Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nOnjPzUOyUfi4NeR4SBqbl4ZQP0.roa
File: nOnjPzUOyUfi4NeR4SBqbl4ZQP0.roa (raw, json)
Hash identifier: gSzhVjDb+1jvGKJAm5OVmnG0ZTbEloY4iI5MYYvF2cI=
Subject key identifier: 9C:E9:E3:3F:35:0E:C9:47:E2:E0:D7:91:E1:20:6A:6E:5E:19:40:FD
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01973C5F7428CDF1748C1DA31CCDDA8EAE90
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nOnjPzUOyUfi4NeR4SBqbl4ZQP0.roa
Signing time: Wed 04 Jun 2025 19:16:17 +0000
ROA not before: Wed 04 Jun 2025 19:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a13:c340::/29 maxlen: 29
2a13:c3c0::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:5f:74:28:cd:f1:74:8c:1d:a3:1c:cd:da:8e:ae:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 4 19:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ce9e33f350ec947e2e0d791e1206a6e5e1940fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:f4:1d:9e:a7:cd:b7:24:7c:3d:32:63:62:
2e:a0:9e:7a:6e:ac:36:b1:21:07:34:aa:07:4b:e6:
31:24:b5:4c:69:1a:9d:0f:8f:53:65:02:4c:fe:4b:
30:ca:44:b7:db:6f:31:59:65:0c:d7:33:9b:b1:24:
42:13:60:51:69:36:3c:07:6f:34:d5:a8:ee:12:28:
1c:8c:e9:d0:b3:4f:f1:2c:74:d8:bb:50:09:c2:41:
b1:d5:de:a5:47:fd:1f:6d:64:b0:3a:0c:9a:56:55:
36:a6:b7:12:b6:57:d5:fd:04:d9:12:7d:16:26:ca:
36:52:71:26:c8:33:88:9a:5b:e6:7b:45:61:1c:58:
47:85:15:21:79:22:13:42:0d:7e:19:01:69:e0:84:
bf:a0:c9:f9:98:07:53:5b:33:3f:31:aa:ad:74:ff:
82:89:2b:d0:f1:d3:16:87:09:6c:2a:94:13:25:7f:
5c:fd:b4:04:13:24:c4:2c:a8:50:1b:59:38:b4:64:
c5:f3:61:8a:e5:01:1d:7f:fa:ef:45:c7:ca:1e:dd:
6f:48:00:48:59:62:9e:d0:19:4f:de:60:eb:d7:44:
a5:f4:40:a5:c7:5f:e5:f7:0a:9a:2a:1f:db:64:94:
a5:18:12:6f:96:3f:14:9e:05:da:f2:95:db:d9:3b:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:E3:3F:35:0E:C9:47:E2:E0:D7:91:E1:20:6A:6E:5E:19:40:FD
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/nOnjPzUOyUfi4NeR4SBqbl4ZQP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
2a13:c3c0::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
bc:94:4d:25:98:70:8e:2a:43:a1:8e:21:ac:b1:be:a6:01:73:
2b:8e:ff:2e:83:bc:63:62:ae:6d:6c:f6:89:65:29:f8:1c:e8:
e5:d7:70:0a:fd:a5:55:cf:d5:8f:af:cb:a5:61:f5:2a:f9:10:
d8:56:22:10:ac:04:5b:e4:f2:ff:06:18:b1:f4:8d:64:8a:17:
68:ac:6a:c0:a0:53:f4:2a:10:d9:54:07:4e:ec:b8:95:db:70:
29:28:f3:bb:38:dc:b4:aa:36:4f:f5:a1:fb:9d:19:3e:5d:c6:
fe:1b:95:0d:55:be:23:af:74:6f:80:84:e3:c8:9b:60:0b:ae:
d2:7b:5d:af:2f:fa:49:75:ef:0c:53:44:52:a3:a8:68:c0:e0:
a8:5f:7d:d1:4f:47:19:31:30:32:9f:6a:65:5b:54:ce:89:d4:
33:41:27:38:dc:1a:15:01:1b:32:2a:fd:b0:5c:84:53:01:3c:
05:28:94:52:41:f8:a3:6a:b2:0e:34:3d:eb:d6:5b:d5:4a:c7:
78:78:2d:30:d8:80:55:4d:b6:43:c2:57:0c:d8:00:c9:d6:97:
22:03:31:8a:bb:87:e2:1c:4a:ff:d2:ed:05:bd:9b:87:a7:91:
c4:3c:35:d0:7a:1c:e0:20:1a:65:bf:1b:ee:f0:4b:8a:51:ac:
53:e0:16:75
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZc8X3QozfF0jB2jHM3ajq6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNjA0MTkxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2U5ZTMzZjM1MGVjOTQ3ZTJlMGQ3OTFlMTIwNmE2ZTVlMTk0MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEr0HZ6nzbckfD0yY2IuoJ56bqw2
sSEHNKoHS+YxJLVMaRqdD49TZQJM/kswykS3228xWWUM1zObsSRCE2BRaTY8B280
1ajuEigcjOnQs0/xLHTYu1AJwkGx1d6lR/0fbWSwOgyaVlU2prcStlfV/QTZEn0W
Jso2UnEmyDOImlvme0VhHFhHhRUheSITQg1+GQFp4IS/oMn5mAdTWzM/MaqtdP+C
iSvQ8dMWhwlsKpQTJX9c/bQEEyTELKhQG1k4tGTF82GK5QEdf/rvRcfKHt1vSABI
WWKe0BlP3mDr10Sl9EClx1/l9wqaKh/bZJSlGBJvlj8UngXa8pXb2TtNfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJzp4z81DslH4uDXkeEgam5eGUD9MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvbk9ualB6VU95VWZpNE5lUjRTQnFibDRaUVAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhPDQAMF
AyoTw8ADBQMqFELAMA0GCSqGSIb3DQEBCwUAA4IBAQC8lE0lmHCOKkOhjiGssb6m
AXMrjv8ug7xjYq5tbPaJZSn4HOjl13AK/aVVz9WPr8ulYfUq+RDYViIQrARb5PL/
Bhix9I1kihdorGrAoFP0KhDZVAdO7LiV23ApKPO7ONy0qjZP9aH7nRk+Xcb+G5UN
Vb4jr3RvgITjyJtgC67Se12vL/pJde8MU0RSo6howOCoX33RT0cZMTAyn2plW1TO
idQzQSc43BoVARsyKv2wXIRTATwFKJRSQfijarIOND3r1lvVSsd4eC0w2IBVTbZD
wlcM2ADJ1pciAzGKu4fiHEr/0u0FvZuHp5HEPDXQehzgIBplvxvu8EuKUaxT4BZ1
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:21:30 2025 by rpki-client