Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-Sj_RNQEQYVYr-uXf-MXPax2NTw.roa
File: 1-Sj_RNQEQYVYr-uXf-MXPax2NTw.roa (raw, json)
Hash identifier: 9bBx/OGBPCt2FOHR0iFIZOAjZPdilj4n2BwnufXH8uE=
Subject key identifier: F9:28:FF:44:D4:04:41:85:58:AF:EB:97:7F:E3:17:3D:AC:76:35:3C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197112609A021EDCD5617DA6C38C7E0F708
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-Sj_RNQEQYVYr-uXf-MXPax2NTw.roa
Signing time: Tue 27 May 2025 09:49:54 +0000
ROA not before: Tue 27 May 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206535
IP address blocks: 2a05:9a44::/32 maxlen: 32
2a13:c444::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:26:09:a0:21:ed:cd:56:17:da:6c:38:c7:e0:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f928ff44d404418558afeb977fe3173dac76353c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:41:96:ba:a8:fe:c0:ed:a8:6e:75:6f:a8:
7f:d9:8b:27:bb:18:28:5e:02:ac:31:91:f5:a2:cc:
4a:2d:7b:6a:d6:e5:60:8f:38:a7:9a:14:36:88:0b:
e7:e7:29:39:71:d1:96:6f:94:0f:d1:b6:c4:e6:80:
5e:69:6f:e5:45:4d:70:e4:1c:65:7a:6c:c8:78:fe:
74:3f:99:87:b4:05:b6:31:03:24:9e:2d:1c:11:30:
13:a2:db:72:aa:0f:f9:76:c7:74:cc:41:86:00:86:
7c:8e:62:9e:cf:4b:79:05:54:e8:17:ad:b6:61:8d:
e7:9b:ee:e4:83:da:13:79:39:7c:f0:c1:22:51:3f:
9d:0c:0c:f2:37:7e:06:22:49:26:14:2b:ce:cb:b8:
81:2f:ad:08:0c:15:77:95:68:2c:70:58:9f:39:64:
66:c5:64:d2:ac:3e:16:96:06:48:36:fc:1b:2c:2e:
a2:9d:ef:29:b1:31:8f:aa:ff:8b:79:26:46:32:c4:
25:2d:2a:12:9c:fc:ed:6e:b8:98:b2:84:30:36:99:
68:62:dd:02:c3:ba:69:8d:70:bc:26:1b:d1:a6:30:
ea:5a:16:32:f8:b4:be:60:76:62:83:74:60:93:31:
8e:ba:b7:4d:3d:43:43:c8:e7:18:2b:3c:b7:d7:8a:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:FF:44:D4:04:41:85:58:AF:EB:97:7F:E3:17:3D:AC:76:35:3C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-Sj_RNQEQYVYr-uXf-MXPax2NTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a44::/32
2a13:c444::/32
Signature Algorithm: sha256WithRSAEncryption
dc:5c:54:be:d7:a7:0a:80:e8:66:57:b1:3f:89:25:c9:15:18:
ec:ec:89:c9:31:44:d5:a5:8c:5f:89:fa:5c:57:88:a0:37:7d:
eb:a1:ec:c9:1c:f6:43:37:b4:f9:b9:c4:6c:05:48:d0:5d:54:
fe:1d:f7:d4:53:ca:eb:30:16:20:ba:81:b6:3a:d6:5c:b7:84:
fc:23:c9:90:ce:ae:4f:e1:06:52:7c:e1:a2:cd:82:f9:f9:d9:
7e:58:40:4d:30:cb:dd:be:21:9f:1c:ae:36:51:09:ce:04:2d:
c0:16:57:7e:bb:3d:2e:2c:05:eb:e2:f5:ee:65:13:70:1a:24:
20:40:6e:24:8c:4f:12:99:05:51:c4:cd:4c:6e:c0:ad:4a:3e:
34:ef:85:b4:11:94:9b:42:10:3e:2e:09:f1:e9:98:3a:96:35:
ca:43:09:c9:d5:b9:48:60:00:74:cc:ef:9c:a5:b7:79:fa:4d:
ec:0b:c7:b4:aa:ab:55:eb:2c:15:ec:49:a6:15:6d:51:83:d9:
e8:d7:8b:09:1f:05:4b:92:dc:a6:8f:f7:ff:65:e9:24:07:fe:
6b:6d:e5:4e:31:b2:89:aa:52:08:cf:f8:72:1e:4f:e9:f4:bc:
f6:dd:ec:11:92:77:05:f6:f9:68:8d:01:b2:31:b4:0e:88:e2:
cf:ce:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:03 2025 by rpki-client