Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa
File: 9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa (raw, json)
Hash identifier: HTr5ZfIPZkqpqy/GK7yq56zlAtqGayEHGuKpS3IdPQI=
Subject key identifier: F4:44:7E:12:31:D6:08:5C:5D:89:2C:42:FB:45:1F:C6:E5:B0:12:CF
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 0196FA0BBA6FE6B7600D84EB556F020C6766
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa
Signing time: Thu 22 May 2025 22:09:54 +0000
ROA not before: Thu 22 May 2025 22:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 2001:1400:ffef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:0b:ba:6f:e6:b7:60:0d:84:eb:55:6f:02:0c:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: May 22 22:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4447e1231d6085c5d892c42fb451fc6e5b012cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:f9:db:5e:c3:a5:51:67:a8:70:11:81:bc:
32:ad:c3:85:24:57:e6:fb:2e:7e:c2:61:fb:8a:e4:
6f:4e:a8:2d:16:53:4c:b8:10:0e:ec:21:32:a1:2d:
c3:56:4c:2e:f9:27:99:1d:f0:86:07:60:9d:62:8d:
03:6d:89:1b:8a:29:b6:c0:16:b2:43:db:68:f3:54:
a3:73:5d:0f:6f:9c:1c:c1:b4:f7:c3:08:f0:93:9d:
11:73:c9:30:5b:aa:32:a0:d6:bf:33:39:9c:7b:60:
0d:c5:09:ae:44:49:da:18:b7:e7:70:1d:89:ce:bf:
98:ce:27:ca:3e:45:6a:e8:ce:79:58:82:27:30:f4:
60:c7:05:97:89:90:fb:ce:ae:6d:04:88:11:2c:08:
97:c0:13:1f:8a:97:cb:05:45:8d:a3:27:6a:51:98:
65:9a:af:24:a1:34:14:a4:98:ec:81:9f:39:b0:33:
cc:37:ee:d5:f2:3d:28:c6:37:d0:5b:6f:09:b7:12:
1e:93:8e:8c:c9:52:a6:85:de:1d:62:6a:06:63:06:
e3:bd:4a:fb:bf:32:ab:bd:02:15:15:e7:18:ce:b0:
9d:dc:6b:fb:30:fe:92:6b:13:9e:11:44:c3:b8:f8:
1f:e4:b6:5e:d8:a7:48:dc:4d:e4:d6:d6:fc:8b:6a:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:7E:12:31:D6:08:5C:5D:89:2C:42:FB:45:1F:C6:E5:B0:12:CF
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1400:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
98:a6:81:d3:2f:65:cf:9f:76:3d:9b:38:13:ec:0e:2d:c2:96:
39:03:65:ce:94:7f:92:60:97:d5:d1:b1:5d:e4:ab:2f:c5:29:
dc:9d:56:f1:5e:8a:05:9d:cd:55:1e:33:e2:31:78:f6:61:5b:
4b:b8:11:f8:1d:1c:63:1c:ce:9c:27:96:eb:99:f9:9e:e6:0c:
77:bb:36:98:f2:97:2e:ae:9c:64:57:af:c1:13:e5:bf:4d:f1:
fb:6c:06:76:2d:05:45:40:9e:a9:67:1e:07:3f:09:da:57:1f:
2b:e7:f4:6e:c1:c3:59:ce:dc:70:61:34:c7:7c:cb:59:ea:cd:
d5:05:94:38:b7:8c:90:4d:7f:af:72:1c:3e:b1:ce:f9:af:e9:
ad:c6:26:7a:ab:5a:ed:07:1b:75:9d:ac:8a:d9:74:ea:de:76:
a9:5f:fd:cf:c8:50:39:94:a9:fa:8d:16:14:2c:50:b0:23:c3:
9f:9f:9b:ac:6c:29:55:91:40:70:d9:8e:75:50:0f:7c:33:32:
cb:4f:04:24:02:9b:18:b2:b7:0f:ac:32:35:7f:51:69:14:49:
cc:a5:8b:00:3f:99:66:90:2d:89:ef:9d:8e:2f:a5:1a:57:1a:
b0:c7:14:4d:45:16:ee:8b:6c:9a:f6:8d:b8:75:d9:a3:08:96:
4d:3a:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:25 2025 by rpki-client