Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c5obUx4WwVkcCA5ZSX2cx9MOcFQ.roa
File: c5obUx4WwVkcCA5ZSX2cx9MOcFQ.roa (raw, json)
Hash identifier: I5+OHopj7NhfAeo9Gl+G3m+B7HDpsCHOej4oZBL4yxA=
Subject key identifier: 73:9A:1B:53:1E:16:C1:59:1C:08:0E:59:49:7D:9C:C7:D3:0E:70:54
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0197FA5CB4557692A76B29302BBD0CE54760
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c5obUx4WwVkcCA5ZSX2cx9MOcFQ.roa
Signing time: Fri 11 Jul 2025 16:41:08 +0000
ROA not before: Fri 11 Jul 2025 16:41:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 2a12:bec4:1560::/44 maxlen: 44
2a12:bec4:16f0::/44 maxlen: 44
2a12:bec4:1910::/44 maxlen: 44
2a12:bec4:1ab0::/44 maxlen: 44
2a12:bec4:1b10::/44 maxlen: 44
2a12:bec4:1b70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:5c:b4:55:76:92:a7:6b:29:30:2b:bd:0c:e5:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 11 16:41:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739a1b531e16c1591c080e59497d9cc7d30e7054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:55:12:19:76:e1:9f:e8:e8:9d:64:b8:4c:
c6:42:d3:6e:de:cd:c8:b8:03:8f:38:91:16:8e:8f:
98:0c:fa:8e:b0:a5:23:94:40:d6:bc:e0:47:2c:ba:
f7:ad:53:d2:64:45:67:91:f9:5c:7b:37:36:f4:f4:
77:8e:fc:88:ea:a9:96:0f:35:3a:a9:98:48:48:e9:
f2:86:26:6c:cb:df:6d:08:c2:d1:61:a9:4a:e1:ab:
ba:87:a9:17:36:fb:d1:69:bb:4a:5d:29:6a:54:28:
b4:8d:d4:86:1b:70:0d:53:22:8c:c9:c2:62:35:2f:
8c:ab:db:f5:bd:d2:fd:42:b0:7c:df:6d:b1:d3:76:
17:da:ec:50:a6:e5:73:52:65:f1:ce:ea:ce:63:a3:
d7:77:1f:11:ea:a9:55:31:81:05:f5:1a:63:3a:f9:
d8:9a:04:c0:ef:1f:d2:30:64:87:1f:7f:d1:d3:70:
0f:ff:67:6e:16:2b:0e:0b:d1:c4:cc:42:e2:13:46:
32:1b:4e:84:e9:9b:ce:32:ea:da:cf:78:4a:2f:69:
53:81:1a:03:62:11:44:97:64:fc:1a:68:35:7c:5f:
5b:dd:73:2c:2e:24:81:88:c7:7f:59:60:84:75:88:
d4:6a:b0:5b:d8:99:93:57:17:af:21:42:11:78:64:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:1B:53:1E:16:C1:59:1C:08:0E:59:49:7D:9C:C7:D3:0E:70:54
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/c5obUx4WwVkcCA5ZSX2cx9MOcFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1560::/44
2a12:bec4:16f0::/44
2a12:bec4:1910::/44
2a12:bec4:1ab0::/44
2a12:bec4:1b10::/44
2a12:bec4:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
a7:57:6a:f5:7a:b5:74:14:60:cc:c8:f8:8d:5c:6f:b0:da:ce:
48:aa:8e:4a:7c:fc:a3:83:7d:e3:b6:d0:d9:34:b2:5d:e6:15:
ff:03:66:a0:35:33:dc:bf:94:3c:5a:30:94:0f:75:3e:aa:40:
5a:1d:80:98:cb:cd:0f:ce:61:9b:56:8a:9c:99:a5:ba:ea:c6:
3c:dd:c3:cd:2e:a7:55:32:6c:c5:43:2d:5d:a5:d9:86:e8:f2:
da:34:31:32:f1:79:0f:11:87:f8:a5:b2:02:ee:d9:f4:dd:19:
03:59:7c:ff:10:94:47:a9:db:05:e1:0c:b6:9f:49:9f:75:10:
e9:a6:b7:2a:6d:36:a3:e0:a3:31:dc:26:f8:f9:d5:d4:ea:d1:
41:03:3b:da:95:e0:15:be:1b:65:4a:95:5c:e7:fb:04:4c:c6:
9f:bb:44:a6:59:ac:c8:0f:94:1a:93:ab:70:57:79:a8:d5:04:
67:8a:c7:c6:b2:01:88:35:0c:e7:ec:91:f0:63:19:20:4a:9b:
b0:99:15:d0:c5:ac:f6:97:b6:eb:7e:3b:20:ef:87:46:a2:47:
11:b6:23:4a:55:6a:63:f7:a3:cb:15:8f:ec:15:91:fa:42:31:
f2:30:5c:c2:cb:f3:8c:cd:20:dc:78:59:df:aa:da:b1:28:0f:
ca:34:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:45:38 2025 by rpki-client