Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa
File: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (raw, json)
Hash identifier: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=
Subject key identifier: 46:EC:3E:C7:8C:DF:54:27:37:19:38:90:0A:79:CC:6B:26:0B:AC:C4
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01970E8E4791C43275FDB69B71BE672CFE8E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa
Signing time: Mon 26 May 2025 21:44:54 +0000
ROA not before: Mon 26 May 2025 21:44:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 2a12:27c0::/29 maxlen: 29
2a12:3640::/29 maxlen: 29
2a12:4840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0e:8e:47:91:c4:32:75:fd:b6:9b:71:be:67:2c:fe:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: May 26 21:44:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ec3ec78cdf5427371938900a79cc6b260bacc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:4c:88:4d:0c:a0:c4:c1:f2:8b:c0:d4:55:
30:f3:f3:09:20:f5:94:8e:b8:81:77:43:ee:e4:b0:
39:55:35:6b:fb:e0:92:50:b5:fe:08:46:4f:ca:97:
32:4c:51:72:a0:00:04:c5:93:ba:7d:16:d5:72:fb:
89:db:47:a4:fb:38:16:aa:8c:e4:f2:de:bb:48:87:
a9:df:5a:61:84:2f:ab:93:ba:88:f9:0b:2a:d8:19:
b1:5a:52:f8:03:dd:f7:f0:74:c6:36:3a:1a:b6:a3:
f4:46:34:db:03:7d:31:10:d7:a4:30:e3:60:82:7c:
f2:3e:b3:59:d5:af:ad:88:5f:51:1c:a2:26:0b:6a:
f5:a9:f9:53:ab:ef:02:c5:7e:8d:82:6a:67:6c:04:
12:df:8c:23:7f:07:94:48:38:a5:15:31:ef:28:1d:
c4:32:4d:af:87:1c:7c:62:16:36:93:ac:b9:be:a5:
e6:c2:87:65:29:3a:c8:72:3b:86:3e:be:28:a9:68:
61:87:74:0f:03:24:af:bf:87:1a:35:c2:a3:82:ce:
67:99:4a:8f:88:f0:0e:f4:72:b5:06:5e:fb:4d:6c:
dc:f8:f7:a2:ae:f4:b1:a4:f5:15:e8:6a:cd:c4:a2:
e8:14:f2:49:73:84:bc:cd:79:4a:cb:f4:2b:77:7c:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:3E:C7:8C:DF:54:27:37:19:38:90:0A:79:CC:6B:26:0B:AC:C4
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:27c0::/29
2a12:3640::/29
2a12:4840::/29
Signature Algorithm: sha256WithRSAEncryption
54:5a:75:fd:8f:57:24:f4:cc:cf:5a:ff:4c:8f:e2:4e:c1:d3:
a0:32:e6:7b:e1:e8:db:16:14:6d:4e:04:23:1d:24:7c:73:76:
c9:e0:23:e4:7d:03:b8:d5:21:56:fb:d5:51:64:ff:51:2b:49:
08:78:81:22:69:ce:1f:7c:b1:69:40:43:f5:71:1a:04:41:69:
15:f1:fc:9d:30:b7:f8:38:06:7c:dc:6e:4b:0f:f9:97:34:39:
28:bf:e6:a9:0a:74:e2:a5:47:d1:0c:97:5f:d5:46:c7:02:e1:
72:cd:84:c4:7f:60:52:62:1f:cf:9c:49:72:2e:1e:12:c3:2e:
18:7a:d5:5b:b5:50:b1:11:b4:ec:3f:b9:0c:d2:a2:74:88:49:
5b:3c:08:0f:66:58:af:ed:9e:59:67:7d:0d:4d:c7:e9:24:3d:
f7:0a:55:51:93:58:f6:b7:db:ac:23:57:0e:c2:72:a2:ab:ee:
b9:01:9f:b1:67:a5:af:e5:ce:84:cf:78:8a:8d:9d:17:ea:f6:
11:3a:62:3a:1b:f8:48:b2:9b:76:40:95:d6:45:00:f8:87:a3:
4a:6c:ef:dc:74:4c:5f:3e:3f:9e:98:ae:de:25:d7:4a:63:09:
55:be:48:75:31:c9:29:4a:e2:51:34:72:c7:82:94:38:64:0a:
a1:26:93:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZcOjkeRxDJ1/babcb5nLP6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjUwNTI2MjE0NDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmVjM2VjNzhjZGY1NDI3MzcxOTM4OTAwYTc5Y2M2YjI2MGJhY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIlMiE0MoMTB8ovA1FUw8/MJIPWU
jriBd0Pu5LA5VTVr++CSULX+CEZPypcyTFFyoAAExZO6fRbVcvuJ20ek+zgWqozk
8t67SIep31phhC+rk7qI+Qsq2BmxWlL4A9338HTGNjoatqP0RjTbA30xENekMONg
gnzyPrNZ1a+tiF9RHKImC2r1qflTq+8CxX6NgmpnbAQS34wjfweUSDilFTHvKB3E
Mk2vhxx8YhY2k6y5vqXmwodlKTrIcjuGPr4oqWhhh3QPAySvv4caNcKjgs5nmUqP
iPAO9HK1Bl77TWzc+PeirvSxpPUV6GrNxKLoFPJJc4S8zXlKy/Qrd3wEaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEbsPseM31QnNxk4kAp5zGsmC6zEMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvUnV3LXg0emZWQ2MzR1RpUUNubk1heVlMck1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhInwAMF
AyoSNkADBQMqEkhAMA0GCSqGSIb3DQEBCwUAA4IBAQBUWnX9j1ck9MzPWv9Mj+JO
wdOgMuZ74ejbFhRtTgQjHSR8c3bJ4CPkfQO41SFW+9VRZP9RK0kIeIEiac4ffLFp
QEP1cRoEQWkV8fydMLf4OAZ83G5LD/mXNDkov+apCnTipUfRDJdf1UbHAuFyzYTE
f2BSYh/PnElyLh4Swy4YetVbtVCxEbTsP7kM0qJ0iElbPAgPZliv7Z5ZZ30NTcfp
JD33ClVRk1j2t9usI1cOwnKiq+65AZ+xZ6Wv5c6Ez3iKjZ0X6vYROmI6G/hIspt2
QJXWRQD4h6NKbO/cdExfPj+emK7eJddKYwlVvkh1MckpSuJRNHLHgpQ4ZAqhJpOh
-----END CERTIFICATE-----
Generated at Fri Jun 6 15:15:37 2025 by rpki-client