Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/6UgRSurDsC4U_Z-coy4m9ck_PTE.roa
File: 6UgRSurDsC4U_Z-coy4m9ck_PTE.roa (raw, json)
Hash identifier: Gc7vGClKENwmv400RX8IX+GSl1SNec8S1cBZiJZAltM=
Subject key identifier: E9:48:11:4A:EA:C3:B0:2E:14:FD:9F:9C:A3:2E:26:F5:C9:3F:3D:31
Certificate issuer: /CN=7a80fe5635e6d65cede93b23d4e101d4075337a1
Certificate serial: 019716C0EB0E408938C7C149A1C08FA1137C
Authority key identifier: 7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/6UgRSurDsC4U_Z-coy4m9ck_PTE.roa
Signing time: Wed 28 May 2025 11:57:11 +0000
ROA not before: Wed 28 May 2025 11:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211854
IP address blocks: 2001:678:1088::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:c0:eb:0e:40:89:38:c7:c1:49:a1:c0:8f:a1:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a80fe5635e6d65cede93b23d4e101d4075337a1
Validity
Not Before: May 28 11:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e948114aeac3b02e14fd9f9ca32e26f5c93f3d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:36:59:e7:7a:aa:70:04:3b:df:a7:3f:58:
f1:21:1f:3e:1f:4c:14:ed:94:17:94:ad:3a:36:c0:
cb:76:ef:8f:f7:93:43:10:62:97:0c:af:7f:10:59:
95:e9:df:f4:75:ab:05:42:ec:6e:57:54:e8:d5:29:
97:c0:a9:98:1c:b7:0d:8f:37:9e:e7:e8:73:ad:9c:
b3:83:bc:29:1b:16:6a:29:2b:b4:7d:92:ee:02:6b:
58:65:a9:88:9c:c2:23:5c:1d:03:96:d5:5f:15:e3:
21:6f:1f:96:0c:80:de:f6:a3:1b:0d:25:db:38:34:
c8:5b:72:65:c0:e6:e4:a0:c7:6c:b8:9b:8d:4c:0b:
17:83:05:0c:ee:27:1f:a1:b8:f4:fa:89:df:da:12:
02:5c:72:18:b3:c7:51:30:e3:38:1a:c2:29:e7:1d:
de:93:ab:ca:da:f7:32:bc:4d:12:a9:b0:a7:a0:4c:
58:93:12:b4:44:27:1b:c3:43:12:ca:12:43:d6:38:
89:0c:c9:b1:fd:b0:be:fe:b8:69:52:2f:f1:45:b2:
bb:b3:cb:44:21:64:1e:f3:e4:85:f2:79:a2:58:93:
9d:67:ce:35:8e:9a:be:39:4e:9f:ea:30:b4:94:c3:
61:53:c4:94:90:31:64:66:b9:d8:a2:cc:ce:d9:1d:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:11:4A:EA:C3:B0:2E:14:FD:9F:9C:A3:2E:26:F5:C9:3F:3D:31
X509v3 Authority Key Identifier:
keyid:7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/6UgRSurDsC4U_Z-coy4m9ck_PTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1088::/48
Signature Algorithm: sha256WithRSAEncryption
50:98:19:f8:4d:5e:0c:a5:be:15:77:8b:65:47:34:b5:6b:29:
30:c4:04:17:07:2b:00:3f:6d:0a:c9:cf:54:40:0b:3a:43:a2:
f7:52:91:71:fe:9e:bc:cb:8f:97:c0:60:6d:a2:3c:36:63:18:
92:78:ef:d0:0b:38:0f:bb:6d:cc:40:ca:a8:2a:b9:a0:54:ef:
be:ca:c3:bb:29:18:bc:2c:6c:65:e9:a6:4a:b5:97:8a:db:63:
ce:77:67:ae:d4:97:20:66:76:b0:4d:33:9e:39:94:97:66:34:
ad:1a:19:db:9e:d0:56:07:f7:9b:4d:9c:88:ad:31:30:a4:d9:
93:eb:f1:03:d3:8b:72:7b:9c:4a:4c:0c:80:fe:4d:8c:c7:d3:
ca:ae:81:d5:ae:fe:a9:59:5a:87:d6:d5:4f:c8:7b:f2:ea:cc:
fa:74:1b:2d:42:1c:05:fd:af:e1:bb:ce:86:04:fe:a9:30:52:
dd:75:13:36:a5:86:f2:2e:91:d5:55:f6:3f:c5:bc:56:51:67:
52:92:88:33:54:e6:5e:88:c9:0c:0f:be:51:1d:a5:4d:a6:0f:
ee:97:f6:e6:32:e4:ac:2f:d5:d5:c9:7c:58:83:d0:5e:9b:12:
2f:e4:9a:a8:9f:41:06:c4:07:69:63:e2:3a:02:ff:f5:5c:a3:
54:1c:60:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZcWwOsOQIk4x8FJocCPoRN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODBmZTU2MzVlNmQ2NWNlZGU5M2IyM2Q0ZTEwMWQ0MDc1
MzM3YTEwHhcNMjUwNTI4MTE1NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQ4MTE0YWVhYzNiMDJlMTRmZDlmOWNhMzJlMjZmNWM5M2YzZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk382Wed6qnAEO9+nP1jxIR8+H0wU
7ZQXlK06NsDLdu+P95NDEGKXDK9/EFmV6d/0dasFQuxuV1To1SmXwKmYHLcNjzee
5+hzrZyzg7wpGxZqKSu0fZLuAmtYZamInMIjXB0DltVfFeMhbx+WDIDe9qMbDSXb
ODTIW3JlwObkoMdsuJuNTAsXgwUM7icfobj0+onf2hICXHIYs8dRMOM4GsIp5x3e
k6vK2vcyvE0SqbCnoExYkxK0RCcbw0MSyhJD1jiJDMmx/bC+/rhpUi/xRbK7s8tE
IWQe8+SF8nmiWJOdZ841jpq+OU6f6jC0lMNhU8SUkDFkZrnYoszO2R2mOQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOlIEUrqw7AuFP2fnKMuJvXJPz0xMB8GA1UdIwQY
MBaAFHqA/lY15tZc7ek7I9ThAdQHUzehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEt
MzI4MWMwZThlOWZlLzEvNlVnUlN1ckRzQzRVX1otY295NG05Y2tfUFRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEtMzI4MWMwZThlOWZl
LzEvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBCI
MA0GCSqGSIb3DQEBCwUAA4IBAQBQmBn4TV4Mpb4Vd4tlRzS1aykwxAQXBysAP20K
yc9UQAs6Q6L3UpFx/p68y4+XwGBtojw2YxiSeO/QCzgPu23MQMqoKrmgVO++ysO7
KRi8LGxl6aZKtZeK22POd2eu1JcgZnawTTOeOZSXZjStGhnbntBWB/ebTZyIrTEw
pNmT6/ED04tye5xKTAyA/k2Mx9PKroHVrv6pWVqH1tVPyHvy6sz6dBstQhwF/a/h
u86GBP6pMFLddRM2pYbyLpHVVfY/xbxWUWdSkogzVOZeiMkMD75RHaVNpg/ul/bm
MuSsL9XVyXxYg9BemxIv5Jqon0EGxAdpY+I6Av/1XKNUHGAa
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:22 2025 by rpki-client