Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bM_Iaz-e7SFhjTlCOlfH38QQEu0.roa
File: bM_Iaz-e7SFhjTlCOlfH38QQEu0.roa (raw, json)
Hash identifier: 59ugGYpj8Ylw7qsK5c74bFJudsIUYoI+xecN3ju8tZc=
Subject key identifier: 6C:CF:C8:6B:3F:9E:ED:21:61:8D:39:42:3A:57:C7:DF:C4:10:12:ED
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0195ADBA1BCE5ECCA8E8A60DABDB4603F2E6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bM_Iaz-e7SFhjTlCOlfH38QQEu0.roa
Signing time: Wed 19 Mar 2025 09:26:50 +0000
ROA not before: Wed 19 Mar 2025 09:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212997
IP address blocks: 2a0c:9a40:8f20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:ba:1b:ce:5e:cc:a8:e8:a6:0d:ab:db:46:03:f2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 19 09:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccfc86b3f9eed21618d39423a57c7dfc41012ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:aa:16:42:56:9c:7b:39:64:f9:a0:c7:95:
ae:f1:d1:3a:92:66:0f:66:05:58:0d:38:54:17:d2:
fc:9c:e2:2f:6f:65:56:5d:06:3f:21:71:3b:8b:b0:
ec:35:9f:28:66:6c:42:07:40:f4:78:26:4a:b3:80:
68:42:b3:3e:64:aa:e4:e1:18:e0:13:5d:8f:a2:40:
6e:91:d3:f7:92:1c:61:aa:76:e2:c8:97:0c:85:ea:
f2:fb:1e:b2:e0:29:b2:35:fb:2f:fb:6d:db:08:2d:
97:23:9a:95:d7:fd:cb:1a:c9:9b:41:14:9a:15:12:
4f:f7:78:71:c2:35:66:07:d7:e6:2d:68:5b:5c:60:
3c:12:ac:7b:c5:e2:d0:57:c4:7c:d4:f3:20:7a:d0:
29:43:4e:f9:7a:01:c6:cd:ad:0d:d8:81:b2:45:5c:
58:85:37:5c:4a:88:16:34:73:a4:f8:43:1e:66:c0:
28:de:5c:6a:d5:68:c0:cf:e4:25:58:cd:67:1a:81:
f0:aa:04:e1:6f:be:e0:96:a8:66:f0:53:af:42:34:
88:a3:79:7e:84:0f:5b:a4:a8:ff:7f:78:97:15:3a:
41:5f:7a:d5:2e:24:54:3f:16:c1:b0:b1:51:98:18:
a2:aa:96:55:2a:53:3a:f2:84:b9:74:ae:e1:b8:02:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:C8:6B:3F:9E:ED:21:61:8D:39:42:3A:57:C7:DF:C4:10:12:ED
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bM_Iaz-e7SFhjTlCOlfH38QQEu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8f20::/48
Signature Algorithm: sha256WithRSAEncryption
bb:9b:50:a7:ec:d1:ad:c9:8c:e9:ee:84:4a:25:ef:74:e1:42:
dc:b6:33:6e:0e:6d:2d:20:ae:6a:09:4d:44:f9:0d:37:83:13:
b0:b8:18:a7:81:be:e5:0f:29:56:14:12:b4:23:63:ef:4e:ba:
12:b8:cb:b1:aa:33:ec:14:2d:b6:bc:cf:59:a7:7a:28:b7:cb:
06:eb:2e:9f:60:63:e0:3a:2d:3b:14:e3:ac:79:3b:e2:a2:c9:
cf:3b:4e:2a:9c:e6:90:8b:cc:bc:c2:66:68:76:74:e3:cd:9d:
40:c4:61:cb:25:f3:39:9e:c6:e4:39:26:ef:82:f9:8b:f2:62:
3b:b9:35:e0:50:2b:ab:96:36:5f:32:12:0e:fe:b1:ea:60:01:
7e:1d:79:21:1e:15:4b:a8:2c:4a:14:e6:ef:ea:ce:6b:9f:96:
a0:e9:14:5c:c5:7f:e6:12:b3:71:36:af:ea:c3:eb:64:71:4b:
99:cb:b4:f1:c0:45:22:8a:29:1b:bd:20:df:2d:e7:de:4d:47:
e5:6c:09:5e:1f:64:cb:6b:3e:92:7e:1d:11:ff:a2:11:0c:b2:
ec:72:2d:6d:66:99:1f:3d:f8:38:c5:b6:fa:63:47:5f:5e:37:
9a:4e:0f:1b:11:1a:16:06:9e:95:dc:18:65:af:8d:81:52:1c:
a3:4c:f2:ed
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZWtuhvOXsyo6KYNq9tGA/LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMzE5MDkyNjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2NmYzg2YjNmOWVlZDIxNjE4ZDM5NDIzYTU3YzdkZmM0MTAxMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfaqFkJWnHs5ZPmgx5Wu8dE6kmYP
ZgVYDThUF9L8nOIvb2VWXQY/IXE7i7DsNZ8oZmxCB0D0eCZKs4BoQrM+ZKrk4Rjg
E12PokBukdP3khxhqnbiyJcMhery+x6y4CmyNfsv+23bCC2XI5qV1/3LGsmbQRSa
FRJP93hxwjVmB9fmLWhbXGA8Eqx7xeLQV8R81PMgetApQ075egHGza0N2IGyRVxY
hTdcSogWNHOk+EMeZsAo3lxq1WjAz+QlWM1nGoHwqgThb77glqhm8FOvQjSIo3l+
hA9bpKj/f3iXFTpBX3rVLiRUPxbBsLFRmBiiqpZVKlM68oS5dK7huAIiWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGzPyGs/nu0hYY05QjpXx9/EEBLtMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvYk1fSWF6LWU3U0ZoalRsQ09sZkgzOFFRRXUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI8g
MA0GCSqGSIb3DQEBCwUAA4IBAQC7m1Cn7NGtyYzp7oRKJe904ULctjNuDm0tIK5q
CU1E+Q03gxOwuBingb7lDylWFBK0I2PvTroSuMuxqjPsFC22vM9Zp3oot8sG6y6f
YGPgOi07FOOseTviosnPO04qnOaQi8y8wmZodnTjzZ1AxGHLJfM5nsbkOSbvgvmL
8mI7uTXgUCurljZfMhIO/rHqYAF+HXkhHhVLqCxKFObv6s5rn5ag6RRcxX/mErNx
Nq/qw+tkcUuZy7TxwEUiiikbvSDfLefeTUflbAleH2TLaz6Sfh0R/6IRDLLsci1t
ZpkfPfg4xbb6Y0dfXjeaTg8bERoWBp6V3Bhlr42BUhyjTPLt
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:55 2025 by rpki-client