Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/lEs6g5eluA8OYcvzew0cUO730sU.roa
File: lEs6g5eluA8OYcvzew0cUO730sU.roa (raw, json)
Hash identifier: NpVRDbdHRR1xBWUfgq3Nc+bh893oQNOgoD46/FbiD3A=
Subject key identifier: 94:4B:3A:83:97:A5:B8:0F:0E:61:CB:F3:7B:0D:1C:50:EE:F7:D2:C5
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 01981DA84CCE925D7B22FC091486AADE4489
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/lEs6g5eluA8OYcvzew0cUO730sU.roa
Signing time: Fri 18 Jul 2025 13:10:25 +0000
ROA not before: Fri 18 Jul 2025 13:10:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a05:c341::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:a8:4c:ce:92:5d:7b:22:fc:09:14:86:aa:de:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Jul 18 13:10:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944b3a8397a5b80f0e61cbf37b0d1c50eef7d2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:62:26:0f:d7:e0:f8:04:c5:12:40:a8:15:
6a:35:9d:ad:42:81:c3:7f:65:2b:7c:1e:7f:19:fa:
b7:1c:61:69:2f:94:77:9f:57:40:0b:a5:2c:b4:b5:
f2:75:e3:78:61:27:5a:6f:12:5d:2b:bf:be:4e:bf:
d3:18:d4:90:02:cf:15:75:84:14:f9:4b:d7:17:ad:
7d:e2:47:ae:e8:3e:a3:91:ef:c6:75:5a:7f:eb:b8:
5b:f6:dc:ba:ea:76:6b:e8:dd:cc:cb:8e:0f:5e:f4:
45:17:21:a5:93:d1:25:a9:f4:bf:b3:4b:93:54:85:
c4:cd:cd:57:6d:26:74:00:dd:94:76:fd:34:bb:00:
ee:05:84:68:1b:12:53:7b:85:7c:a0:7e:d6:63:7e:
1b:df:9e:08:08:17:38:65:69:1a:b4:0c:13:ce:08:
e4:e2:2c:2a:3a:8b:78:89:c3:8e:37:21:1d:1d:02:
b5:2c:fa:52:68:b2:de:dc:c7:92:d7:96:8c:bf:7c:
6c:3c:aa:05:14:5d:18:d4:7a:32:20:31:0f:a8:ea:
6e:df:a3:1f:27:d6:15:82:d7:8b:ef:db:5b:27:12:
63:f5:33:b5:06:1f:79:5c:88:9c:aa:5b:11:c5:b3:
b2:fe:eb:fe:32:fe:55:6b:f5:61:54:e7:0c:92:d0:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:3A:83:97:A5:B8:0F:0E:61:CB:F3:7B:0D:1C:50:EE:F7:D2:C5
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/lEs6g5eluA8OYcvzew0cUO730sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c341::/48
Signature Algorithm: sha256WithRSAEncryption
67:1b:5f:73:bd:c6:40:de:5e:fb:7a:54:61:ba:38:99:4d:72:
f2:fe:58:a5:05:98:ee:b9:f7:7e:b5:df:58:47:06:97:6c:e3:
e4:a7:ea:4a:db:71:b3:c9:04:1e:a4:ce:4f:24:49:3a:60:2e:
d7:a8:f8:dd:44:ff:c1:af:2c:8e:12:c1:9c:54:8a:03:71:7c:
58:75:68:78:5d:d9:89:46:2c:7c:c8:09:42:3d:43:f1:d0:c8:
14:0e:8a:94:cb:d4:9c:1a:c4:7d:f7:7d:5e:dd:6a:2f:59:9a:
c3:c3:cd:bf:9a:3f:bb:f3:2a:85:22:b1:e1:27:24:c3:e0:36:
9d:34:5a:35:03:5f:7a:d8:ea:82:89:07:b6:7b:bf:2a:ef:ac:
8a:f3:f0:4e:bc:6b:8f:37:7c:bb:77:56:b2:5d:a3:cf:56:ee:
97:2d:33:e5:ce:42:53:ce:3b:75:0e:44:91:6b:df:f0:ac:91:
a5:f8:2a:f9:67:39:2d:8d:8f:af:bc:a8:fb:3b:cd:0a:93:61:
db:66:6c:0c:8c:2b:9f:e0:d7:a2:a1:ae:30:50:0f:28:6e:a6:
cc:f2:9a:09:81:bb:cf:5c:ce:91:aa:61:f9:93:29:cc:88:51:
d2:57:e7:fc:c5:d2:41:70:2c:c8:a8:63:1d:de:ce:8a:65:fb:
e7:64:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:27:13 2025 by rpki-client