Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/47JVgVgToP2JCPCrNinv-XHW2N4.roa
File: 47JVgVgToP2JCPCrNinv-XHW2N4.roa (raw, json)
Hash identifier: v4DRTra/MLLmoU83Ast19V67vrhVaOaxeHPCp8x8/Y0=
Subject key identifier: E3:B2:55:81:58:13:A0:FD:89:08:F0:AB:36:29:EF:F9:71:D6:D8:DE
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 01983DE5776E0044CCA781FAC0077A04D6CF
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/47JVgVgToP2JCPCrNinv-XHW2N4.roa
Signing time: Thu 24 Jul 2025 19:25:05 +0000
ROA not before: Thu 24 Jul 2025 19:25:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212899
IP address blocks: 2001:678:df4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:e5:77:6e:00:44:cc:a7:81:fa:c0:07:7a:04:d6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jul 24 19:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b255815813a0fd8908f0ab3629eff971d6d8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:f5:f0:9d:cd:a4:cf:97:32:a6:cc:d4:ed:
65:07:03:70:79:c8:7b:bd:69:45:6e:21:0b:6f:40:
60:ed:9f:66:6b:39:a8:0a:d2:3a:9d:ec:5c:34:d6:
6a:40:53:84:f6:f3:cf:5f:8b:db:eb:61:47:39:26:
f9:e6:6c:d9:2b:c8:38:8f:95:77:c1:da:48:4e:62:
b8:a4:45:02:25:32:9b:91:6a:d5:2b:2a:da:77:5c:
0f:9f:2a:58:b7:e3:98:77:91:41:3c:32:4b:0e:01:
2a:af:78:c5:e9:bf:28:ee:fc:22:03:48:c8:df:16:
6a:3e:69:7a:71:88:33:4b:cc:ef:64:37:00:c4:55:
4b:5e:71:e2:2b:9a:7c:95:83:b5:56:70:e2:ff:f4:
d2:f1:ac:23:12:53:1a:f3:b7:31:61:f3:3f:61:70:
01:82:bf:78:2f:04:b4:71:7f:e1:ca:86:5a:e9:66:
7c:50:bb:da:f0:24:8e:d9:a1:2b:a5:fc:81:44:ed:
cc:bb:d5:9e:a2:f4:11:1a:88:e4:cb:cf:92:85:1c:
4e:ec:0b:dd:1c:9d:ab:08:e0:c0:c3:53:12:e0:0c:
6a:59:55:26:b7:8b:a4:dc:23:34:09:b2:94:77:33:
23:a4:19:b9:d7:61:c7:f8:52:71:48:47:5b:44:ac:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:55:81:58:13:A0:FD:89:08:F0:AB:36:29:EF:F9:71:D6:D8:DE
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/47JVgVgToP2JCPCrNinv-XHW2N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:df4::/48
Signature Algorithm: sha256WithRSAEncryption
65:1d:a9:b0:de:ac:78:e5:6c:e1:4d:3c:56:43:5d:97:f8:6f:
91:64:09:05:68:88:19:73:4c:cc:52:57:54:7b:e3:54:70:78:
1e:b1:bc:8a:a2:b0:87:c9:f9:f2:ff:5f:b8:be:7b:6f:4e:1a:
7f:d4:b9:af:7f:56:f0:01:bf:86:4f:59:50:f0:bd:52:91:15:
8b:f4:09:7e:c2:1b:7b:4d:d3:c6:13:81:16:7f:03:e5:38:ce:
c6:34:fe:27:1a:f3:87:c9:5c:16:f8:1b:4d:c8:e1:26:14:25:
c9:66:9c:29:27:52:ac:99:8e:15:7b:75:61:b0:1d:da:44:c3:
65:60:08:9a:17:55:4d:25:6d:54:64:73:c3:44:6a:a3:d4:15:
62:61:b4:0e:75:20:87:83:b1:e6:45:cd:5f:99:77:cf:4f:8b:
3d:f0:6c:13:81:4b:2d:e0:44:49:3a:a2:a0:72:ce:a6:75:c7:
9d:09:0a:ad:a9:60:d9:ef:36:b0:21:1e:00:78:9c:7b:32:71:
02:f5:2c:d6:ac:28:4c:3f:5a:bb:e8:63:4c:79:98:8d:db:78:
26:ec:4c:6c:a3:d1:52:12:44:84:da:af:df:55:fe:d9:e1:2d:
28:aa:96:9c:ea:17:ee:0f:eb:49:20:c9:15:40:1f:cd:5b:23:
a9:aa:cf:5b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZg95XduAETMp4H6wAd6BNbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzNlZjA4MWUyZDU3MzFjNDQ1NzQzOTczYTk2YWJmZGVi
MTQyY2IwHhcNMjUwNzI0MTkyNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IyNTU4MTU4MTNhMGZkODkwOGYwYWIzNjI5ZWZmOTcxZDZkOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kn18J3NpM+XMqbM1O1lBwNwech7
vWlFbiELb0Bg7Z9mazmoCtI6nexcNNZqQFOE9vPPX4vb62FHOSb55mzZK8g4j5V3
wdpITmK4pEUCJTKbkWrVKyrad1wPnypYt+OYd5FBPDJLDgEqr3jF6b8o7vwiA0jI
3xZqPml6cYgzS8zvZDcAxFVLXnHiK5p8lYO1VnDi//TS8awjElMa87cxYfM/YXAB
gr94LwS0cX/hyoZa6WZ8ULva8CSO2aErpfyBRO3Mu9WeovQRGojky8+ShRxO7Avd
HJ2rCODAw1MS4AxqWVUmt4uk3CM0CbKUdzMjpBm512HH+FJxSEdbRKyypQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOOyVYFYE6D9iQjwqzYp7/lx1tjeMB8GA1UdIwQY
MBaAFCxz7wgeLVcxxEV0OXOpar/esULLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTIt
NmRiODI2Yjg3OTk0LzEvNDdKVmdWZ1RvUDJKQ1BDck5pbnYtWEhXMk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTItNmRiODI2Yjg3OTk0
LzEvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA30
MA0GCSqGSIb3DQEBCwUAA4IBAQBlHamw3qx45WzhTTxWQ12X+G+RZAkFaIgZc0zM
UldUe+NUcHgesbyKorCHyfny/1+4vntvThp/1Lmvf1bwAb+GT1lQ8L1SkRWL9Al+
wht7TdPGE4EWfwPlOM7GNP4nGvOHyVwW+BtNyOEmFCXJZpwpJ1KsmY4Ve3VhsB3a
RMNlYAiaF1VNJW1UZHPDRGqj1BViYbQOdSCHg7HmRc1fmXfPT4s98GwTgUst4ERJ
OqKgcs6mdcedCQqtqWDZ7zawIR4AeJx7MnEC9SzWrChMP1q76GNMeZiN23gm7Exs
o9FSEkSE2q/fVf7Z4S0oqpac6hfuD+tJIMkVQB/NWyOpqs9b
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:02 2025 by rpki-client