Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/rggwsfl1eDAhYRPBzEf501oZF_8.roa
File: rggwsfl1eDAhYRPBzEf501oZF_8.roa (raw, json)
Hash identifier: TtaVOxbuOsXWJXzGj+3rIulDLWbpi+/QQZl6JMRcrsg=
Subject key identifier: AE:08:30:B1:F9:75:78:30:21:61:13:C1:CC:47:F9:D3:5A:19:17:FF
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 019718805C6421192BDAF632B1A9D24C9BC1
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/rggwsfl1eDAhYRPBzEf501oZF_8.roa
Signing time: Wed 28 May 2025 20:05:54 +0000
ROA not before: Wed 28 May 2025 20:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a01:f140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:80:5c:64:21:19:2b:da:f6:32:b1:a9:d2:4c:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: May 28 20:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae0830b1f9757830216113c1cc47f9d35a1917ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:28:9f:15:7d:f4:a9:d9:b6:01:a5:d2:b7:79:
68:9c:65:9b:14:13:bf:e1:11:75:17:e6:98:6d:fb:
66:e3:c1:da:39:b5:0a:59:27:69:27:24:d7:7a:bb:
1e:be:26:f3:6a:40:c4:c0:7d:13:d7:8d:33:90:ba:
62:1c:37:63:05:41:6e:57:1a:67:e6:27:c3:fc:4d:
b4:fe:9d:ca:f8:5c:8c:d5:3d:67:d0:01:2b:c5:86:
3d:e7:68:b4:ba:03:04:43:4b:5f:0d:64:c3:8f:5d:
70:66:85:04:1a:36:80:0a:9d:ea:d6:e7:df:fd:f3:
b1:aa:d4:f0:43:24:0d:8b:c0:49:34:d7:79:1e:da:
99:da:01:30:61:3f:61:d5:2d:b9:b4:43:3a:10:f6:
83:25:c8:05:14:97:18:35:6c:02:fb:5a:b9:0a:84:
04:ca:a2:c4:88:16:df:05:fd:18:23:46:83:11:f7:
78:ac:17:c0:ff:13:05:a4:aa:56:e6:56:15:3f:f5:
fa:08:c7:b5:0c:72:3f:41:14:7e:2b:e1:6f:32:f2:
5f:f5:35:a3:46:46:16:78:cd:49:ac:66:5c:23:3d:
d0:c7:9c:1f:e9:06:f1:7a:d2:a2:96:f8:a7:84:8b:
5e:8c:0b:de:f1:3d:50:d4:95:6c:4d:40:bf:bd:36:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:08:30:B1:F9:75:78:30:21:61:13:C1:CC:47:F9:D3:5A:19:17:FF
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/rggwsfl1eDAhYRPBzEf501oZF_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f140::/29
Signature Algorithm: sha256WithRSAEncryption
37:50:cc:9e:52:51:74:0b:6f:6c:75:08:22:af:25:f4:95:91:
1d:97:2e:41:7a:d4:84:aa:88:95:e8:74:43:f2:52:a0:9d:f3:
7e:e9:17:58:38:d3:0a:b7:11:0d:66:19:7d:57:db:0f:13:81:
aa:39:46:3c:53:35:ae:16:7e:d9:f7:7d:9c:16:8d:82:dc:05:
87:a4:d9:f7:51:d8:e1:67:4b:d6:3a:4e:3a:a5:d8:58:24:13:
db:37:9c:30:8c:d6:76:f8:d0:19:e3:b4:d0:48:45:a2:f1:8f:
84:76:ed:51:6f:cf:51:85:30:2e:14:da:4b:00:c3:e6:b2:52:
5a:13:15:02:1f:d9:26:5d:fe:a2:3b:80:e8:42:4c:ef:8f:6e:
20:12:a7:d6:ae:98:68:89:50:5d:0c:83:a2:50:14:70:f2:f8:
4d:b4:83:08:ef:c6:e8:bc:a6:87:94:22:d9:45:55:fb:2c:7f:
2e:60:5b:0b:0e:b2:53:e5:51:eb:fb:30:f2:e8:55:a2:97:01:
43:6b:55:68:3c:7e:69:5b:c6:83:8b:d4:82:88:f6:04:e2:8e:
26:af:b1:d8:3a:78:19:31:0b:70:39:6e:61:eb:f1:af:0e:25:
5f:2c:74:c4:60:50:fc:94:52:5b:df:62:59:11:70:06:0c:70:
c4:2d:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:52:17 2025 by rpki-client