Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa
File: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (raw, json)
Hash identifier: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=
Subject key identifier: 63:F5:76:01:7F:A1:2A:68:99:26:16:B5:6E:F7:D5:29:30:93:81:72
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 0196D9184D82E0F12E1A49B1D05FBC3F880F
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa
Signing time: Fri 16 May 2025 12:36:10 +0000
ROA not before: Fri 16 May 2025 12:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208279
IP address blocks: 2a05:e8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:18:4d:82:e0:f1:2e:1a:49:b1:d0:5f:bc:3f:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: May 16 12:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63f576017fa12a68992616b56ef7d52930938172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:2d:05:8a:4f:55:cc:79:0a:c8:b1:67:6d:
fd:6c:01:aa:1f:c1:cf:1d:dd:cc:c6:31:48:3b:6e:
c7:cd:3c:e8:a8:90:bc:81:ea:86:af:ed:de:e1:c4:
33:be:27:00:fb:21:e5:4c:83:6d:2d:ec:39:56:ee:
2b:68:f7:9d:24:12:a0:6d:81:40:a1:1e:eb:c7:2c:
fb:09:03:32:ed:30:1a:4e:d0:a1:a0:5b:5b:8c:97:
7c:5c:2a:a6:8e:32:7f:2f:e3:dd:66:04:72:c2:3b:
80:02:16:fc:fa:84:64:63:b9:b8:cb:fd:30:51:87:
b9:74:19:68:81:f7:a3:ca:b6:43:aa:8a:1f:63:cd:
3b:84:56:41:a8:5f:5d:6b:55:60:c9:0e:a2:ae:78:
74:d7:d6:c4:35:3a:36:3c:77:48:90:a8:5c:b9:5a:
7e:94:21:07:35:49:b6:cd:0c:27:c1:bf:13:b0:29:
61:c3:4a:1e:b1:6f:0d:d2:ab:d8:34:1c:51:76:aa:
6b:6d:58:f1:e0:16:be:ef:ae:66:76:8e:ea:55:40:
df:f6:84:d7:94:ab:07:1d:44:cd:f6:1e:37:41:8e:
3f:3b:f0:e1:9b:13:a5:22:c7:ed:fd:46:1b:26:50:
7f:bf:69:db:02:9b:c8:1b:57:35:92:88:3c:e8:6c:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:76:01:7F:A1:2A:68:99:26:16:B5:6E:F7:D5:29:30:93:81:72
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:78:ab:71:47:60:f2:b0:9b:99:45:e3:ee:84:5e:0f:cd:99:
27:10:b9:6a:c4:a5:f5:7f:6d:99:91:6e:77:b4:d1:f0:90:8e:
b7:7a:1c:4e:ca:71:6c:59:e6:5d:9c:1f:51:1a:82:7a:dc:0f:
1b:97:70:86:9e:d6:28:32:0f:f5:4c:dc:c3:07:a0:e9:78:21:
78:10:8b:f1:b1:0d:d7:85:81:9b:4f:03:ce:b6:09:d0:03:d2:
8a:8a:77:2b:8c:54:56:67:bb:db:a3:d1:16:ec:71:9f:0f:b9:
0c:43:3a:4d:db:3e:f2:28:2b:d3:ff:81:75:d2:b9:08:b2:0c:
d6:c2:ce:85:7f:a1:9c:b2:eb:eb:50:56:d7:86:a1:41:67:0a:
4d:96:91:b1:ee:7f:25:c3:93:89:6e:15:79:36:6a:71:95:58:
13:99:8d:76:b9:3f:38:72:87:66:80:24:59:0f:a7:de:fd:9a:
22:28:ed:3b:33:d1:33:a0:61:f1:72:92:f7:e3:4a:ff:aa:24:
90:35:4d:4b:2e:f6:1e:5a:14:a2:d7:d4:c5:34:5e:1d:8b:4f:
fa:55:b1:cc:99:40:75:bd:8d:e2:e6:27:9f:35:de:e8:ad:69:
28:67:61:c7:ef:26:59:2e:75:78:5a:1a:0b:4c:0f:a4:e1:d8:
85:e0:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:51 2025 by rpki-client