Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa
File: hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa (raw, json)
Hash identifier: d5aE0237PObi3lQ9lHWVJ8Zp5KEO+pn/hpTA26Y4sSI=
Subject key identifier: 84:C1:01:0B:5C:D2:D5:CF:2C:02:5E:9D:2E:C0:20:FC:78:96:09:B9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01973B3C503594AD5BBBE24347E009407C7D
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa
Signing time: Wed 04 Jun 2025 13:58:17 +0000
ROA not before: Wed 04 Jun 2025 13:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16200
IP address blocks: 2a14:ed00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:3c:50:35:94:ad:5b:bb:e2:43:47:e0:09:40:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jun 4 13:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84c1010b5cd2d5cf2c025e9d2ec020fc789609b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:d8:88:12:71:80:ea:60:15:df:bc:82:26:
20:e5:71:28:4e:2d:58:9b:6b:a5:e7:90:5a:a7:48:
44:77:22:17:57:73:08:3b:7a:fc:8f:56:2c:1b:40:
aa:d7:c6:09:fa:3c:2d:7b:52:4d:1d:ed:97:2a:2d:
0a:b3:9d:aa:6b:19:ef:a9:6e:b1:79:27:2c:ef:fc:
23:21:f7:b0:bf:e8:5d:7f:f8:77:dc:37:df:74:b0:
f2:8a:a6:05:69:4e:ec:dd:e1:cd:19:3d:5f:ba:20:
23:29:99:2f:15:bd:38:64:75:f3:47:b3:cd:ae:b1:
1b:d0:19:f0:a7:d7:65:8e:ce:dd:e9:ee:d3:d3:26:
7e:d7:66:c9:29:9e:88:9b:2c:9b:11:9e:3f:a3:7b:
d2:fa:d5:5e:1b:93:d5:f2:a2:ed:9e:bf:d2:2a:f1:
eb:02:39:16:e1:70:7e:fa:6c:ee:c1:c2:e1:f5:c8:
e0:25:5f:2f:0f:73:17:8c:c5:67:05:7f:5f:1e:0c:
c9:3e:e6:55:05:b9:4c:85:7e:fc:c8:e9:39:71:d5:
02:cb:41:5a:58:3c:0b:11:53:e6:4b:5e:3d:eb:ec:
ca:28:99:3d:e8:28:5a:4c:86:f0:ec:c0:bf:ba:c1:
51:f4:b7:86:c6:8c:9d:51:9e:ab:35:ec:61:27:af:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:01:0B:5C:D2:D5:CF:2C:02:5E:9D:2E:C0:20:FC:78:96:09:B9
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/hMEBC1zS1c8sAl6dLsAg_HiWCbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
c5:66:a7:cf:e2:5e:96:03:c8:9f:d6:a6:c2:d1:15:dc:d5:fc:
cc:83:de:f7:f0:25:a0:3e:da:f4:69:e2:5e:db:bc:3e:3e:ce:
bc:7b:46:5f:79:3b:16:2c:99:cc:00:7d:0d:62:77:6b:e0:c2:
ae:11:e2:48:73:16:56:a9:bc:0c:41:b6:62:18:b1:57:d0:c7:
93:f6:93:08:95:73:83:ec:6b:38:10:3e:db:d5:74:c0:99:24:
35:5d:8c:84:a4:f8:b0:b6:e3:dc:17:e1:35:58:4e:ac:f9:1e:
3c:f2:6b:0a:30:8e:4b:bf:20:6a:83:db:62:07:ec:18:ef:3b:
a1:05:c1:1c:96:bc:14:e7:a1:f2:ec:6c:05:4e:c0:12:5e:62:
10:9d:85:7c:08:41:e2:3e:87:f5:55:2f:91:49:31:02:09:8d:
07:48:6e:98:27:18:9c:bf:16:13:5c:87:a1:07:72:f9:64:16:
61:dc:c3:64:32:8c:80:0a:12:8b:06:df:1b:98:b3:81:75:e4:
e4:1c:cc:09:77:23:ae:4b:b0:3f:8c:90:18:d5:d6:44:01:d5:
ca:7a:7d:c6:53:74:17:6b:84:d8:34:19:29:66:e2:f4:70:2c:
c7:c5:2a:34:87:9c:b1:fa:41:bf:9d:47:75:0f:88:b3:33:38:
76:27:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:23:02 2025 by rpki-client