Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa
File: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (raw, json)
Hash identifier: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=
Subject key identifier: 4E:FD:DE:1E:44:E2:6E:ED:7E:34:A6:B3:5E:3F:80:32:43:23:ED:2C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019735846217F3DB8BB5EB0A3976C68603F5
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa
Signing time: Tue 03 Jun 2025 11:19:17 +0000
ROA not before: Tue 03 Jun 2025 11:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215881
IP address blocks: 2a0d:d940:60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:84:62:17:f3:db:8b:b5:eb:0a:39:76:c6:86:03:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 3 11:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4efdde1e44e26eed7e34a6b35e3f80324323ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:3c:f7:c0:d5:1e:b3:41:71:6f:d1:72:b7:
f0:e1:78:02:b2:a4:22:58:10:cc:4e:ca:d2:fa:da:
52:70:f8:85:ca:ca:f1:f5:30:eb:2f:69:7b:ab:cc:
96:59:bd:83:01:d0:23:fb:86:90:7e:c8:c2:b2:0d:
0e:bb:47:1e:e7:16:a5:77:2f:f1:2e:26:8f:e6:18:
82:53:dc:6c:c2:af:9a:d0:c4:b1:b2:56:7c:aa:f9:
cb:b3:ab:d6:51:dc:29:5a:79:f5:4e:7a:08:82:f6:
0d:32:f9:a4:15:d5:f2:25:7e:fe:51:6b:41:36:1a:
74:6d:de:e3:5b:7c:ae:1d:47:bb:b1:90:9f:3c:ff:
09:98:44:46:07:e0:dd:a6:b0:17:31:83:17:b4:98:
fe:7a:fc:fb:0c:ce:c9:1e:e4:59:a8:7f:0f:2a:bd:
b8:34:8d:c3:0c:84:6e:7d:4a:16:8a:02:e4:2f:e5:
9b:cc:59:f6:bc:65:f6:ac:a4:da:f1:02:a7:1b:68:
83:02:ff:92:91:dc:02:45:05:21:18:f6:89:ff:df:
63:15:ae:9c:6c:c7:1d:e0:e0:b3:fe:15:14:c2:2f:
c0:f0:cb:c2:8d:07:28:34:f7:ad:07:9a:f1:f5:71:
03:92:3e:0d:c4:d9:a0:c8:2f:16:eb:a2:84:5c:c7:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FD:DE:1E:44:E2:6E:ED:7E:34:A6:B3:5E:3F:80:32:43:23:ED:2C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:60::/44
Signature Algorithm: sha256WithRSAEncryption
1b:00:33:4a:9b:99:10:ab:55:05:d6:e0:b8:c0:aa:12:2e:81:
73:ce:44:1b:d1:29:83:b5:71:f5:ab:60:74:8f:92:b1:ed:7c:
1a:27:c8:a9:b5:e6:61:21:db:c2:35:20:ca:de:7b:30:f8:39:
33:44:57:5d:37:0d:11:be:50:0d:9b:ae:21:cf:f5:a0:2a:6c:
01:32:68:06:e2:ac:67:96:3a:fd:00:b7:15:d7:13:64:c2:da:
2a:9a:4d:98:ae:26:cb:67:54:32:dd:0c:ad:5e:b3:f3:04:2a:
93:48:98:a7:d5:bd:0f:48:d2:44:3b:8f:a1:d7:65:9b:8f:3f:
5a:52:65:b1:63:28:4f:ea:67:c9:fd:49:cf:33:54:aa:8c:d3:
03:ac:91:8c:9d:bd:54:61:3b:68:47:f4:47:bf:18:6c:82:c9:
19:32:6e:d7:39:d5:5b:5b:44:84:38:27:ba:e6:b3:53:53:55:
d6:fe:9f:57:63:d6:ae:a8:dc:0c:78:51:06:5a:58:62:ef:13:
e4:bb:98:c8:58:b5:27:22:43:14:18:6e:1f:36:b2:0c:18:3c:
10:9e:98:3b:24:1c:5b:e8:f7:a9:14:48:05:7b:e8:5b:b0:d2:
20:54:cc:42:eb:7e:56:6d:f8:98:82:7f:ee:02:d4:5d:da:d1:
e4:ce:ba:eb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZc1hGIX89uLtesKOXbGhgP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwNjAzMTExOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWZkZGUxZTQ0ZTI2ZWVkN2UzNGE2YjM1ZTNmODAzMjQzMjNlZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O4898DVHrNBcW/Rcrfw4XgCsqQi
WBDMTsrS+tpScPiFysrx9TDrL2l7q8yWWb2DAdAj+4aQfsjCsg0Ou0ce5xaldy/x
LiaP5hiCU9xswq+a0MSxslZ8qvnLs6vWUdwpWnn1TnoIgvYNMvmkFdXyJX7+UWtB
Nhp0bd7jW3yuHUe7sZCfPP8JmERGB+DdprAXMYMXtJj+evz7DM7JHuRZqH8PKr24
NI3DDIRufUoWigLkL+WbzFn2vGX2rKTa8QKnG2iDAv+SkdwCRQUhGPaJ/99jFa6c
bMcd4OCz/hUUwi/A8MvCjQcoNPetB5rx9XEDkj4NxNmgyC8W66KEXMck8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFE793h5E4m7tfjSms14/gDJDI+0sMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvVHYzZUhrVGlidTEtTkthelhqLUFNa01qN1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQABg
MA0GCSqGSIb3DQEBCwUAA4IBAQAbADNKm5kQq1UF1uC4wKoSLoFzzkQb0SmDtXH1
q2B0j5Kx7XwaJ8ipteZhIdvCNSDK3nsw+DkzRFddNw0RvlANm64hz/WgKmwBMmgG
4qxnljr9ALcV1xNkwtoqmk2YribLZ1Qy3QytXrPzBCqTSJin1b0PSNJEO4+h12Wb
jz9aUmWxYyhP6mfJ/UnPM1SqjNMDrJGMnb1UYTtoR/RHvxhsgskZMm7XOdVbW0SE
OCe65rNTU1XW/p9XY9auqNwMeFEGWlhi7xPku5jIWLUnIkMUGG4fNrIMGDwQnpg7
JBxb6PepFEgFe+hbsNIgVMxC635WbfiYgn/uAtRd2tHkzrrr
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:05 2025 by rpki-client