Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/n6BQ2MRyENxhVBKiclROOpxpZ1o.roa
File: n6BQ2MRyENxhVBKiclROOpxpZ1o.roa (raw, json)
Hash identifier: hvit4oFNyb3zRiFEGWssmnZ2Tja79Qsmk5hJ+KnFZzo=
Subject key identifier: 9F:A0:50:D8:C4:72:10:DC:61:54:12:A2:72:54:4E:3A:9C:69:67:5A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196CE097DEB756CE604A22EDFA8AAFB25F2
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/n6BQ2MRyENxhVBKiclROOpxpZ1o.roa
Signing time: Wed 14 May 2025 09:04:10 +0000
ROA not before: Wed 14 May 2025 09:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204335
IP address blocks: 2a10:3c87::/32 maxlen: 32
2a10:3f82::/32 maxlen: 32
2a13:c245::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:09:7d:eb:75:6c:e6:04:a2:2e:df:a8:aa:fb:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 14 09:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa050d8c47210dc615412a272544e3a9c69675a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:6b:01:ca:84:c3:ae:bd:73:4f:91:ee:bd:
9b:75:13:cb:1c:6c:70:be:fb:52:1b:d6:92:10:81:
b4:f6:c4:cd:df:17:a2:91:f9:d0:e6:13:65:2c:59:
e0:55:68:02:f0:97:4c:21:ba:52:9d:58:d4:3a:f8:
68:e6:dc:f2:33:c4:99:37:fd:f1:20:61:79:dd:8c:
18:a0:75:63:44:54:be:3c:8f:46:5b:eb:db:d9:a6:
ea:7f:d8:9e:35:bf:68:a7:34:bf:53:c3:99:cb:62:
12:33:44:28:4c:17:bc:5a:36:37:ca:c8:2c:c1:c3:
71:8d:14:9b:3a:70:27:02:d5:e2:47:dd:34:19:5f:
cf:56:b5:fa:be:5c:70:47:03:66:e2:11:d2:c6:7e:
41:70:28:c4:d0:38:9d:99:b7:71:74:f4:f9:0f:4f:
99:c7:51:6e:f7:82:9e:8e:5c:d2:5c:ff:42:58:75:
f6:12:fb:fe:33:15:0b:c8:0b:76:81:f3:bd:65:39:
15:07:8b:48:a0:7a:e4:1f:6a:34:d2:d3:95:b7:34:
cd:09:14:8f:53:13:6e:12:eb:5f:1e:d7:f1:7f:ee:
56:3f:56:3b:db:ca:cc:5e:45:03:76:a0:67:88:fd:
5f:fd:21:22:10:d9:b4:14:83:1c:c0:c2:93:7a:69:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:50:D8:C4:72:10:DC:61:54:12:A2:72:54:4E:3A:9C:69:67:5A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/n6BQ2MRyENxhVBKiclROOpxpZ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c87::/32
2a10:3f82::/32
2a13:c245::/33
Signature Algorithm: sha256WithRSAEncryption
b5:a8:ff:5f:c0:ba:d3:e7:50:12:13:60:37:60:00:d4:f9:d5:
aa:01:b6:53:42:d4:c6:72:1c:d1:04:c1:cf:64:d1:7a:1f:1d:
46:c8:b1:2f:8b:97:d0:c9:2d:d0:3b:80:88:f2:12:9a:48:58:
cb:69:a4:90:ee:25:73:2d:26:01:31:fc:af:5f:b5:22:97:e9:
0c:38:d0:59:59:21:40:90:be:9e:70:d4:2a:54:cc:b7:b8:74:
5a:81:87:2c:5a:19:ce:8e:4c:87:6e:a1:0e:37:43:47:f1:f8:
30:17:fa:fe:73:7b:8f:e0:cd:45:36:4a:cb:fc:ec:2f:16:90:
d3:e0:51:30:4d:5d:eb:71:2e:81:84:1d:e6:96:f4:a7:bc:a9:
95:fa:fd:c5:ed:ae:de:48:4b:5f:08:8c:7b:c7:7e:21:6b:df:
93:5e:da:33:07:02:1d:b0:3a:8c:0d:b7:e3:56:ef:75:16:1b:
3b:25:55:64:b8:66:6d:e3:4b:b6:fc:f1:a7:9e:68:c5:d6:22:
ca:7a:a0:59:6c:fb:c9:48:e6:23:27:3e:5f:51:9d:0b:db:65:
78:ba:1d:da:52:f0:cd:e6:bc:82:09:9b:37:7c:ec:bc:2e:1a:
9f:c1:6e:c2:91:7e:55:eb:c4:cd:6b:81:ef:d5:1d:54:a4:57:
45:a1:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:05 2025 by rpki-client