:12:28:5f:a4:
f4:37:a8:bf:dd:26:80:a5:cb:6d:7a:7a:62:ea:55:de:39:61:
d7:54:33:5a:16:04:09:d6:77:55:54:bf:9a:06:99:64:e3:72:
80:e1:3d:82:a5:20:c7:51:bc:3e:5e:c3:9f:e2:3a:86:8b:0f:
88:9c:ee:dc:97:a2:36:78:6b:34:0c:cd:d0:1f:ce:7b:31:1a:
30:7a:aa:9f:ec:d6:ee:48:ef:ef:01:22:e9:61:e2:31:ef:da:
1f:97:5c:80:33:a5:47:54:35:e4:9b:6d:42:46:47:3a:20:32:
21:a3:76:da:58:b0:55:a3:dc:27:a0:ed:7b:b6:14:67:fd:95:
da:85:f5:93:9c:c2:71:a8:45:f1:23:d5:e9:b0:5f:21:8a:d1:
a2:f0:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:28:04 2025 by rpki-client