Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/U5JtxMIhSxoaje6uAcRMq8ZS3H8.roa
File: U5JtxMIhSxoaje6uAcRMq8ZS3H8.roa (raw, json)
Hash identifier: fRbhgJ+CQcIWmmyTrOMolmeDbQ5E+RAYd9FTJGxJGw0=
Subject key identifier: 53:92:6D:C4:C2:21:4B:1A:1A:8D:EE:AE:01:C4:4C:AB:C6:52:DC:7F
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01971D4D00452982B20B27B28CB5E2EE4797
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/U5JtxMIhSxoaje6uAcRMq8ZS3H8.roa
Signing time: Thu 29 May 2025 18:27:55 +0000
ROA not before: Thu 29 May 2025 18:27:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a09:2985::/32 maxlen: 32
2a09:af81::/32 maxlen: 32
2a09:af82::/32 maxlen: 32
2a09:c701::/32 maxlen: 32
2a09:c702::/32 maxlen: 32
2a09:cf01::/32 maxlen: 32
2a09:cf02::/32 maxlen: 32
2a09:d701::/32 maxlen: 32
2a09:d702::/32 maxlen: 32
2a09:dd01::/32 maxlen: 32
2a09:dd02::/32 maxlen: 32
2a09:e301::/32 maxlen: 32
2a09:e701::/32 maxlen: 32
2a09:e702::/32 maxlen: 32
2a09:ef00::/32 maxlen: 32
2a0b:9000::/32 maxlen: 32
2a0b:9002::/32 maxlen: 32
2a0e:3f41::/32 maxlen: 32
2a0e:3f42::/32 maxlen: 32
2a0e:5881::/32 maxlen: 32
2a0e:5882::/32 maxlen: 32
2a14:a404::/32 maxlen: 32
2a14:a407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:4d:00:45:29:82:b2:0b:27:b2:8c:b5:e2:ee:47:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: May 29 18:27:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53926dc4c2214b1a1a8deeae01c44cabc652dc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:28:4d:5b:31:20:db:6e:6a:0e:a6:12:42:
81:11:27:51:6a:58:62:ea:8e:7b:30:13:dc:de:51:
2f:b8:2e:6b:fb:99:2e:d4:e9:88:0e:6c:35:6a:36:
01:8f:77:0f:4c:ce:6b:6c:09:21:f9:c8:45:a0:f3:
21:1f:92:e9:08:47:00:f7:6d:43:01:14:99:04:5f:
55:23:a7:83:b9:5e:a4:78:ef:13:0c:3a:e1:3b:2f:
e6:39:ea:bd:d0:15:93:96:64:b3:b3:97:b4:65:1b:
34:94:88:a1:85:83:50:e5:b2:a7:10:51:fa:4a:a6:
d9:67:6b:8e:c7:b5:40:6b:df:67:5d:b3:b0:66:d2:
10:9b:78:37:c1:e3:be:15:e3:1b:0e:97:e0:54:28:
e1:c4:fc:f1:e2:5b:7e:cc:6f:92:b0:eb:a4:40:6e:
d1:44:19:18:0f:37:b4:5a:1f:fd:03:0d:fc:d7:4e:
04:75:9b:ee:d0:52:3b:9b:7d:c5:c5:f8:81:c9:6a:
a6:cc:e7:6b:0e:b1:08:d1:bc:d0:3c:00:7e:ab:92:
ea:2d:e1:aa:06:58:96:bb:11:92:44:b9:12:19:8f:
c6:1d:74:a1:2c:c4:65:0d:fc:26:56:d9:bb:dd:ca:
51:6d:0d:9b:15:cd:88:f0:17:22:79:bd:73:70:78:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:6D:C4:C2:21:4B:1A:1A:8D:EE:AE:01:C4:4C:AB:C6:52:DC:7F
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/U5JtxMIhSxoaje6uAcRMq8ZS3H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2985::/32
2a09:af81::-2a09:af82:ffff:ffff:ffff:ffff:ffff:ffff
2a09:c701::-2a09:c702:ffff:ffff:ffff:ffff:ffff:ffff
2a09:cf01::-2a09:cf02:ffff:ffff:ffff:ffff:ffff:ffff
2a09:d701::-2a09:d702:ffff:ffff:ffff:ffff:ffff:ffff
2a09:dd01::-2a09:dd02:ffff:ffff:ffff:ffff:ffff:ffff
2a09:e301::/32
2a09:e701::-2a09:e702:ffff:ffff:ffff:ffff:ffff:ffff
2a09:ef00::/32
2a0b:9000::/32
2a0b:9002::/32
2a0e:3f41::-2a0e:3f42:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:5881::-2a0e:5882:ffff:ffff:ffff:ffff:ffff:ffff
2a14:a404::/32
2a14:a407::/32
Signature Algorithm: sha256WithRSAEncryption
0b:08:89:8c:dc:5f:93:3c:55:54:a6:4c:47:6a:fd:aa:51:51:
1d:29:75:76:5c:f0:0f:65:0d:f6:3c:6c:86:f4:e1:c2:a2:22:
7e:59:7f:e7:4e:f5:15:d1:92:50:bf:23:91:dc:80:ce:c4:cb:
dc:11:3c:8a:1c:fb:a6:9d:aa:dd:a6:6e:aa:e6:65:32:70:6b:
17:8e:57:5d:99:75:ea:09:e1:63:a2:96:09:dc:7a:41:7f:c1:
1c:e7:dc:32:29:77:af:c5:0a:f6:b4:10:fb:c6:92:2e:3b:16:
0f:94:eb:c2:c9:28:ed:ad:ac:9c:94:7c:ba:e9:95:ae:73:76:
d3:0c:d3:64:39:3d:6e:45:9f:bb:27:07:b1:fc:07:bd:23:38:
58:52:7c:3f:7b:a8:14:88:9e:15:6e:cb:a5:42:43:73:3c:54:
24:d8:08:f6:37:e4:ff:29:ab:7a:23:e1:f7:8c:ad:57:4d:af:
38:bc:0c:b0:4c:4d:97:13:9d:6b:af:9e:fa:41:84:84:02:42:
5a:3a:5a:b1:f9:db:75:77:1b:a0:1a:06:54:46:45:bd:6e:b3:
65:f9:44:e1:71:b3:f9:e1:e5:a0:b2:e7:98:e6:49:03:33:96:
0a:f1:1c:74:3b:b4:47:fb:02:78:b6:ad:2e:2c:26:9b:71:be:
a4:cc:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:05 2025 by rpki-client