Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/buytX97WbFAYb_5j2H0YkO5IIjk.roa
File: buytX97WbFAYb_5j2H0YkO5IIjk.roa (raw, json)
Hash identifier: MQWcPEUZU7ucZLw/8SXvYxRLcudDsOAUxVnmSK3CJVo=
Subject key identifier: 6E:EC:AD:5F:DE:D6:6C:50:18:6F:FE:63:D8:7D:18:90:EE:48:22:39
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0196E76F8F8A16C61B99298CD459D06EA1ED
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/buytX97WbFAYb_5j2H0YkO5IIjk.roa
Signing time: Mon 19 May 2025 07:26:10 +0000
ROA not before: Mon 19 May 2025 07:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215375
IP address blocks: 2a13:ccc5:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:6f:8f:8a:16:c6:1b:99:29:8c:d4:59:d0:6e:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: May 19 07:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eecad5fded66c50186ffe63d87d1890ee482239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:bc:0b:68:0b:24:4d:f5:50:6e:31:ed:f2:
ad:00:09:92:9f:42:0e:9d:be:e2:cc:8c:1d:68:f3:
4a:be:48:0b:f5:74:31:c5:03:e0:d5:2c:2e:af:41:
28:ed:e5:6e:25:88:b0:3d:1c:34:fa:20:8c:14:94:
8b:f9:fc:64:6f:62:08:25:fd:ad:e1:95:f2:fc:33:
bf:40:0c:81:b6:32:d4:55:9b:64:c1:f5:a5:0a:ee:
14:17:13:08:0d:73:2a:05:81:7c:9d:d7:91:34:2a:
e0:df:ec:68:0a:69:ed:e3:94:bf:40:39:73:bb:bc:
77:f9:6f:fb:f2:0b:06:91:a9:ba:df:93:a0:d0:d5:
cf:c8:2e:f4:63:03:d4:9d:6b:8d:62:8d:1c:fe:47:
40:2f:2f:10:ac:ee:b1:02:c6:85:33:71:1d:8f:a8:
34:fd:75:7c:17:d2:fc:be:8b:79:e8:aa:ed:36:67:
5d:c9:b3:cd:de:3e:bb:a4:5d:8f:40:7c:98:0d:8d:
55:b4:47:70:b1:d4:c9:fb:73:61:a8:5f:d3:8f:08:
9e:cb:42:bf:87:38:fe:8b:01:07:f9:07:5a:7d:ae:
7a:a5:c8:0b:0e:d0:ed:89:8f:c9:c2:68:b0:d2:c5:
5e:e5:a8:4b:63:3c:f4:f3:6b:50:7d:c2:19:78:93:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:AD:5F:DE:D6:6C:50:18:6F:FE:63:D8:7D:18:90:EE:48:22:39
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/buytX97WbFAYb_5j2H0YkO5IIjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc5:e000::/36
Signature Algorithm: sha256WithRSAEncryption
09:f7:6f:05:bd:01:75:bd:cf:91:70:df:34:0c:6f:c4:71:96:
b0:dc:31:55:63:ff:9a:ea:4b:8d:ca:ab:82:23:b1:26:26:b6:
fd:ff:f6:40:f6:c6:58:e2:3a:14:0b:e4:6f:49:ee:17:31:67:
96:75:7a:a0:a0:c1:4a:69:a2:2e:67:2c:84:15:bb:13:9b:16:
67:d6:f7:66:4b:59:a1:15:70:9b:71:7e:35:e0:3d:e2:57:a0:
9d:a2:4e:8f:cb:b5:a4:12:09:16:9c:26:f4:a8:2c:f4:40:94:
64:73:18:95:0a:ef:ca:6a:30:be:4d:91:a2:3d:fa:b9:13:c7:
00:3f:32:1e:96:1b:96:1c:ec:46:99:3f:1b:0a:36:9b:f2:e6:
e5:01:24:00:9f:7d:f9:c9:ca:c9:51:1b:6e:7b:83:f1:41:02:
18:22:87:69:79:78:f5:ed:e0:f9:59:f1:21:7d:86:4e:7f:b8:
5d:f1:b8:22:ed:ac:e0:93:a6:1f:7d:53:19:79:bc:f6:38:d5:
34:e0:74:28:00:7a:a7:45:17:a0:8a:83:eb:7b:5a:be:17:d4:
73:2f:32:5b:74:9c:3d:47:65:87:4a:ed:bc:c2:3f:a9:67:3c:
02:41:48:0a:e4:3e:e7:3b:ab:aa:ee:14:85:bc:18:18:66:60:
87:66:98:ea
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZbnb4+KFsYbmSmM1FnQbqHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjUwNTE5MDcyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWVjYWQ1ZmRlZDY2YzUwMTg2ZmZlNjNkODdkMTg5MGVlNDgyMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuO8C2gLJE31UG4x7fKtAAmSn0IO
nb7izIwdaPNKvkgL9XQxxQPg1Swur0Eo7eVuJYiwPRw0+iCMFJSL+fxkb2IIJf2t
4ZXy/DO/QAyBtjLUVZtkwfWlCu4UFxMIDXMqBYF8ndeRNCrg3+xoCmnt45S/QDlz
u7x3+W/78gsGkam635Og0NXPyC70YwPUnWuNYo0c/kdALy8QrO6xAsaFM3Edj6g0
/XV8F9L8vot56KrtNmddybPN3j67pF2PQHyYDY1VtEdwsdTJ+3NhqF/Tjwiey0K/
hzj+iwEH+Qdafa56pcgLDtDtiY/Jwmiw0sVe5ahLYzz082tQfcIZeJPenQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFG7srV/e1mxQGG/+Y9h9GJDuSCI5MB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvYnV5dFg5N1diRkFZYl81ajJIMFlrTzVJSWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhPMxeAw
DQYJKoZIhvcNAQELBQADggEBAAn3bwW9AXW9z5Fw3zQMb8RxlrDcMVVj/5rqS43K
q4IjsSYmtv3/9kD2xljiOhQL5G9J7hcxZ5Z1eqCgwUppoi5nLIQVuxObFmfW92ZL
WaEVcJtxfjXgPeJXoJ2iTo/LtaQSCRacJvSoLPRAlGRzGJUK78pqML5NkaI9+rkT
xwA/Mh6WG5Yc7EaZPxsKNpvy5uUBJACfffnJyslRG257g/FBAhgih2l5ePXt4PlZ
8SF9hk5/uF3xuCLtrOCTph99Uxl5vPY41TTgdCgAeqdFF6CKg+t7Wr4X1HMvMlt0
nD1HZYdK7bzCP6lnPAJBSArkPuc7q6ruFIW8GBhmYIdmmOo=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:08 2025 by rpki-client