Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/STa1BOs7kw8CsADCt1RKyRnQOuM.roa
File: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (raw, json)
Hash identifier: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=
Subject key identifier: 49:36:B5:04:EB:3B:93:0F:02:B0:00:C2:B7:54:4A:C9:19:D0:3A:E3
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01997BC7501FB6EF9E63465F76B5EF225E22
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/STa1BOs7kw8CsADCt1RKyRnQOuM.roa
Signing time: Wed 24 Sep 2025 12:51:23 +0000
ROA not before: Wed 24 Sep 2025 12:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:eb80::/48 maxlen: 48
2a07:eb80:1::/48 maxlen: 48
2a07:eb80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:c7:50:1f:b6:ef:9e:63:46:5f:76:b5:ef:22:5e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Sep 24 12:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4936b504eb3b930f02b000c2b7544ac919d03ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:0d:7b:8d:92:aa:b9:66:a5:cd:73:d5:d2:
df:5b:6a:96:b1:6f:ca:d6:38:7c:5f:5c:6f:30:d5:
82:69:bb:93:d6:57:61:29:c3:3c:c7:1b:1b:a6:fc:
a2:49:c6:df:e4:03:e9:4c:c1:1c:d9:43:80:a1:5a:
57:44:7c:c8:21:3d:7a:4a:10:94:9f:10:7b:e0:8a:
d4:33:a2:aa:7f:40:f0:c2:5e:39:ab:30:00:25:54:
a5:b1:14:e9:24:64:81:d7:eb:ca:c9:bf:5e:a0:8f:
02:96:30:f0:be:c1:3b:02:38:b5:36:02:8b:2b:28:
40:3c:e9:de:ff:04:14:8d:c2:17:c9:0a:75:86:fc:
69:de:6d:a6:88:87:c5:87:26:f7:89:d5:33:1e:cc:
f5:05:32:2c:94:9e:d7:9c:4d:4c:cc:47:4c:fd:85:
72:71:47:34:a9:c6:42:33:8e:ca:0f:0b:11:4a:b9:
ea:8c:8a:c8:d2:5b:20:e5:4d:3b:5b:74:d4:96:f3:
a5:a3:f8:e9:ef:5d:b5:c7:a5:33:eb:6d:7c:27:52:
6f:c2:1a:16:49:70:80:17:8c:b2:2d:e0:6e:6f:fd:
29:1a:2e:9e:42:69:32:02:79:87:43:44:dd:6a:72:
ac:94:d0:e2:af:cd:e0:fa:cf:29:d7:ad:3c:ce:7c:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:36:B5:04:EB:3B:93:0F:02:B0:00:C2:B7:54:4A:C9:19:D0:3A:E3
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/STa1BOs7kw8CsADCt1RKyRnQOuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:eb80::-2a07:eb80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:32:46:f4:db:dd:fc:f3:e2:8e:9b:44:71:83:c3:5c:6f:f2:
ab:de:87:88:7e:13:88:59:31:2d:46:63:d4:15:4f:eb:39:b6:
68:95:5c:d9:5e:73:cf:b4:b3:77:f8:53:7b:12:e2:83:46:18:
30:c9:c8:97:f1:b4:d6:73:89:fe:6d:71:1b:9a:44:04:00:c5:
f3:80:7e:f2:da:10:ba:39:bc:e3:a3:9e:22:a6:de:8e:e7:eb:
0d:6a:b6:55:91:a8:87:0c:ab:84:fc:ee:a9:ba:b4:ed:35:76:
88:5a:8f:1c:d3:63:86:d8:9a:ed:1d:3b:45:42:32:73:04:65:
08:e4:e9:92:c1:46:2c:07:ed:88:1a:97:6a:28:6f:bb:47:a2:
16:25:c9:00:d9:4b:6e:d9:c5:ae:5c:8d:69:e2:6f:dd:9b:fd:
b6:6f:6a:8b:b6:54:0b:e1:63:c4:7e:fa:72:3c:99:1f:d8:1d:
52:16:46:8e:14:cc:be:7f:3f:57:28:d5:58:51:ad:34:24:dc:
fa:dc:2b:f9:f8:2a:be:56:c5:9b:bb:d1:b0:91:a9:08:54:78:
73:fb:db:ca:25:85:23:29:02:43:dc:67:91:e0:24:4d:3e:79:
59:81:33:88:55:dc:ac:b9:04:70:b5:a4:27:93:4d:60:3a:49:
a1:e7:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:31 2025 by rpki-client