Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2FKZPhg0yZwll-7IKKrQiY_2JZg.roa
File: 2FKZPhg0yZwll-7IKKrQiY_2JZg.roa (raw, json)
Hash identifier: gHgBdXS8XWNL7U3Ymd+KumYNoM9Ez64AQgUONNJnO6M=
Subject key identifier: D8:52:99:3E:18:34:C9:9C:25:97:EE:C8:28:AA:D0:89:8F:F6:25:98
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0196EE30FE66AF3DB671640B3A4C8F30DD66
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2FKZPhg0yZwll-7IKKrQiY_2JZg.roa
Signing time: Tue 20 May 2025 14:55:10 +0000
ROA not before: Tue 20 May 2025 14:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2003:8:4400::/48 maxlen: 48
2003:8:6400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:30:fe:66:af:3d:b6:71:64:0b:3a:4c:8f:30:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: May 20 14:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d852993e1834c99c2597eec828aad0898ff62598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:50:bd:3f:e4:f0:9c:c5:d9:19:46:04:6b:
85:25:e7:02:a4:c8:97:97:70:1e:08:af:fd:82:0f:
86:21:43:28:38:1d:e6:4e:ab:47:b8:31:14:15:ef:
68:ed:86:f7:ef:f3:f3:ff:ee:72:f3:d6:42:ab:20:
de:57:47:fa:1f:b0:e1:c2:07:d7:79:9f:87:a1:29:
43:96:5c:fb:56:c3:4c:57:be:08:11:cd:ea:8f:cc:
57:7e:88:27:60:22:9a:62:bd:70:ce:c2:d5:82:a0:
88:79:c2:8e:45:d3:67:99:e7:0f:ff:2b:87:10:50:
81:e7:1a:b2:ca:81:eb:71:7e:de:df:1c:7a:9e:7f:
ff:32:20:d9:c1:2b:7d:8a:68:2c:9b:89:28:57:5c:
54:90:5b:0f:62:dd:ce:0e:2c:cd:02:fd:39:19:9b:
b3:6b:f5:77:44:41:fe:69:53:0b:e8:39:ad:d6:0a:
ce:ef:5a:54:04:29:b7:fe:a2:92:89:7b:6d:8a:65:
cc:8f:7a:cc:39:9f:6b:aa:8b:56:18:21:5b:26:4d:
99:8d:f4:57:54:96:f3:cc:c3:33:40:84:91:6f:67:
09:8a:eb:46:be:ce:1d:2b:12:dc:a0:45:c5:82:cd:
3a:73:e9:91:d6:59:6b:34:d6:b2:c8:79:7c:45:e9:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:99:3E:18:34:C9:9C:25:97:EE:C8:28:AA:D0:89:8F:F6:25:98
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/2FKZPhg0yZwll-7IKKrQiY_2JZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2003:8:4400::/48
2003:8:6400::/48
Signature Algorithm: sha256WithRSAEncryption
49:54:b7:f4:a5:12:75:72:1c:4b:af:ef:48:a5:c0:9d:80:ac:
d9:fb:08:21:41:8a:4c:e4:22:13:4a:51:68:cd:75:29:0c:f4:
f0:df:43:67:53:93:62:66:5d:d4:ec:f0:f2:df:c4:86:7a:ff:
45:71:9f:66:f4:06:2f:e1:b5:f6:b9:54:c3:71:23:c9:f3:77:
62:88:8f:cc:b8:97:92:b7:eb:a4:75:27:ee:f3:ca:ba:42:78:
eb:6a:8b:e1:cb:c1:70:be:93:7b:a1:91:91:b1:f1:ca:36:7e:
cf:aa:16:1c:ef:33:8f:27:c5:f8:8d:d8:3a:e3:20:0d:33:22:
c5:26:b8:28:77:6a:a9:d9:5e:fa:2a:f4:1a:cf:78:b7:dc:c2:
68:1f:f6:c8:7d:04:dc:c0:b5:c5:65:3c:49:18:3f:3b:c0:a1:
98:c7:42:f6:4f:a0:ec:7d:62:87:71:3c:48:f2:b5:f1:7d:e4:
20:a8:c9:ce:2a:67:cb:50:f7:0b:d7:c0:aa:03:43:d4:07:a8:
48:54:7c:c4:26:02:a9:c4:9e:14:cf:d4:f4:77:30:b9:77:89:
84:75:ce:ab:c2:3a:99:89:13:81:70:28:43:65:bb:98:e2:e6:
f0:70:f9:dd:f9:e7:2f:b0:d5:fd:be:b3:bb:1f:37:d7:62:f2:
60:16:e5:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:12 2025 by rpki-client