Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/obC6Nt8k6sToBFUPijQUE-JEfbw.roa
File: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (raw, json)
Hash identifier: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=
Subject key identifier: A1:B0:BA:36:DF:24:EA:C4:E8:04:55:0F:8A:34:14:13:E2:44:7D:BC
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 01977E2E11F6E25E54DA2CB622083CA8CE57
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/obC6Nt8k6sToBFUPijQUE-JEfbw.roa
Signing time: Tue 17 Jun 2025 13:57:17 +0000
ROA not before: Tue 17 Jun 2025 13:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.155.99.0/24 maxlen: 24
2a10:ba00:1::/48 maxlen: 48
2a10:ba00:2::/48 maxlen: 48
2a10:ba00:3::/48 maxlen: 48
2a10:ba00:4::/48 maxlen: 48
2a10:ba00:5::/48 maxlen: 48
2a10:ba00:6::/48 maxlen: 48
2a10:ba00:7::/48 maxlen: 48
2a10:ba00:8::/48 maxlen: 48
2a10:ba00:9::/48 maxlen: 48
2a10:ba00:10::/48 maxlen: 48
2a10:ba00:11::/48 maxlen: 48
2a10:ba00:12::/48 maxlen: 48
2a10:ba00:13::/48 maxlen: 48
2a10:ba00:14::/48 maxlen: 48
2a10:ba00:15::/48 maxlen: 48
2a10:ba00:16::/48 maxlen: 48
2a10:ba00:17::/48 maxlen: 48
2a10:ba00:18::/48 maxlen: 48
2a10:ba00:19::/48 maxlen: 48
2a10:ba00:20::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:2e:11:f6:e2:5e:54:da:2c:b6:22:08:3c:a8:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jun 17 13:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1b0ba36df24eac4e804550f8a341413e2447dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:4c:3e:e5:f6:f7:1e:62:96:8b:5f:70:e1:
58:41:4f:60:ed:e3:e3:5d:f5:fe:a3:fe:82:2a:58:
74:19:32:8f:a9:ba:35:9b:ea:94:98:d5:1a:74:ca:
4c:b6:a8:d3:90:cc:04:a9:55:98:ce:da:21:87:24:
e7:f7:e3:50:b7:14:54:c2:cd:74:31:c8:a3:8c:81:
ab:ec:d0:73:23:0d:1b:38:b5:d7:36:a3:53:64:16:
c9:e4:6d:5a:e3:c9:59:97:07:7d:53:61:c9:61:e9:
9b:f0:18:06:01:6a:e9:3b:06:44:d2:ff:fc:ad:24:
8c:2a:b5:5c:02:a4:b0:01:7e:53:8e:d3:3e:a0:de:
43:43:c0:fc:c5:af:e2:c9:da:a8:70:b9:b5:95:11:
72:26:61:78:fe:96:a6:39:a0:95:44:d2:1f:f0:1b:
5d:9b:cb:16:78:50:09:bf:81:c9:87:15:d7:84:e8:
0a:cc:dd:ae:da:5d:76:c7:1a:8b:3e:98:89:03:b1:
87:33:86:0a:c0:93:c3:37:14:46:73:68:13:55:27:
ed:10:b1:50:2a:4f:ee:37:04:f1:87:9b:0c:1a:ce:
7e:f7:cf:23:98:e4:b2:1e:e2:b1:f0:9e:70:35:34:
49:24:89:86:05:08:26:dd:04:09:7d:f8:33:29:8c:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:BA:36:DF:24:EA:C4:E8:04:55:0F:8A:34:14:13:E2:44:7D:BC
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/obC6Nt8k6sToBFUPijQUE-JEfbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.99.0/24
IPv6:
2a10:ba00:1::-2a10:ba00:9:ffff:ffff:ffff:ffff:ffff
2a10:ba00:10::-2a10:ba00:19:ffff:ffff:ffff:ffff:ffff
2a10:ba00:20::/48
2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:3d:b5:75:6c:04:d1:7a:9d:d0:1d:71:4d:4a:3c:ec:d8:dd:
0b:ac:57:d6:0a:01:bf:bd:c6:5d:fb:4f:61:ae:a1:f9:0a:41:
c1:e0:b8:7a:6f:8e:2e:3e:59:9b:58:77:ed:e5:3e:46:39:e6:
93:81:5e:71:87:59:eb:ea:52:ce:60:26:0b:a7:31:85:72:dc:
0a:0d:a3:cf:91:f7:ba:aa:5d:3e:56:66:b0:0e:a0:66:d1:5a:
16:5e:32:e1:41:44:7b:cc:e2:91:93:d5:b7:c2:cc:7a:4e:8f:
d7:f2:e2:b3:64:47:f7:29:97:a6:58:5e:e3:2a:54:13:ad:45:
ca:8b:2b:6f:af:c7:83:d9:30:66:6c:01:d4:b0:eb:4b:66:d0:
c1:51:f4:98:ed:26:c7:e7:4d:9c:ce:43:9b:67:5d:ad:d1:5b:
93:e9:69:8d:b1:9b:0d:44:1f:6f:cd:32:ec:6f:26:e5:78:66:
8c:7a:82:39:32:c0:59:81:da:33:5d:0e:83:b7:52:8e:72:6f:
f6:ad:2f:58:73:3e:c3:ae:d0:dd:0e:7c:ca:87:c8:2e:ea:8a:
0c:22:24:de:de:d7:2b:f3:39:db:03:b0:9c:b4:e9:68:74:44:
12:6b:72:ab:6e:6e:d2:8e:7e:c5:f3:49:bc:76:01:9d:fe:80:
a8:03:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:16:51 2025 by rpki-client