Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uf-mtHNXR97TLF6z5dZrXRPkBPQ.roa
File: uf-mtHNXR97TLF6z5dZrXRPkBPQ.roa (raw, json)
Hash identifier: jUMnQjGac3HQJvUjMWQ0PemNW1hPHeJ5Fv2keKT4Wek=
Subject key identifier: B9:FF:A6:B4:73:57:47:DE:D3:2C:5E:B3:E5:D6:6B:5D:13:E4:04:F4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019730890F09D4E1117EA188FDEA7FE03ABD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uf-mtHNXR97TLF6z5dZrXRPkBPQ.roa
Signing time: Mon 02 Jun 2025 12:06:18 +0000
ROA not before: Mon 02 Jun 2025 12:06:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:152f::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
2a12:bec4:1654::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:89:0f:09:d4:e1:11:7e:a1:88:fd:ea:7f:e0:3a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 2 12:06:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9ffa6b4735747ded32c5eb3e5d66b5d13e404f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:bc:17:3b:9c:b8:fb:f1:bd:6e:d9:9c:96:
7c:57:17:c8:98:99:75:7a:97:7e:88:4e:e7:61:31:
9c:fe:3f:ab:c5:56:f9:79:90:c8:d3:5d:5e:a2:13:
60:2e:c5:ea:56:ba:e9:c9:a2:66:f7:0d:da:bf:c9:
7d:aa:c2:60:97:96:97:ae:bc:0b:01:1e:42:68:aa:
fb:7e:f2:2c:a8:07:9e:ce:d8:0c:69:b6:7f:1f:b6:
55:22:ea:cd:d2:e7:b4:3d:10:22:96:c1:23:d9:e8:
17:cb:e7:ad:27:21:5a:5c:55:f3:53:91:ea:1b:1e:
52:14:54:1a:2f:7f:97:41:23:ef:37:88:2f:eb:7a:
9f:87:4d:a7:82:16:77:1a:53:a9:3b:8a:ad:91:f6:
a5:d6:41:7e:2c:0c:3c:cd:c3:1d:a4:d0:1f:e8:2e:
92:a7:3d:ff:1e:35:4b:b5:c5:27:02:65:b6:86:9a:
b1:66:2d:46:bc:bf:cc:36:e8:b7:d5:92:b9:3d:fa:
84:f9:dc:3e:da:ba:01:b9:d1:81:e3:ba:b7:cf:ad:
85:ed:57:6c:4a:8f:ed:e7:36:38:11:6b:1b:27:ec:
b3:36:ec:ec:33:f8:0c:71:25:ef:ad:3f:1b:22:aa:
d8:0a:c1:ca:32:b9:ab:df:0f:da:2a:28:3b:06:51:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:A6:B4:73:57:47:DE:D3:2C:5E:B3:E5:D6:6B:5D:13:E4:04:F4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/uf-mtHNXR97TLF6z5dZrXRPkBPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/47
2a12:bec4:152f::/48
2a12:bec4:1651::-2a12:bec4:1654:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:d3:70:8f:a9:21:77:a2:42:e2:9a:68:63:fb:ec:5a:05:54:
97:a2:18:ee:49:fd:3e:77:59:2e:75:ed:b4:4b:9c:1d:75:56:
dc:79:3a:34:85:87:a6:f0:9d:5c:fd:10:b9:a9:6e:d8:de:43:
5c:92:39:75:37:f8:f0:52:3f:40:94:13:13:01:73:ca:06:df:
69:83:e6:20:7c:3b:a5:25:86:f0:f7:51:8d:9f:5e:7a:d2:51:
00:78:e1:62:a3:43:6d:80:b2:32:b6:da:52:df:06:ca:bb:3e:
f1:fe:ca:8c:45:c9:d3:29:29:62:0a:be:0b:90:99:1e:b3:18:
9a:6c:73:b1:5e:45:6c:65:51:28:c4:02:e0:c7:c9:da:d2:39:
1a:cb:af:a6:bf:14:63:cc:e9:d8:51:c3:a9:37:c7:fe:da:58:
2b:f0:d9:b1:a9:69:ce:69:60:aa:6b:c3:a5:01:1b:1e:4b:df:
45:b7:38:a9:ff:38:97:35:5b:02:16:17:82:1a:17:89:89:3b:
aa:a6:c5:d4:03:a0:ef:ec:7b:fd:6e:e6:ea:5b:ff:26:e5:bf:
98:a3:10:32:f3:4e:69:90:e2:b4:38:f0:a8:bb:e8:e3:0c:a6:
0a:7e:14:20:33:e6:d1:f2:5b:d6:5b:66:5c:80:52:c6:0c:25:
cc:0c:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:07:30 2025 by rpki-client