Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JIW1veBi5VJt2lKAEEwWHn8cqc.roa
File: 1JIW1veBi5VJt2lKAEEwWHn8cqc.roa (raw, json)
Hash identifier: JvpISNoBrf0PyDMC5PCrpEOit6UIYFqkS8OIZI4V8OY=
Subject key identifier: D4:92:16:D6:F7:81:8B:95:49:B7:69:4A:00:41:30:58:79:FC:72:A7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0198093367AEA914B0D3B3FA87736431CDCD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JIW1veBi5VJt2lKAEEwWHn8cqc.roa
Signing time: Mon 14 Jul 2025 13:50:20 +0000
ROA not before: Mon 14 Jul 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42922
IP address blocks: 2a0e:d601:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:67:ae:a9:14:b0:d3:b3:fa:87:73:64:31:cd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 14 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d49216d6f7818b9549b7694a0041305879fc72a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:15:7c:1c:d6:4a:5a:d3:a8:90:6a:ea:51:37:
37:93:74:bf:2d:12:e2:6a:c0:90:b9:99:c4:28:8c:
02:c6:dc:e6:e5:21:c8:8e:32:e7:c0:d4:59:1b:87:
a8:3b:6a:3a:d4:90:46:4d:06:87:a5:d7:fe:c5:4d:
3a:56:c2:aa:70:be:dd:e5:6b:68:b6:63:9d:9b:a7:
02:79:f1:ba:41:76:fe:45:0f:34:be:b6:3d:e3:32:
da:03:eb:3c:ea:5b:15:e3:e4:89:9d:d1:6a:8e:07:
99:c4:e1:0d:7a:f5:a9:7b:92:f1:0a:16:fb:c4:e4:
d1:7e:ea:ee:28:67:d2:78:cb:a7:d4:b5:bc:b1:d6:
39:1e:3c:3f:4d:41:0b:c7:36:b2:66:c1:af:03:50:
a5:86:6f:37:02:22:fb:b7:68:d1:46:23:62:d2:f3:
9c:b8:d8:c6:60:b4:c4:b1:fe:74:13:dc:a7:68:05:
20:f7:85:88:76:0d:9e:65:e1:14:4d:65:61:b0:17:
f6:84:90:4c:29:ee:fa:af:57:12:6f:82:61:dc:28:
d7:c5:42:fb:c4:ef:b3:9a:cd:4b:63:f0:bf:f5:cd:
ae:e8:8f:38:e6:ff:5e:2d:ca:38:dd:d9:01:70:80:
27:a2:dd:4d:7d:d2:21:31:0a:2c:56:9f:3e:f4:92:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:16:D6:F7:81:8B:95:49:B7:69:4A:00:41:30:58:79:FC:72:A7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1JIW1veBi5VJt2lKAEEwWHn8cqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d601:1::/48
Signature Algorithm: sha256WithRSAEncryption
41:60:c3:a4:d9:9e:c6:04:1e:b8:e8:bc:5a:f9:76:db:ac:64:
f3:ca:bd:3e:65:0c:34:f2:e4:4d:b7:a5:f0:55:ef:ea:ec:bf:
bf:6e:9c:8f:e1:15:e1:98:e0:d8:51:d1:30:65:39:28:4a:8e:
fb:5c:a7:73:d0:df:55:cb:d9:75:07:95:25:d5:ec:d8:c6:f6:
92:ef:e3:11:a0:03:73:6f:60:8f:f5:db:e2:45:2a:b1:a1:8b:
be:6d:fa:31:68:29:31:a7:ee:00:1a:28:7b:37:03:d3:b6:bb:
ca:04:ec:46:fe:a2:6a:da:80:67:21:69:5c:7e:f6:df:27:60:
2b:9b:44:d5:fe:54:74:bd:42:ae:86:ae:be:24:40:45:e4:b4:
52:0d:8f:18:ff:be:61:a7:81:f5:17:91:b0:ca:1e:8d:28:d0:
3d:ed:fe:29:ac:a7:50:50:89:9f:6f:1c:92:31:e6:f1:2c:70:
0b:72:9f:83:18:87:19:c0:a4:0b:5b:8f:dd:18:fd:b3:2f:d9:
ba:ae:6e:10:cd:ee:e1:f4:bf:86:c4:21:51:63:97:d5:58:df:
fd:61:1d:5d:6c:6b:63:97:c7:1a:3f:d0:dd:90:27:82:05:9b:
f2:cf:fe:ee:69:1a:3a:31:06:de:e5:69:ba:c2:f7:0f:dc:3f:
9d:3f:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:29:09 2025 by rpki-client