Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa
File: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (raw, json)
Hash identifier: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=
Subject key identifier: AB:B8:3B:6C:9A:8C:46:A2:F7:50:52:F0:E2:9B:E0:60:B6:49:7F:50
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0196C57F36254125B06D6F4BD9CF3B4B978E
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa
Signing time: Mon 12 May 2025 17:16:10 +0000
ROA not before: Mon 12 May 2025 17:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215375
IP address blocks: 2a14:6781:1400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:7f:36:25:41:25:b0:6d:6f:4b:d9:cf:3b:4b:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 12 17:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb83b6c9a8c46a2f75052f0e29be060b6497f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:0f:19:27:14:5d:e8:54:81:e7:34:d7:c3:
48:c8:01:8c:18:0b:e6:3c:19:38:de:32:a2:8c:ba:
91:66:f8:42:1e:bd:57:a2:c9:bd:88:a7:7c:7b:5e:
c3:6e:00:9a:30:e2:94:cb:0f:55:82:c8:a3:2f:50:
4c:e3:75:ac:f5:94:21:6d:49:ad:06:0b:e9:5a:7a:
89:55:fe:40:10:f2:12:9c:76:59:aa:df:e2:f9:5b:
ce:a3:f6:5b:1e:6a:ce:a1:0c:9b:c0:fc:a3:3d:47:
85:a7:5b:48:9b:5a:6e:01:0b:6d:2a:e6:14:86:8c:
87:05:f4:de:1e:f1:2e:10:30:9e:a8:d1:51:6f:da:
d1:1a:0e:53:47:1a:45:74:1f:2b:fe:9b:c9:51:1a:
db:26:61:c6:cc:eb:48:72:6b:79:7c:17:e7:7a:3d:
fa:09:65:7b:b7:0b:82:7f:08:01:8d:bb:59:c5:d5:
d1:92:60:2e:97:c8:26:e3:e4:b5:28:d3:9f:07:58:
c4:98:b4:a4:35:2f:c4:95:18:29:2c:05:14:b4:0d:
87:fa:82:d2:75:07:7a:ec:14:9e:ed:36:c0:e7:ef:
eb:dc:26:d9:f4:f1:27:19:bb:1e:29:f5:95:c6:76:
1a:f6:1a:80:28:73:f2:cb:33:15:8f:f1:72:dd:53:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:3B:6C:9A:8C:46:A2:F7:50:52:F0:E2:9B:E0:60:B6:49:7F:50
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6781:1400::/38
Signature Algorithm: sha256WithRSAEncryption
15:5c:ec:58:71:84:60:c9:e7:b1:d0:54:72:d1:b1:cd:80:71:
6d:ad:c5:c7:3e:92:d0:18:e1:47:c1:9e:e5:1a:86:3c:84:0b:
d1:f8:c8:12:78:96:be:35:81:4e:27:bd:da:99:ee:19:d5:c8:
de:56:f4:8a:e8:f6:86:79:09:a7:d7:c1:2e:8b:37:2b:df:22:
57:0c:a7:a9:05:fc:88:54:5d:3a:6b:c9:32:bb:a0:62:4b:99:
e2:76:6d:5b:08:94:ce:63:ea:09:51:03:cc:9b:34:06:8e:7b:
8b:79:4d:72:c4:f8:b7:82:ed:a8:f5:df:79:67:44:2d:f6:90:
81:7d:48:66:c4:64:65:6c:57:c2:20:51:19:d1:e1:4a:ff:d2:
68:0d:ef:84:f8:55:b8:fd:16:7d:92:c9:aa:2f:b5:f4:e4:ca:
e4:a0:eb:bd:6a:d2:5c:77:bc:6a:13:44:18:b5:ea:79:7b:71:
d9:ba:78:35:2a:25:50:ac:a4:9d:e0:53:cf:af:ff:37:59:28:
e5:b7:c7:20:75:11:82:3c:a1:f0:3a:e1:c9:92:71:d9:76:9e:
45:85:19:9c:89:93:65:f8:4f:e6:64:6b:bd:a7:48:3f:93:b1:
84:77:1f:e3:d7:7f:39:e7:fc:a2:33:c3:aa:70:37:8b:54:83:
bd:96:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:39 2025 by rpki-client