Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BuTxzJuqE74y-IsmK2GW-o-AYBs.roa
File: BuTxzJuqE74y-IsmK2GW-o-AYBs.roa (raw, json)
Hash identifier: tV72ndlwpS1qEHGEoGAw0vl1Q+uUnu2IdEHQ2fzS9Mc=
Subject key identifier: 06:E4:F1:CC:9B:AA:13:BE:32:F8:8B:26:2B:61:96:FA:8F:80:60:1B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0197AC18E7E3C15DBB5C473C2F0838D0CEF9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BuTxzJuqE74y-IsmK2GW-o-AYBs.roa
Signing time: Thu 26 Jun 2025 11:56:42 +0000
ROA not before: Thu 26 Jun 2025 11:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:20c0::/29 maxlen: 29
2a12:d180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:18:e7:e3:c1:5d:bb:5c:47:3c:2f:08:38:d0:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 26 11:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e4f1cc9baa13be32f88b262b6196fa8f80601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:75:e1:83:fa:df:99:9b:34:c2:08:c5:f4:
59:18:b7:f9:6d:1a:52:95:a2:e2:df:8f:63:70:4c:
50:56:24:08:1e:75:9e:eb:63:f0:02:e7:31:f3:64:
40:07:fe:3f:f4:2f:77:21:60:18:01:4f:dd:28:86:
b7:f2:be:60:d0:73:ce:ca:e7:1f:14:66:c0:4b:5d:
9b:2b:d0:17:e0:c9:3b:93:34:42:bf:24:80:d7:c2:
95:e1:be:9e:b0:94:d7:e1:3b:69:b1:fd:c1:95:84:
c3:3b:2d:e3:2a:d4:3f:e9:84:55:88:fb:20:f6:65:
53:f4:24:74:33:b9:91:86:e9:a2:7e:84:92:26:eb:
75:31:72:57:8d:7a:e0:f7:f4:de:5e:5a:b1:90:45:
ff:f5:16:f2:08:84:aa:ee:d5:59:2d:10:c7:e6:1d:
4f:e2:6c:98:cc:09:a6:21:e4:02:04:b4:e6:bb:2e:
af:03:fc:e0:08:11:4a:17:21:55:1c:30:c4:68:6c:
fe:09:e2:39:d0:97:6b:6f:74:cd:12:7e:fa:6f:2a:
a6:f7:6c:14:81:79:a2:ab:04:0e:41:82:aa:a2:90:
a2:76:19:56:8d:a4:6d:c4:65:0f:2f:7b:3e:3b:c8:
e7:e6:75:dc:1a:c5:61:11:9b:9d:0b:c2:60:66:7d:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:F1:CC:9B:AA:13:BE:32:F8:8B:26:2B:61:96:FA:8F:80:60:1B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BuTxzJuqE74y-IsmK2GW-o-AYBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:20c0::/29
2a12:d180::/29
Signature Algorithm: sha256WithRSAEncryption
51:64:05:86:ed:a0:d6:49:a3:c7:99:5a:1c:cc:ae:8a:a2:92:
95:26:a5:57:9d:0a:95:82:21:87:e3:3b:56:ec:26:7f:3b:a5:
34:87:8b:e4:b4:0e:aa:b2:db:34:bb:35:66:cb:85:58:b3:e8:
30:c1:13:a4:f6:c4:3d:5b:9d:84:4f:17:67:30:35:24:82:bb:
49:fe:b3:94:69:8c:38:b6:41:76:ca:d2:4e:62:b2:d7:df:71:
43:71:e2:79:9c:11:76:a9:ce:ec:73:2b:9a:8b:c2:7f:06:2e:
ca:f3:20:e7:31:20:67:e9:06:a8:27:ed:0d:0f:d6:ea:25:d6:
61:90:af:f2:6f:38:9c:d8:76:5e:7b:9d:58:2b:24:43:fa:23:
86:4b:dc:b4:ce:f0:ff:a8:00:c5:36:f1:a7:a7:16:dd:14:53:
36:ea:1a:f8:95:86:bd:75:61:fb:75:4a:4d:55:63:d7:61:a9:
8c:a5:14:6d:95:a6:72:e1:b8:0c:77:82:d3:b9:8c:98:09:72:
4b:8b:b0:65:d1:49:74:1c:17:a4:24:c0:c7:08:57:1d:56:42:
77:ea:d4:2b:36:fa:0a:fd:7a:16:75:c6:e1:6c:5c:fd:b7:6b:
74:4f:fa:90:bf:80:27:97:26:5d:cb:d9:6d:7d:71:d8:d4:d8:
57:d4:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:32 2025 by rpki-client