Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/eE4ib28bVeP5XRp3thITsE1qg-Y.roa
File: eE4ib28bVeP5XRp3thITsE1qg-Y.roa (raw, json)
Hash identifier: T9PrvM15i2k3sQRVMM4hVVwhYL4A9hnlOOw0gstK9go=
Subject key identifier: 78:4E:22:6F:6F:1B:55:E3:F9:5D:1A:77:B6:12:13:B0:4D:6A:83:E6
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0197F50E100DDC3D02A1ADCE6BC0E069C02C
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/eE4ib28bVeP5XRp3thITsE1qg-Y.roa
Signing time: Thu 10 Jul 2025 15:57:08 +0000
ROA not before: Thu 10 Jul 2025 15:57:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:2841::/32 maxlen: 32
2a11:15c2::/32 maxlen: 32
2a11:4a00::/32 maxlen: 32
2a11:b682::/32 maxlen: 32
2a12:4142::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:0e:10:0d:dc:3d:02:a1:ad:ce:6b:c0:e0:69:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jul 10 15:57:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=784e226f6f1b55e3f95d1a77b61213b04d6a83e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:d0:30:1c:d6:fe:19:6d:a8:c2:f2:63:84:
b9:cf:cc:6d:30:e2:d1:2c:af:b3:c1:fe:34:6a:c8:
48:55:13:90:49:13:c3:ed:48:48:dd:47:1d:39:0b:
aa:4a:04:2d:19:e7:6f:5a:ab:9b:8d:b2:6e:d0:49:
fd:44:b0:ca:11:60:50:27:d3:92:f9:91:74:91:93:
74:d9:68:fc:b7:f0:60:b1:1b:aa:44:ec:b8:3b:6f:
99:34:de:ba:b0:8a:68:ee:25:55:63:4b:48:7a:fc:
1d:ab:86:8b:2c:8f:ba:42:7e:f4:5c:ab:ba:7b:86:
c0:e0:fb:51:2f:ab:cb:cf:ef:41:da:33:90:90:81:
c4:cb:66:65:a5:94:a0:4e:66:84:7b:e7:c0:8d:75:
93:45:f6:80:53:09:84:fd:15:33:8b:e1:a6:97:d4:
41:3d:34:e7:3f:a0:24:85:68:5c:5b:3f:05:64:1b:
2f:23:06:47:de:ee:11:08:02:68:05:a8:27:ac:e4:
78:12:0c:c1:8d:7d:70:b3:e1:5a:a1:5b:8f:2a:7d:
e2:af:c3:95:41:0c:3a:8b:e9:b4:68:9a:20:5b:be:
7d:de:ce:4d:5b:b5:be:d7:02:eb:52:c3:57:b3:9a:
38:33:88:06:35:5b:f0:f5:74:de:b7:68:71:a0:1e:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:22:6F:6F:1B:55:E3:F9:5D:1A:77:B6:12:13:B0:4D:6A:83:E6
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/eE4ib28bVeP5XRp3thITsE1qg-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2841::/32
2a11:15c2::/32
2a11:4a00::/32
2a11:b682::/32
2a12:4142::/32
Signature Algorithm: sha256WithRSAEncryption
5a:4e:9a:74:42:3b:ae:c7:d0:fb:10:56:4b:33:4c:e1:09:e8:
62:5a:e0:c6:2d:7f:99:66:a2:c9:b7:9c:e2:86:cc:f6:f8:e9:
c9:c1:96:25:ac:83:32:9c:66:f4:6f:6d:2a:e4:20:8b:98:bf:
79:0f:1a:c4:b0:39:3c:2d:33:e3:0d:11:66:45:b8:03:c1:9e:
7d:96:b9:37:9b:d2:23:90:52:d6:f8:b2:cb:0b:41:f8:47:25:
ce:b3:b4:db:05:28:82:25:04:d0:ab:14:84:35:3c:05:2b:ae:
13:21:bf:6f:c5:d4:a5:4f:ab:2c:b8:ff:a1:3e:4b:5d:58:2d:
d6:3e:8d:74:b9:a2:dc:40:95:80:32:67:ed:61:b8:5a:1d:90:
9d:86:42:20:b8:fa:19:c9:2d:65:90:1d:12:a7:a1:15:23:ff:
d7:b4:8d:18:9a:c4:1b:71:1a:0f:6b:94:06:88:69:65:50:d3:
7f:62:6d:65:be:be:f9:09:d7:0f:d5:33:8b:b7:dc:71:43:77:
45:4e:58:9a:b0:8b:f2:a9:33:67:f4:4c:5b:b9:09:9e:28:16:
0c:3b:29:60:12:2c:61:39:32:9a:1b:97:79:6a:0e:77:80:e4:
6d:44:cf:17:97:ab:59:83:65:41:7f:91:df:5b:4f:b9:5f:80:
07:3b:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 10:42:45 2025 by rpki-client