Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/76tIDaYNi1N2qO6sLtaUiuKgmSU.roa
File: 76tIDaYNi1N2qO6sLtaUiuKgmSU.roa (raw, json)
Hash identifier: mKCBp26UirEyIwzwptmSrh1QJX23RPm3t+hak0AH2vk=
Subject key identifier: EF:AB:48:0D:A6:0D:8B:53:76:A8:EE:AC:2E:D6:94:8A:E2:A0:99:25
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 0197F9E11AA67D665CEFC9C370F218600C22
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/76tIDaYNi1N2qO6sLtaUiuKgmSU.roa
Signing time: Fri 11 Jul 2025 14:26:08 +0000
ROA not before: Fri 11 Jul 2025 14:26:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213764
IP address blocks: 2a12:de40:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:e1:1a:a6:7d:66:5c:ef:c9:c3:70:f2:18:60:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jul 11 14:26:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efab480da60d8b5376a8eeac2ed6948ae2a09925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:3f:de:65:66:05:5a:0b:28:34:dd:f6:7d:
e2:95:ae:29:f9:90:9b:65:2c:79:f2:7f:bc:7b:17:
ef:4e:67:47:2a:8f:c0:fc:1b:ad:14:c5:d3:fb:15:
c4:18:63:30:e6:40:ca:47:6a:5f:6d:85:73:ec:7b:
a4:d1:15:12:8c:b4:d8:62:7d:36:c2:09:73:35:db:
36:68:06:85:04:9d:cb:ee:92:ab:25:6f:7c:20:47:
2f:a1:02:25:66:fb:a5:9b:a5:97:e3:a8:1b:14:9f:
ce:7e:b2:89:1a:4f:b8:06:7f:10:52:16:74:dd:ee:
60:8b:a7:a9:db:27:37:7a:40:0c:a7:f9:d7:ea:33:
28:df:8b:0b:e7:74:da:e1:48:44:16:8d:20:cd:69:
d1:56:97:29:f1:d9:5d:cf:8a:88:98:dd:db:a6:ee:
7d:12:ea:f4:f6:db:ec:36:52:9f:30:e1:6a:87:87:
e4:c8:48:d5:0c:08:e2:d1:d4:7b:ae:00:69:05:45:
fc:98:04:4e:83:6d:4a:be:c5:f6:2d:3f:8f:8a:41:
94:48:c1:04:a9:56:33:2b:01:58:a6:86:4e:7c:7c:
15:d3:2f:5f:84:08:6b:c3:4e:a1:b9:40:29:21:2c:
d0:a6:d8:41:05:c4:5e:65:55:36:9f:a9:14:d4:d1:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:48:0D:A6:0D:8B:53:76:A8:EE:AC:2E:D6:94:8A:E2:A0:99:25
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/76tIDaYNi1N2qO6sLtaUiuKgmSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:32::/48
Signature Algorithm: sha256WithRSAEncryption
37:55:19:8a:9c:2c:81:06:9c:da:af:88:d6:24:c1:d3:45:de:
4f:ff:ae:65:3a:91:47:6a:04:c5:cb:1f:11:9b:d8:ae:ce:9e:
7e:8d:79:a3:f4:fb:1b:1f:f5:f4:f8:d6:e8:72:59:02:05:a4:
f4:e2:37:4e:35:bd:34:6e:44:3d:cb:62:6a:e4:3c:36:21:19:
0d:3f:36:e7:83:f1:de:1e:6d:79:92:7a:cc:a7:57:fe:3d:f1:
dc:74:a9:62:17:78:15:28:05:47:2b:fe:cc:b5:03:20:9c:0c:
9a:02:3f:8b:17:6d:b1:dd:37:6b:17:36:78:4e:47:83:02:27:
c5:54:28:8e:ca:5b:7c:a0:9b:5b:5b:18:66:d7:79:21:d9:d0:
97:30:17:5d:38:ad:57:87:9d:09:d5:b7:2b:6b:dc:82:cc:0f:
6f:01:ef:f5:ed:52:eb:5f:8d:a0:2d:3b:47:bb:48:93:d5:05:
57:11:ef:25:52:5a:d3:2f:40:51:de:45:cb:e9:40:d0:19:33:
6f:6f:b7:6a:4f:de:22:26:77:a7:52:52:2a:ec:cd:87:bc:10:
9f:04:81:33:a1:b9:42:31:bf:9b:08:3a:50:9d:8f:51:92:a6:
66:5f:57:91:e2:60:d8:e5:18:73:2a:b5:6b:65:ad:02:d7:2e:
1e:fa:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:30:10 2025 by rpki-client