Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pKgW_epUKKqINQVkGFPfKQN_JME.roa
File: pKgW_epUKKqINQVkGFPfKQN_JME.roa (raw, json)
Hash identifier: MpYnxhEKRzbjZbG7ScaYIGMVo8jyEDa8wL6U3lmWFGs=
Subject key identifier: A4:A8:16:FD:EA:54:28:AA:88:35:05:64:18:53:DF:29:03:7F:24:C1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01973B6584F77508EF63AF443B66B8A80FF1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pKgW_epUKKqINQVkGFPfKQN_JME.roa
Signing time: Wed 04 Jun 2025 14:43:18 +0000
ROA not before: Wed 04 Jun 2025 14:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203879
IP address blocks: 2a02:660:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:65:84:f7:75:08:ef:63:af:44:3b:66:b8:a8:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 4 14:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4a816fdea5428aa883505641853df29037f24c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:5d:52:28:c2:44:f3:c8:32:06:d4:fc:c1:
db:2b:51:4b:47:82:3a:8e:1b:c1:fb:b4:6b:08:37:
52:fa:48:fd:32:d8:65:90:07:8c:32:1d:97:cf:a8:
ca:37:e0:74:35:b7:28:bd:ca:24:fc:a9:66:c2:4c:
ac:16:d1:2d:39:56:8b:4a:cb:46:17:ba:06:af:71:
10:25:16:20:4e:d0:4a:29:22:07:df:38:fa:ea:70:
2e:1f:13:bd:fa:ec:ff:86:c4:dd:0f:f4:91:0f:5b:
c5:37:78:c9:37:46:ad:51:76:f9:cd:2f:57:5f:67:
eb:ed:03:e9:f3:9b:5c:18:1e:96:1f:7c:27:41:41:
7b:b1:ce:b0:02:1f:86:49:b5:9e:29:4f:e8:5d:ac:
80:ac:10:66:7c:1e:f7:2e:9d:14:de:f6:94:99:5c:
57:6d:0e:b3:19:8a:73:39:98:72:d2:c7:a3:0b:9e:
77:d4:35:c4:b6:00:58:32:0d:95:e7:01:bc:7a:de:
3f:33:46:44:a8:2c:88:d2:76:67:fe:78:60:14:dc:
6e:67:42:fa:f9:61:dd:d0:22:88:b6:d9:9e:e9:2a:
de:33:73:7c:e4:54:54:aa:74:3a:45:d8:53:65:42:
69:e2:2e:d2:51:b7:e0:61:95:28:f2:a2:cd:a5:0f:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:16:FD:EA:54:28:AA:88:35:05:64:18:53:DF:29:03:7F:24:C1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pKgW_epUKKqINQVkGFPfKQN_JME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:660:9::/48
Signature Algorithm: sha256WithRSAEncryption
6f:02:00:49:4e:9c:c4:ac:ea:8a:fe:cc:eb:41:04:0b:3c:d0:
4b:45:69:33:72:52:59:26:e6:2b:f3:4a:4b:3e:29:b3:7f:7e:
3b:3b:dc:e9:6b:e2:f4:b4:e6:42:34:81:3a:11:d9:5c:4b:8e:
e2:10:6e:34:58:84:bf:77:d8:f7:95:f0:78:1f:73:3d:65:46:
72:90:1c:e0:21:da:c5:a6:5b:a0:66:ff:bd:cb:f9:1a:15:27:
b3:2a:ad:93:c3:5c:2b:01:e0:7b:68:7a:e2:92:55:7f:76:6e:
98:6d:7e:f0:c4:5e:38:22:57:cc:e0:61:28:dd:ca:87:e5:b9:
40:95:3e:08:ff:92:e1:e1:3b:89:c2:37:a9:f0:9e:a2:0f:64:
e6:79:6a:c2:ae:9a:ad:91:5a:48:45:12:6c:0e:b1:07:fc:5e:
3d:65:0f:41:ae:3a:55:be:3d:16:e3:f0:91:6c:47:5b:76:27:
48:97:00:b5:18:85:f1:0e:c1:4f:af:6a:be:33:3e:04:b6:93:
39:51:71:37:f2:d1:17:bd:79:df:68:42:c2:fc:67:e0:b2:3c:
a2:4e:cd:50:54:01:ba:28:90:5e:29:b9:8d:75:0c:f2:8b:ed:
65:7f:45:fd:60:3b:50:a3:68:80:0e:1c:8d:dd:fe:d1:f7:df:
ab:30:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:24:07 2025 by rpki-client