Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/AbhPoKPq-VoHSJoN8VzuQRM5Zk0.roa
File: AbhPoKPq-VoHSJoN8VzuQRM5Zk0.roa (raw, json)
Hash identifier: /eeSGgfsm6foPBbxaafEv5Ry/KyC3lJgi1Je2LLJPqI=
Subject key identifier: 01:B8:4F:A0:A3:EA:F9:5A:07:48:9A:0D:F1:5C:EE:41:13:39:66:4D
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019814C44C16404E7F50823DCECE1AF86CE7
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/AbhPoKPq-VoHSJoN8VzuQRM5Zk0.roa
Signing time: Wed 16 Jul 2025 19:44:25 +0000
ROA not before: Wed 16 Jul 2025 19:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a12:35c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:c4:4c:16:40:4e:7f:50:82:3d:ce:ce:1a:f8:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jul 16 19:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b84fa0a3eaf95a07489a0df15cee411339664d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:01:c4:4b:91:5f:19:7f:c6:ba:14:81:c6:
56:d9:e4:2d:7c:13:c1:16:eb:da:d3:30:71:42:91:
bc:bf:83:e4:c0:6d:71:87:e5:58:cb:84:3c:5f:8a:
69:0d:a6:92:24:f5:ae:40:ac:25:7e:64:3e:32:18:
db:e9:ad:74:a0:ec:64:65:19:3c:e3:95:79:c5:e8:
ed:d7:fb:9d:05:c1:8b:a9:61:a9:41:e1:37:55:04:
2e:5b:94:9b:86:99:e3:7b:86:b3:40:73:95:a0:66:
d7:53:a6:27:0a:18:ee:07:6d:fe:a9:87:e9:ad:16:
a2:41:42:c6:99:82:34:ad:bd:bb:7a:7e:24:30:1f:
2a:ad:92:4e:a7:74:c7:f8:69:14:c4:32:69:43:56:
f1:f2:0c:73:66:84:74:e7:bd:79:4b:f3:0f:5b:e0:
ba:65:6e:75:29:ab:d1:ce:b1:86:dd:70:21:cf:c0:
5a:84:b3:3f:47:b4:2e:86:6d:da:8a:4b:76:23:a9:
d3:cc:da:08:5e:84:1b:f5:61:99:f2:5a:18:b8:85:
44:2f:99:9b:62:db:a3:f5:4d:37:5d:5a:6d:49:dd:
cd:28:ee:21:e6:05:61:22:fb:99:42:f3:83:69:15:
f3:01:85:a3:8c:a3:09:75:7c:08:30:71:0d:77:f7:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:4F:A0:A3:EA:F9:5A:07:48:9A:0D:F1:5C:EE:41:13:39:66:4D
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/AbhPoKPq-VoHSJoN8VzuQRM5Zk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:35c1::/32
Signature Algorithm: sha256WithRSAEncryption
58:13:ea:56:7d:48:a3:b4:8a:e7:46:70:47:0a:cc:9c:b0:e1:
9d:2d:a3:78:4d:7b:b7:dc:92:b2:6f:e7:c7:a8:58:52:18:e5:
13:a3:c1:5b:6d:74:ee:8d:6c:1b:09:e0:5e:ab:7f:df:77:b9:
a0:57:7b:46:66:0f:7e:9c:46:cc:25:1f:d4:15:77:71:e7:a3:
34:e1:97:69:fb:45:cf:72:46:00:6c:46:6f:7d:92:07:69:3f:
3c:ba:31:32:e3:23:00:10:ed:ae:9f:e9:fc:b7:1d:67:b7:be:
a2:78:b8:c9:25:c0:d1:e8:8d:cf:3f:7f:c1:91:ea:b6:d8:1e:
09:2a:10:8e:19:f8:8e:a3:89:d2:c2:e6:4a:78:2d:df:8a:13:
ad:96:11:27:64:65:79:a5:c1:1d:4b:69:6e:33:df:f6:3f:3a:
81:04:dd:17:b6:89:93:5b:0f:16:9f:65:d3:02:1b:66:85:79:
55:b8:92:31:ae:39:8b:d9:4a:27:7d:2d:ce:bc:7f:f2:25:26:
aa:fb:d8:93:92:04:de:67:c2:50:33:2f:78:55:b3:4a:76:f6:
8c:3c:fa:6e:b8:1d:41:14:e5:6d:15:1d:53:14:5c:20:4d:e9:
ed:e4:5d:90:09:c3:39:a0:00:39:30:cc:d5:15:ba:ee:c5:17:
76:b0:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 10:53:21 2025 by rpki-client