Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/MD8YhTy9EKG2lgFc9m8ik4GhJRk.roa
File: MD8YhTy9EKG2lgFc9m8ik4GhJRk.roa (raw, json)
Hash identifier: jyX/8Ru7tAFTYp+q7WKTEpKOpJiWOjnGOfIDXKrSYJs=
Subject key identifier: 30:3F:18:85:3C:BD:10:A1:B6:96:01:5C:F6:6F:22:93:81:A1:25:19
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 0197410B2176147FDDC81620BF63BCD66E79
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/MD8YhTy9EKG2lgFc9m8ik4GhJRk.roa
Signing time: Thu 05 Jun 2025 17:02:17 +0000
ROA not before: Thu 05 Jun 2025 17:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff00::/48 maxlen: 48
2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff20::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
2a03:2887:ff71::/48 maxlen: 48
2a03:2887:ff72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:0b:21:76:14:7f:dd:c8:16:20:bf:63:bc:d6:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jun 5 17:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=303f18853cbd10a1b696015cf66f229381a12519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:00:74:57:36:2b:32:9b:27:d4:b5:98:b6:
bd:94:b0:a0:4e:a4:df:73:f8:fc:14:f6:c5:9b:f9:
af:6b:c0:3c:e3:88:f1:38:23:4d:61:89:91:9f:e4:
51:4b:ed:f2:10:32:ef:75:ad:aa:07:3f:de:42:95:
4d:34:33:18:80:a7:32:25:54:fd:46:be:15:4d:5f:
e1:b4:d9:25:1e:93:b9:1e:8e:4c:ff:ae:c5:4e:da:
d4:f3:0c:06:c9:9f:bc:f4:5d:0a:b5:0b:30:b7:20:
15:9d:27:66:3e:73:eb:25:3e:92:10:76:56:d2:c0:
28:fb:db:f1:39:aa:6d:33:db:a3:69:65:50:dd:31:
aa:3d:49:20:30:00:4e:c6:8d:19:cf:55:10:03:6c:
d7:f1:8f:3f:a5:77:31:a5:64:e1:6b:db:af:fe:78:
a3:de:d2:e9:22:da:b2:e2:cf:81:4b:63:3c:01:04:
39:84:12:dc:da:99:c9:69:d3:e0:df:1c:73:f0:14:
6d:66:ab:5f:06:e4:f6:fc:88:76:dc:01:16:ca:6d:
0c:8a:28:ab:f6:41:4c:a5:78:89:93:70:1a:8f:2f:
e2:1b:aa:59:ad:64:38:08:d7:f3:c1:52:6f:2a:3b:
ec:40:3c:de:96:51:15:cd:04:04:24:f9:3f:6f:38:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:18:85:3C:BD:10:A1:B6:96:01:5C:F6:6F:22:93:81:A1:25:19
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/MD8YhTy9EKG2lgFc9m8ik4GhJRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff00::/48
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff21:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff69:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff70::-2a03:2887:ff72:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:b0:88:bd:6a:e8:34:45:90:12:07:ce:9b:4a:43:74:43:a0:
45:4b:b5:ae:bc:96:7b:95:1e:8d:4d:73:75:b4:84:c1:88:aa:
c8:fb:9c:4c:6b:08:ad:ae:87:db:43:55:af:74:5a:2f:48:06:
5b:dc:97:a5:d0:2d:09:58:34:e2:5a:7d:75:2d:4e:d2:3f:05:
d8:a0:97:63:9d:ed:46:da:e2:f2:06:24:09:24:9f:a9:88:42:
75:5d:19:21:40:6e:89:28:9b:90:62:11:93:e9:b5:df:d7:90:
3e:e2:0b:be:92:6d:f3:66:a5:b6:53:d2:7a:4f:b2:d8:fe:69:
03:ad:d7:2c:e0:a0:7e:55:24:12:17:c9:7f:5f:cd:6c:a2:14:
a9:e4:69:88:a1:46:f0:03:49:47:4b:1f:a6:e3:36:d9:22:91:
87:5f:9a:d6:d1:22:08:65:18:ad:0d:3f:b7:9f:21:a0:1c:c4:
3c:dc:e8:51:bf:06:70:cd:3f:00:be:21:2e:24:93:c4:e5:2b:
b7:3c:f1:cf:f1:cd:8b:aa:60:15:08:01:a9:52:28:dd:f8:55:
41:d6:61:3e:67:9a:cc:c8:30:c8:52:b7:f2:b0:b9:b9:8e:43:
f2:6e:c0:66:5a:98:57:1e:5b:b2:e9:7f:d3:ef:c9:4e:57:c3:
2d:af:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:05:39 2025 by rpki-client