Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/TTb9mwPRFCBpcrOhR-GLrg38faE.roa
File: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (raw, json)
Hash identifier: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=
Subject key identifier: 4D:36:FD:9B:03:D1:14:20:69:72:B3:A1:47:E1:8B:AE:0D:FC:7D:A1
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 01997BC750B3F65FC0C2638FD7DA68AE3C7F
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/TTb9mwPRFCBpcrOhR-GLrg38faE.roa
Signing time: Wed 24 Sep 2025 12:51:23 +0000
ROA not before: Wed 24 Sep 2025 12:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:eb80::/48 maxlen: 48
2a07:eb80:1::/48 maxlen: 48
2a07:eb80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:c7:50:b3:f6:5f:c0:c2:63:8f:d7:da:68:ae:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Sep 24 12:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d36fd9b03d114206972b3a147e18bae0dfc7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:59:80:5f:24:04:e2:95:c1:a7:9a:5e:57:
ac:f3:c8:ff:1b:a7:22:2f:cc:64:41:b6:4d:0b:00:
a2:08:a6:14:fe:6c:31:41:aa:b7:f2:86:c7:e6:ac:
93:57:1c:d3:a0:42:da:ce:32:30:7d:4c:3f:b8:12:
2e:24:28:ba:65:2b:77:20:8c:71:8b:23:4e:ec:a7:
e2:8a:31:f8:73:4e:af:e1:3c:2d:d2:0f:d0:a8:2b:
62:1f:44:49:e4:7c:9e:12:4b:ed:fb:e4:66:0c:24:
9c:8c:5c:89:5f:61:57:70:d7:11:e5:3d:7b:b8:ab:
cc:bd:00:3c:5b:1e:17:83:63:40:7e:19:3e:b4:3a:
6c:a6:05:cf:d7:fd:a3:7c:b4:87:4a:fc:b2:6f:3e:
b8:8b:bc:f2:c1:75:f5:ba:6c:f7:22:85:75:6c:e4:
b2:ab:01:1a:f4:a6:59:6b:6a:ab:21:71:d4:2c:c4:
46:02:c1:47:e5:63:47:5f:71:f4:3f:75:76:bd:ec:
a1:b6:bd:1e:e2:c0:d8:20:91:1b:45:8c:c8:63:51:
df:a8:3a:d1:72:99:01:a5:a6:67:f7:b7:d8:93:b3:
c5:7a:7b:f8:12:eb:b6:de:61:6e:7e:c0:35:d9:49:
5e:92:d4:bf:05:05:a7:fc:28:8f:5c:1d:07:d3:c2:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:FD:9B:03:D1:14:20:69:72:B3:A1:47:E1:8B:AE:0D:FC:7D:A1
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/TTb9mwPRFCBpcrOhR-GLrg38faE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:eb80::-2a07:eb80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:ba:da:25:2b:16:27:5d:46:14:20:e1:6d:72:d9:e0:a8:92:
85:1a:83:0e:71:b4:e5:70:ab:d9:95:fd:d4:30:11:58:d8:0e:
1f:71:13:37:ba:13:3d:67:d0:46:cd:eb:b2:1e:0a:2e:67:6c:
11:93:98:85:91:6b:ec:10:bf:93:58:a2:fe:ff:fa:68:24:0c:
8a:41:30:8a:6b:6d:9b:29:2f:c9:15:48:14:5f:67:8a:4c:b7:
21:2b:7f:16:a4:37:44:05:88:18:d0:c6:43:35:0f:fa:d5:df:
23:0d:7e:a5:f2:dd:49:62:57:92:8a:af:70:81:a2:53:0e:f0:
81:e5:90:1e:df:66:91:5e:8f:b4:a0:2e:8d:02:3b:1b:5f:b0:
93:05:93:5e:6f:e5:2f:35:e7:be:c2:1b:9b:f8:65:b7:98:a9:
d7:18:d8:70:d4:9b:bf:b6:48:4f:18:e7:5d:41:43:68:8e:81:
52:e6:ae:87:07:e3:10:74:c2:6e:54:31:7d:ce:41:73:02:2d:
de:4c:ce:11:a3:16:55:41:ec:b6:f5:2f:fc:91:08:13:6c:b8:
1e:46:f6:fa:30:e5:60:b8:f9:63:7f:09:3d:2c:d9:08:d8:6c:
d0:85:6c:a9:ad:8d:ce:c4:ac:93:20:eb:14:0c:d7:bb:14:03:
79:23:eb:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZl7x1Cz9l/AwmOP19porjx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh
M2ViZjQwHhcNMjUwOTI0MTI1MTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDM2ZmQ5YjAzZDExNDIwNjk3MmIzYTE0N2UxOGJhZTBkZmM3ZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JlZgF8kBOKVwaeaXles88j/G6ci
L8xkQbZNCwCiCKYU/mwxQaq38obH5qyTVxzToELazjIwfUw/uBIuJCi6ZSt3IIxx
iyNO7KfiijH4c06v4Twt0g/QqCtiH0RJ5HyeEkvt++RmDCScjFyJX2FXcNcR5T17
uKvMvQA8Wx4Xg2NAfhk+tDpspgXP1/2jfLSHSvyybz64i7zywXX1umz3IoV1bOSy
qwEa9KZZa2qrIXHULMRGAsFH5WNHX3H0P3V2veyhtr0e4sDYIJEbRYzIY1HfqDrR
cpkBpaZn97fYk7PFenv4Euu23mFufsA12UlektS/BQWn/CiPXB0H08KR3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE02/ZsD0RQgaXKzoUfhi64N/H2hMB8GA1UdIwQY
MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct
MzQyMWVhNDFkZjM2LzEvVFRiOW13UFJGQ0JwY3JPaFItR0xyZzM4ZmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2
LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQcqB+uA
AwcAKgfrgAACMA0GCSqGSIb3DQEBCwUAA4IBAQAjutolKxYnXUYUIOFtctngqJKF
GoMOcbTlcKvZlf3UMBFY2A4fcRM3uhM9Z9BGzeuyHgouZ2wRk5iFkWvsEL+TWKL+
//poJAyKQTCKa22bKS/JFUgUX2eKTLchK38WpDdEBYgY0MZDNQ/61d8jDX6l8t1J
YleSiq9wgaJTDvCB5ZAe32aRXo+0oC6NAjsbX7CTBZNeb+UvNee+whub+GW3mKnX
GNhw1Ju/tkhPGOddQUNojoFS5q6HB+MQdMJuVDF9zkFzAi3eTM4RoxZVQey29S/8
kQgTbLgeRvb6MOVguPljfwk9LNkI2GzQhWyprY3OxKyTIOsUDNe7FAN5I+u2
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:52:28 2025 by rpki-client