Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uRHtkN64VNcmy2U2pXhjswTrwOM.roa
File: uRHtkN64VNcmy2U2pXhjswTrwOM.roa (raw, json)
Hash identifier: ZIzBxeqpUwCqs8OYiGoTnqSCpKU0WslyJJVQZ9mxwR0=
Subject key identifier: B9:11:ED:90:DE:B8:54:D7:26:CB:65:36:A5:78:63:B3:04:EB:C0:E3
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019817CBC142272F4CF756E5FD1912AB8A89
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uRHtkN64VNcmy2U2pXhjswTrwOM.roa
Signing time: Thu 17 Jul 2025 09:51:25 +0000
ROA not before: Thu 17 Jul 2025 09:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a13:93c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:cb:c1:42:27:2f:4c:f7:56:e5:fd:19:12:ab:8a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jul 17 09:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b911ed90deb854d726cb6536a57863b304ebc0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:e2:ef:68:1f:d4:72:ef:24:e2:04:91:52:
00:87:0c:87:de:66:2e:5d:71:e0:89:74:32:75:50:
88:83:ef:05:10:49:57:d8:7d:c8:61:de:cd:08:31:
f6:fa:d1:77:bf:a0:d3:19:a0:01:89:9c:c8:a8:f4:
b9:9a:fa:7d:cf:d1:8e:8b:43:5e:f5:9c:50:23:25:
3e:44:0c:d7:a4:2f:92:b6:42:ff:25:d2:3b:ff:ca:
c8:ed:6b:dd:16:ec:0f:4c:99:0c:64:23:eb:3d:1a:
29:dd:e3:bc:69:f6:33:02:f7:ee:81:5f:52:5c:90:
38:1b:90:5c:54:fe:dc:74:35:bd:61:18:2f:4b:9a:
7d:2c:e9:4a:cb:a2:bb:f5:8d:ea:18:90:94:28:7c:
73:35:ad:98:b3:dd:14:80:64:2f:6a:c6:5c:48:24:
03:01:a9:cc:12:d3:fc:1a:cd:8b:cd:04:63:74:85:
12:b6:e0:fd:38:f2:73:f8:2d:5b:6c:4c:0a:9a:e4:
59:a8:90:29:88:4b:8e:4d:23:5b:50:18:4f:34:82:
0e:c3:b1:dc:7e:d7:6d:4b:c7:70:77:5a:62:ae:65:
38:dd:1f:07:1c:94:d8:d4:8f:b6:35:b8:65:c2:c5:
50:10:a4:ce:98:ef:da:ff:71:a4:9a:2b:c5:b0:32:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:ED:90:DE:B8:54:D7:26:CB:65:36:A5:78:63:B3:04:EB:C0:E3
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uRHtkN64VNcmy2U2pXhjswTrwOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:93c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:a7:d6:dc:b3:95:bc:57:05:2d:45:2d:e0:4a:15:49:00:b3:
9d:cf:ef:e5:ac:ce:78:88:20:57:15:ec:ba:08:52:cb:3b:23:
74:16:0e:88:76:87:6c:31:c4:b1:ca:0e:d5:0f:4f:0e:a3:19:
ba:cf:68:7a:de:e8:64:57:bb:ef:8a:b0:cb:0b:d9:f4:ef:71:
3a:b6:39:ab:37:44:dc:cb:f6:13:58:c4:4f:08:e7:e0:ae:ee:
9e:a6:a6:7e:25:d9:5a:87:26:e8:51:78:42:22:8f:fe:f9:78:
9b:44:ae:18:78:89:62:aa:c8:7a:99:29:4b:eb:da:4a:18:2e:
30:8e:e3:9a:a5:c3:3c:9f:fa:14:4a:02:2a:ee:81:e8:ac:22:
f1:60:87:87:4d:89:66:9d:be:38:94:55:ed:f4:83:ec:02:1f:
78:80:2c:47:84:db:7d:0e:74:50:15:8a:54:90:f8:bb:41:b0:
c7:57:dd:25:ac:75:13:f4:1d:10:4d:bc:58:d7:91:52:8e:01:
10:dc:1a:b9:84:8d:b8:4f:dd:d4:d6:f2:51:5d:f1:3f:3f:53:
e2:1e:07:ae:6a:ab:e9:d9:92:45:4a:f9:bc:0f:c2:f6:bb:c8:
32:14:e6:5c:57:cb:04:4a:9e:bd:b0:fa:f7:d5:ae:e7:9b:8f:
cb:6c:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:37:27 2025 by rpki-client