Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/mR809BzawsocXcAGIqvH25pMqQs.roa
File: mR809BzawsocXcAGIqvH25pMqQs.roa (raw, json)
Hash identifier: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=
Subject key identifier: 99:1F:34:F4:1C:DA:C2:CA:1C:5D:C0:06:22:AB:C7:DB:9A:4C:A9:0B
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01970BDFA1DEB0BA83166030B99BDDA4F185
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/mR809BzawsocXcAGIqvH25pMqQs.roa
Signing time: Mon 26 May 2025 09:14:54 +0000
ROA not before: Mon 26 May 2025 09:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42649
IP address blocks: 2a14:57c0:b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:df:a1:de:b0:ba:83:16:60:30:b9:9b:dd:a4:f1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: May 26 09:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991f34f41cdac2ca1c5dc00622abc7db9a4ca90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:67:2d:bf:29:b8:91:dd:55:fe:0d:63:22:
9d:ef:32:d3:ed:7f:6c:1b:86:fd:ca:e6:82:d5:24:
d3:72:5b:e6:88:d6:63:3c:aa:d6:7e:14:b0:4a:f8:
46:92:6a:a3:7a:e3:d9:29:87:e1:98:84:dc:fa:c7:
5b:f4:8a:32:fe:38:5e:b2:3e:e8:9c:0b:4b:a9:72:
b4:9e:d6:b9:ec:85:f1:63:d4:b2:d9:bd:44:2e:9a:
09:e8:f1:b4:9b:93:08:db:44:4d:e9:e8:bb:3b:1e:
8a:38:40:b5:25:53:46:32:71:2a:0d:5b:fe:aa:56:
a8:da:01:a5:54:cd:d8:6d:57:c2:c6:40:cf:f4:20:
a2:93:ea:da:0a:ea:fc:1a:d8:e8:d6:ba:36:79:b1:
64:40:3b:84:58:35:29:cc:20:92:9e:2d:9e:8e:95:
d3:2b:5d:69:91:b3:90:8a:9f:11:ba:d2:b2:80:e3:
2f:55:04:86:24:f7:50:2f:fc:77:c5:44:c7:fa:77:
47:96:6d:ab:55:33:29:98:cb:26:a3:2b:97:70:4c:
b7:8f:1e:4f:b8:59:df:2d:ca:9f:7b:32:80:f4:ec:
71:ae:f9:9e:89:25:61:9d:b4:b3:bb:a7:eb:71:57:
ea:11:7e:70:ad:e3:fa:b5:24:e6:72:91:37:69:14:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:34:F4:1C:DA:C2:CA:1C:5D:C0:06:22:AB:C7:DB:9A:4C:A9:0B
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/mR809BzawsocXcAGIqvH25pMqQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:57c0:b1::/48
Signature Algorithm: sha256WithRSAEncryption
63:04:b3:66:db:b5:d5:e8:01:67:8c:bf:8c:80:49:0f:36:a6:
ea:6a:9b:a4:17:06:7e:e1:89:fd:18:69:e1:c8:f8:58:47:f7:
e2:b1:58:be:16:b2:1f:c7:b0:f9:e0:18:26:69:fb:b1:89:09:
1b:93:1a:6a:98:cd:00:f1:e0:99:a1:8a:69:c3:17:13:61:e7:
91:c1:b7:69:b6:69:32:f8:11:00:0d:72:52:b8:76:31:9d:29:
da:21:81:69:13:56:05:54:db:4b:e6:b9:94:0a:ff:7f:38:82:
ae:47:83:fe:0c:68:49:10:de:7a:78:13:b4:a8:10:4d:1c:9e:
42:c8:f5:96:c1:15:7d:cc:8f:a2:b3:8b:ef:0a:54:b3:fd:ad:
96:19:c3:b5:9b:ec:46:72:83:10:95:a6:d8:21:49:f8:e9:ac:
e1:58:cc:01:39:7c:f7:be:a3:3e:ea:b1:df:48:a0:ef:4b:8c:
07:b9:5e:8b:07:dc:52:b6:dc:e8:6f:d7:44:c0:7c:bd:67:17:
96:4b:d1:0c:fa:11:24:49:96:6d:c6:6b:af:1d:65:90:81:ab:
7c:6b:13:0a:06:64:83:e6:34:d3:c5:82:59:34:a0:66:bb:bc:
d3:54:fa:3f:5f:63:dd:84:54:94:4c:d0:53:ca:9f:d1:46:5f:
92:d3:51:18
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZcL36HesLqDFmAwuZvdpPGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjUwNTI2MDkxNDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTFmMzRmNDFjZGFjMmNhMWM1ZGMwMDYyMmFiYzdkYjlhNGNhOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwFnLb8puJHdVf4NYyKd7zLT7X9s
G4b9yuaC1STTclvmiNZjPKrWfhSwSvhGkmqjeuPZKYfhmITc+sdb9Ioy/jhesj7o
nAtLqXK0nta57IXxY9Sy2b1ELpoJ6PG0m5MI20RN6ei7Ox6KOEC1JVNGMnEqDVv+
qlao2gGlVM3YbVfCxkDP9CCik+raCur8Gtjo1ro2ebFkQDuEWDUpzCCSni2ejpXT
K11pkbOQip8RutKygOMvVQSGJPdQL/x3xUTH+ndHlm2rVTMpmMsmoyuXcEy3jx5P
uFnfLcqfezKA9OxxrvmeiSVhnbSzu6frcVfqEX5wreP6tSTmcpE3aRTbjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJkfNPQc2sLKHF3ABiKrx9uaTKkLMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbVI4MDlCemF3c29jWGNBR0lxdkgyNXBNcVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRXwACx
MA0GCSqGSIb3DQEBCwUAA4IBAQBjBLNm27XV6AFnjL+MgEkPNqbqapukFwZ+4Yn9
GGnhyPhYR/fisVi+FrIfx7D54BgmafuxiQkbkxpqmM0A8eCZoYppwxcTYeeRwbdp
tmky+BEADXJSuHYxnSnaIYFpE1YFVNtL5rmUCv9/OIKuR4P+DGhJEN56eBO0qBBN
HJ5CyPWWwRV9zI+is4vvClSz/a2WGcO1m+xGcoMQlabYIUn46azhWMwBOXz3vqM+
6rHfSKDvS4wHuV6LB9xSttzob9dEwHy9ZxeWS9EM+hEkSZZtxmuvHWWQgat8axMK
BmSD5jTTxYJZNKBmu7zTVPo/X2PdhFSUTNBTyp/RRl+S01EY
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:39 2025 by rpki-client