Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/NrckNnjDDAVyb2cHH6s1ewKfYU8.roa
File: NrckNnjDDAVyb2cHH6s1ewKfYU8.roa (raw, json)
Hash identifier: pq1WPPCkEaXOv4KrBJNqiF3lwI1uYKda2L2zrPgfHkw=
Subject key identifier: 36:B7:24:36:78:C3:0C:05:72:6F:67:07:1F:AB:35:7B:02:9F:61:4F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0196D4628CFA5ABF38D8208D7C62ACBDB74B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/NrckNnjDDAVyb2cHH6s1ewKfYU8.roa
Signing time: Thu 15 May 2025 14:39:10 +0000
ROA not before: Thu 15 May 2025 14:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208385
IP address blocks: 2a0c:b641:470::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:62:8c:fa:5a:bf:38:d8:20:8d:7c:62:ac:bd:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 15 14:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b7243678c30c05726f67071fab357b029f614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:f0:94:e7:18:96:82:d8:5f:31:7a:3a:8c:
1f:12:5d:dd:96:e1:45:f5:a9:8c:87:3e:38:1a:49:
09:60:c5:65:bb:25:9f:b2:13:7b:a3:3f:96:b6:8a:
bc:c9:d1:cc:cd:59:70:72:e8:c7:4e:16:2d:a7:47:
9a:78:c5:9f:7d:0e:18:5c:6f:cf:98:19:50:3a:c8:
94:50:b4:87:4a:15:0b:08:66:a7:45:12:7d:c8:00:
c7:13:3a:56:1a:36:7b:ac:36:dc:0b:9f:62:63:d0:
0b:c7:85:fa:fa:6a:7f:47:af:b3:dc:07:a8:8d:b2:
b6:bb:0c:3b:bf:f1:97:e7:16:8d:c5:96:e2:00:dd:
8a:20:c0:cd:7d:2f:1b:c4:8f:e0:94:3d:a8:ab:73:
20:6f:f1:f9:10:d9:1d:1d:63:25:c6:b1:95:f2:2b:
a1:dd:0f:f1:05:bd:26:98:22:58:23:b4:5a:46:a2:
46:83:40:ba:ab:d4:dc:46:89:f3:f7:83:0f:f7:af:
89:88:3b:6c:66:5d:e6:98:ac:51:41:88:7b:58:e8:
33:1f:2c:22:34:fc:30:94:8e:1b:62:21:68:fa:64:
a6:a6:b1:09:8e:e2:70:08:09:42:0d:07:30:05:2a:
27:88:1d:e6:4c:ac:88:58:6f:ea:f4:1d:9c:aa:13:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B7:24:36:78:C3:0C:05:72:6F:67:07:1F:AB:35:7B:02:9F:61:4F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/NrckNnjDDAVyb2cHH6s1ewKfYU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:470::/44
Signature Algorithm: sha256WithRSAEncryption
68:47:45:84:e9:4b:b8:ff:85:b9:6c:62:e1:cf:fc:48:0d:2a:
19:94:5f:51:4d:44:49:86:c5:54:2a:cb:17:a5:6d:08:a3:f1:
c3:be:2c:3b:fe:5f:dc:5a:40:de:d0:44:0c:6c:a0:1f:4e:c4:
b3:b1:34:d3:51:0b:88:87:ce:e5:6b:d1:b6:08:85:7e:4e:89:
8e:c4:90:7c:b7:4b:5d:a0:44:22:58:d5:fe:e3:9c:60:4b:cb:
e1:6c:7c:2a:87:86:a6:25:e8:3a:d5:5f:1e:89:da:3f:30:68:
c5:04:d6:b2:0a:2d:c2:dc:62:b8:b5:b4:73:d6:c6:79:3e:c4:
4c:e5:0d:a9:20:30:a8:c7:ad:05:e2:f4:39:80:bf:eb:f3:22:
2d:95:f3:05:a9:dd:66:2f:97:b1:8f:fd:32:b2:10:54:02:64:
7f:4d:0f:af:44:11:88:60:6d:75:78:84:c7:af:26:05:a7:e2:
65:0c:02:6c:63:fd:4d:3b:bb:02:49:41:1f:36:69:fd:3d:f1:
f6:72:6c:3c:4b:e9:8c:27:2d:5c:e9:93:6e:d6:f8:fd:80:79:
d0:88:f0:67:8f:03:d4:a2:a3:9f:2e:2a:c2:80:eb:a8:21:9c:
1e:d6:db:32:a4:59:da:a8:5a:f1:d1:4e:c7:88:1b:b3:43:c6:
80:5e:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:47:05 2025 by rpki-client