Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Tr5QsOVqAL-kUbsl0FSQCIdwffE.roa
File: Tr5QsOVqAL-kUbsl0FSQCIdwffE.roa (raw, json)
Hash identifier: myJTSqAzGs+jyA0JTmEtLqw/cOOL1Di8oCeutjkw8Es=
Subject key identifier: 4E:BE:50:B0:E5:6A:00:BF:A4:51:BB:25:D0:54:90:08:87:70:7D:F1
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0199198441CBCAE61CA1AD6341805B7B1710
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Tr5QsOVqAL-kUbsl0FSQCIdwffE.roa
Signing time: Fri 05 Sep 2025 10:55:22 +0000
ROA not before: Fri 05 Sep 2025 10:55:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208226
IP address blocks: 2a06:e881:7000::/44 maxlen: 44
2a0a:79c0:e00::/44 maxlen: 44
2a0a:79c0:1000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:84:41:cb:ca:e6:1c:a1:ad:63:41:80:5b:7b:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Sep 5 10:55:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ebe50b0e56a00bfa451bb25d054900887707df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:93:0a:90:c1:b1:f1:7c:d0:34:e7:61:dd:
79:cd:af:45:b9:27:2b:ce:50:2c:ab:10:5b:42:78:
96:a3:2d:01:78:eb:ee:94:4c:2d:63:4e:93:15:78:
2a:49:1f:ef:a8:7c:2d:51:64:03:cd:76:20:d3:42:
57:18:66:3d:20:ff:0a:87:2f:93:3a:88:32:f4:df:
9b:98:82:13:3d:9f:49:16:d3:72:ee:c1:85:54:f1:
41:87:20:25:81:6e:cb:f5:b0:8a:d7:3e:88:64:a4:
96:85:5e:7f:44:63:93:b7:8b:a3:f7:5c:4c:f4:45:
14:6f:e7:d1:47:50:cc:37:ea:95:15:ce:25:16:f1:
ac:be:ad:af:9c:cd:04:2e:80:78:ad:a6:4a:e2:b8:
51:6f:43:4f:92:0c:f2:f8:41:cd:59:38:71:e4:77:
09:43:42:59:57:3b:f0:3c:5a:38:b6:dc:fe:bb:23:
bb:df:62:5a:03:84:07:8c:33:d5:a7:b4:a1:88:35:
6b:c4:18:ee:fc:00:88:3b:3f:37:4b:37:cb:45:62:
f2:29:62:79:a3:2f:ed:b7:cb:59:0d:e5:f7:24:45:
07:ae:a9:25:aa:4b:e1:7d:a2:18:25:5f:52:d0:c8:
66:76:e8:76:d7:bc:15:11:7a:51:aa:db:12:9d:49:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:50:B0:E5:6A:00:BF:A4:51:BB:25:D0:54:90:08:87:70:7D:F1
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Tr5QsOVqAL-kUbsl0FSQCIdwffE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7000::/44
2a0a:79c0:e00::/44
2a0a:79c0:1000::/44
Signature Algorithm: sha256WithRSAEncryption
1b:45:ac:81:9d:52:a3:e7:26:c0:57:79:c3:a0:e6:ab:56:7a:
f0:89:a8:9e:1b:b0:b9:a7:0c:12:3d:d7:e3:c4:c6:38:f2:8b:
9b:34:27:bb:6a:bc:dc:b6:9e:69:ec:49:f9:78:cd:d1:11:66:
1b:35:cd:ff:a9:15:21:33:76:37:e6:f4:a5:71:56:57:9f:17:
32:ad:52:1b:1f:5b:b9:44:7b:6b:3a:24:40:ab:d9:dd:45:52:
0f:f9:7b:4b:1d:1d:a8:ce:6e:49:84:53:66:2b:72:37:7c:ed:
5c:95:29:3a:03:69:0f:92:4a:23:03:c9:31:f3:ea:f9:4c:a4:
27:ec:a5:d0:a5:12:21:50:5a:aa:dd:d3:02:61:d4:13:a0:6e:
53:ca:14:90:d6:ee:7b:6f:9d:fe:31:fa:1f:0f:66:e9:c1:9f:
99:3a:0e:2b:c0:0e:93:22:fd:15:8f:71:0c:42:a5:a3:fa:dd:
dd:82:8e:10:18:d3:84:02:7d:c4:a9:e0:a8:6a:22:b2:7c:cc:
0a:8b:bd:41:e4:7c:f3:63:87:14:b5:70:38:81:60:6a:5e:43:
32:92:9a:ae:c6:32:71:a3:e9:39:48:08:9a:64:99:02:73:f8:
91:2f:39:20:e7:5b:c7:35:f9:13:80:72:d2:d8:b5:5f:15:d7:
d4:94:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:45:32 2025 by rpki-client