Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_0SXJiy5eWe3Tfxc1Dk4ZIs-czQ.roa
File: _0SXJiy5eWe3Tfxc1Dk4ZIs-czQ.roa (raw, json)
Hash identifier: O0uTnSGfcseUnxrKq1TuzTfzGIbbHJJnnnm5TFVGdko=
Subject key identifier: FF:44:97:26:2C:B9:79:67:B7:4D:FC:5C:D4:39:38:64:8B:3E:73:34
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0197A7FDD8A0838185681EEEC210DC1F3143
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_0SXJiy5eWe3Tfxc1Dk4ZIs-czQ.roa
Signing time: Wed 25 Jun 2025 16:48:40 +0000
ROA not before: Wed 25 Jun 2025 16:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396968
IP address blocks: 2a12:bec4:1b30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a7:fd:d8:a0:83:81:85:68:1e:ee:c2:10:dc:1f:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 25 16:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4497262cb97967b74dfc5cd43938648b3e7334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:e4:31:9b:b8:7b:87:92:1a:43:90:71:40:
f1:6a:7f:81:b6:74:bc:76:c8:09:b9:ef:31:ce:5f:
42:b1:f4:4f:1b:dc:0b:c7:b0:ce:db:d9:38:fb:6e:
9b:4d:11:ff:02:bb:88:2c:7c:f3:f2:78:0f:b5:79:
da:1c:87:a5:3a:34:e7:4c:10:23:9f:51:03:ee:7a:
1c:16:c8:82:23:4e:be:ad:4a:cd:d1:a8:2b:30:a4:
13:76:e5:bd:df:5b:10:eb:18:f0:f3:25:ab:5e:28:
40:0e:37:04:5d:b6:69:26:0e:a1:91:dd:a4:c9:c7:
90:5b:c2:5c:b3:ae:bb:a2:d5:c4:32:23:1b:5f:26:
94:78:0b:3d:cd:52:b7:5f:73:aa:c8:b9:94:12:cb:
ef:b6:d0:c7:d6:38:86:61:e4:d7:54:0a:58:11:fe:
25:12:9f:8e:40:c6:a4:b0:67:81:35:7c:09:04:42:
4d:bd:d5:98:fe:bc:94:bb:82:a4:8d:db:b3:69:b1:
ba:7e:3c:4d:54:7f:ee:be:ef:c6:2d:68:d4:11:5b:
08:ca:49:a1:8e:7e:53:68:5e:a0:2a:b3:5b:26:4e:
39:d2:c8:b7:bf:b4:5f:37:c7:de:ff:70:60:ad:14:
f7:49:d1:03:36:d3:7b:43:a1:22:f4:39:06:f4:8d:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:97:26:2C:B9:79:67:B7:4D:FC:5C:D4:39:38:64:8B:3E:73:34
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_0SXJiy5eWe3Tfxc1Dk4ZIs-czQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1b30::/44
Signature Algorithm: sha256WithRSAEncryption
36:5b:bf:3b:c4:cb:7b:83:c2:2f:1a:cd:58:a2:0c:75:ca:a4:
2d:10:0a:87:1f:aa:52:29:7a:44:65:16:bd:0e:cd:76:e0:ca:
50:b0:21:69:17:df:9a:35:fb:3a:7e:ef:e5:4b:9b:c0:75:90:
92:28:0c:b8:7e:dd:2e:a4:58:5e:94:9b:fb:10:cd:12:80:41:
c5:97:39:4e:2f:37:9b:69:2d:20:e1:20:cf:2f:c8:f8:93:42:
13:ee:4a:00:24:ac:d9:e0:39:b9:e7:73:6a:3c:dd:2a:44:a1:
74:0e:c6:07:e4:e1:ac:9b:4b:7e:05:5c:6a:98:ed:76:5c:d1:
a7:4e:10:4d:a7:c9:48:b6:c3:6b:94:87:65:7f:59:85:97:b9:
d1:96:dd:db:97:ae:4a:0d:07:3d:ef:af:7e:7c:02:8a:1b:14:
87:b6:40:39:f9:5d:23:a9:73:cf:9f:de:9c:bb:19:0a:67:c0:
5b:60:0b:d5:57:e4:ef:6c:ce:30:2b:05:2e:e0:56:ae:fa:b7:
70:71:ff:d7:e2:f4:81:9d:ef:96:65:75:ab:7e:e7:d0:d5:ae:
33:79:ae:a9:13:e4:97:ad:ae:15:bf:8a:0f:e3:b7:a8:f0:cb:
e2:70:53:63:06:75:6e:fc:09:42:74:5e:66:80:52:c5:9c:08:
f5:f7:b0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:03:55 2025 by rpki-client