Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa
File: yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa (raw, json)
Hash identifier: YWCevYeGrsDTRNW9HGKxCubEWRJxVpXV1huOUXJtDd0=
Subject key identifier: C8:8A:5B:16:A6:FA:52:D6:7F:EA:B5:BF:14:36:C2:41:31:F7:2C:C9
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 0196D9234883D608FA8A68AB10F64D29F37C
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa
Signing time: Fri 16 May 2025 12:48:10 +0000
ROA not before: Fri 16 May 2025 12:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214169
IP address blocks: 69.172.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:23:48:83:d6:08:fa:8a:68:ab:10:f6:4d:29:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: May 16 12:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88a5b16a6fa52d67feab5bf1436c24131f72cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:e8:48:cb:76:f1:ac:e6:69:fb:e4:7c:11:
c1:ee:b0:f1:57:32:03:89:cc:3f:66:4d:39:f9:07:
89:0b:80:8b:6c:bd:fe:5c:9b:fd:de:57:ff:35:9a:
0c:e0:fd:88:ba:60:ff:77:86:79:66:f2:39:1b:33:
b8:4f:48:d2:76:f4:74:4d:b6:66:86:f8:01:04:f0:
6f:19:a4:f6:5f:ce:0c:da:f4:5a:1f:77:70:06:ea:
cb:57:9e:18:d6:44:21:dd:7e:8a:ce:f3:0d:d2:3b:
25:a8:96:84:a5:07:6e:5c:1a:78:c2:93:65:64:35:
bf:ed:8d:23:59:ec:fd:f7:fa:15:af:38:60:c3:1e:
51:0b:a4:6e:c1:a0:d6:bd:4a:9e:00:3b:d5:9b:a5:
01:0c:bd:d8:b7:31:13:54:14:2d:65:ab:1e:d9:f7:
5d:8f:94:bb:9e:f1:f5:51:9b:45:a0:16:c6:4c:b6:
0d:75:4d:8d:1f:96:b0:8d:bf:19:a2:f4:f9:96:1a:
47:1d:4a:16:31:43:8c:3a:52:f8:be:ee:bc:27:3f:
3c:18:b7:8b:6c:f8:88:2e:72:81:8c:8b:26:a8:fa:
c7:21:a8:44:5e:48:e9:9d:e4:75:e3:eb:a0:66:c1:
81:31:08:5e:1f:9f:dd:0e:9a:16:8a:7a:83:b8:fc:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8A:5B:16:A6:FA:52:D6:7F:EA:B5:BF:14:36:C2:41:31:F7:2C:C9
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.172.96.0/20
Signature Algorithm: sha256WithRSAEncryption
76:3d:04:a6:bd:32:ba:07:aa:6b:69:0f:63:69:c4:ce:0f:04:
91:bf:de:ba:7e:90:ac:6b:ea:61:6b:06:9f:2e:b5:1d:64:a4:
9d:c8:c1:19:87:0f:02:fa:f6:e6:75:78:f8:87:bd:68:bb:a3:
ee:b9:51:79:04:66:e2:2a:c3:7f:12:d3:33:11:13:dd:a4:02:
ff:5f:85:4e:d7:b6:a0:95:50:50:4b:b5:a3:c5:a5:6e:da:e8:
e3:53:1c:a7:4a:43:09:3f:01:47:c9:25:a9:d3:f4:8e:6d:5a:
d2:0a:ce:3f:89:27:d4:3a:b8:e7:c4:44:0f:3f:ae:15:d1:aa:
7c:b4:25:17:71:f1:a9:6a:e4:b7:ef:bc:f3:f3:f3:cb:d9:38:
18:dc:b5:d5:82:87:93:78:c2:80:d7:a3:b0:3b:c0:8c:95:c8:
bb:3c:8c:b1:f4:61:6e:b5:6f:dc:c4:ff:fa:bc:1c:64:8d:27:
7e:ff:4b:7f:ae:dc:bc:0e:a6:82:6d:ea:82:2d:2b:f2:bb:64:
0c:30:1b:2c:b7:bd:1b:47:f0:51:62:88:d1:56:8f:45:60:d3:
2e:8f:7b:a0:cc:cc:72:28:42:dd:fc:5a:cc:b7:8d:93:97:69:
9a:60:a3:21:4d:3a:77:fc:ff:a5:6f:09:ca:13:7e:ae:e2:6b:
be:ec:56:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:16:53 2025 by rpki-client