Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/Eqq1hxnObNRaQRziaWuuBD1-O8o.roa
File: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (raw, json)
Hash identifier: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=
Subject key identifier: 12:AA:B5:87:19:CE:6C:D4:5A:41:1C:E2:69:6B:AE:04:3D:7E:3B:CA
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0196F1D200C227CDF6B94E5329A4E3A7EFAA
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/Eqq1hxnObNRaQRziaWuuBD1-O8o.roa
Signing time: Wed 21 May 2025 07:49:53 +0000
ROA not before: Wed 21 May 2025 07:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206276
IP address blocks: 2a05:c380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:d2:00:c2:27:cd:f6:b9:4e:53:29:a4:e3:a7:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: May 21 07:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12aab58719ce6cd45a411ce2696bae043d7e3bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:16:f8:8f:9f:7d:2f:0a:63:b2:a4:39:86:10:
d3:57:4f:36:09:a3:b9:54:ca:4a:14:af:8e:7f:1b:
13:01:b1:ab:43:26:c6:ea:c1:58:d9:62:2a:60:e3:
ca:a6:c9:75:09:69:e0:0c:84:9a:f7:5d:f1:e1:59:
66:0c:7f:66:b5:51:e5:1e:e9:5d:cb:2e:f7:bd:16:
ca:88:ba:f2:1b:fa:88:de:1d:51:ae:ea:a1:29:6e:
2c:7c:55:29:db:d5:d4:7f:73:5b:a2:1e:ea:2a:f5:
7e:22:3c:fa:97:c3:82:65:55:32:df:78:20:77:6d:
b3:20:7f:64:34:5f:3e:d2:da:28:da:d9:8f:63:d0:
3d:29:26:48:d1:f3:f1:4a:62:7b:6d:2d:7a:1d:95:
59:fa:87:91:d9:ec:18:60:f4:c1:7c:c7:4e:33:7b:
0f:fc:74:d9:3f:65:fc:b5:f9:ba:4b:b3:49:a2:e4:
d9:b6:1a:b7:88:40:cd:c4:89:2a:72:7c:a8:19:78:
24:d3:a1:ee:b9:34:5b:64:05:87:8f:1a:f7:a6:07:
f0:79:e4:44:4c:3b:9a:0a:1d:7a:90:eb:d9:ea:86:
06:8e:8f:5f:92:be:5c:41:67:4e:1e:de:e3:dd:2e:
42:3a:1c:03:3d:19:c1:bf:a1:27:b4:91:19:f4:3f:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:B5:87:19:CE:6C:D4:5A:41:1C:E2:69:6B:AE:04:3D:7E:3B:CA
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/Eqq1hxnObNRaQRziaWuuBD1-O8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c380::/29
Signature Algorithm: sha256WithRSAEncryption
52:7e:5f:08:6a:22:9e:44:a6:13:e2:98:49:27:59:f8:d3:ba:
62:bd:ce:72:a1:7e:d4:20:e4:b9:0d:a1:20:7d:3a:77:b1:ca:
9a:e9:87:59:38:32:a8:a4:b8:b3:66:62:bc:e1:f5:4b:0a:81:
d8:8d:aa:56:aa:2b:1d:e9:fd:32:2e:22:5c:7c:63:46:1c:18:
3e:0c:6f:57:32:d9:33:92:66:8d:e4:47:72:37:97:f6:5b:ba:
8e:8f:4b:57:9a:7e:19:41:07:70:2e:7c:c2:af:59:aa:9a:8b:
e4:c6:a1:f6:52:f4:b0:30:23:ec:fa:fc:ee:bb:30:1b:91:ec:
1f:97:af:b9:c6:e3:54:13:c5:bb:0e:a3:03:89:f6:cb:51:b7:
9b:b2:e6:be:de:c6:ba:e2:7d:f4:86:da:e9:b7:9b:98:76:b2:
37:ef:a9:7a:34:3d:bc:da:d5:31:9d:49:20:64:1b:09:31:2c:
9b:cd:e8:1b:21:75:81:f6:f0:5d:2f:50:aa:da:a7:49:50:fc:
d6:cc:2c:3a:17:96:a3:86:21:a5:93:0c:e6:dd:80:08:1c:ab:
3f:20:d2:20:83:cc:0d:f7:99:f9:31:e8:49:48:32:ae:59:1b:
bb:2e:c0:07:bd:e8:ef:bd:9f:46:73:3d:5f:87:4e:d5:35:7d:
58:91:ef:46
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZbx0gDCJ832uU5TKaTjp++qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjUwNTIxMDc0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmFhYjU4NzE5Y2U2Y2Q0NWE0MTFjZTI2OTZiYWUwNDNkN2UzYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xb4j599LwpjsqQ5hhDTV082CaO5
VMpKFK+OfxsTAbGrQybG6sFY2WIqYOPKpsl1CWngDISa913x4VlmDH9mtVHlHuld
yy73vRbKiLryG/qI3h1RruqhKW4sfFUp29XUf3Nboh7qKvV+Ijz6l8OCZVUy33gg
d22zIH9kNF8+0too2tmPY9A9KSZI0fPxSmJ7bS16HZVZ+oeR2ewYYPTBfMdOM3sP
/HTZP2X8tfm6S7NJouTZthq3iEDNxIkqcnyoGXgk06HuuTRbZAWHjxr3pgfweeRE
TDuaCh16kOvZ6oYGjo9fkr5cQWdOHt7j3S5COhwDPRnBv6EntJEZ9D8GRwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBKqtYcZzmzUWkEc4mlrrgQ9fjvKMB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvRXFxMWh4bk9iTlJhUVJ6aWFXdXVCRDEtTzhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgXDgDAN
BgkqhkiG9w0BAQsFAAOCAQEAUn5fCGoinkSmE+KYSSdZ+NO6Yr3OcqF+1CDkuQ2h
IH06d7HKmumHWTgyqKS4s2ZivOH1SwqB2I2qVqorHen9Mi4iXHxjRhwYPgxvVzLZ
M5JmjeRHcjeX9lu6jo9LV5p+GUEHcC58wq9ZqpqL5Mah9lL0sDAj7Pr87rswG5Hs
H5evucbjVBPFuw6jA4n2y1G3m7Lmvt7GuuJ99Iba6bebmHayN++pejQ9vNrVMZ1J
IGQbCTEsm83oGyF1gfbwXS9QqtqnSVD81swsOheWo4YhpZMM5t2ACByrPyDSIIPM
DfeZ+THoSUgyrlkbuy7AB73o772fRnM9X4dO1TV9WJHvRg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:26:37 2025 by rpki-client