Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa
File: 3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa (raw, json)
Hash identifier: 3KgZqAhwrFXDW/vYa1+gIOYPmnsUMBf4mPAqrTO23HI=
Subject key identifier: DF:E7:CF:F6:9E:0D:F8:9B:35:B9:66:36:10:FB:14:0E:7D:93:6B:46
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 01968C44F144F64C4A5D8DD8129EC5B60D15
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa
Signing time: Thu 01 May 2025 14:34:10 +0000
ROA not before: Thu 01 May 2025 14:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50989
IP address blocks: 2a00:1c20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:44:f1:44:f6:4c:4a:5d:8d:d8:12:9e:c5:b6:0d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: May 1 14:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe7cff69e0df89b35b9663610fb140e7d936b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:95:95:da:54:01:06:3c:75:2d:84:7a:94:
33:85:bd:1b:02:88:7a:1a:16:8c:2f:9b:19:3f:14:
23:d1:71:4d:d2:82:8a:d5:cd:22:82:24:eb:64:11:
3c:03:b5:c5:62:2b:d4:d9:10:76:a2:b8:ff:a7:b1:
ed:bd:b9:2b:01:98:8c:77:06:1a:79:cc:14:f6:62:
56:13:6a:fe:a4:b9:23:3c:fb:86:20:df:9c:d7:d2:
d4:0d:53:07:a8:6e:cd:dc:3a:12:1d:39:41:72:68:
fb:2f:7b:df:5f:6d:df:7c:8f:bd:45:ea:fc:14:53:
ce:b8:1e:2c:c8:af:98:73:93:b7:07:64:db:cc:d0:
18:9b:e9:15:b2:3c:10:fe:84:35:b4:13:cb:2e:7c:
bb:99:3d:73:71:88:c1:5f:16:45:51:94:55:73:c6:
80:69:c3:09:db:99:c6:ab:68:d3:1a:2e:e7:d8:e3:
f5:16:80:e2:9a:02:84:78:75:e6:68:57:e9:82:6a:
55:44:56:d5:80:2d:51:b8:ef:1f:2f:a9:40:74:88:
83:5d:eb:2e:a3:6f:36:0e:1e:d9:c6:d6:bc:54:21:
96:a8:8a:33:cb:e3:8b:34:6b:2c:ba:c6:91:e0:d2:
8f:aa:ca:58:95:93:84:19:a5:e1:4a:81:b5:95:07:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:CF:F6:9E:0D:F8:9B:35:B9:66:36:10:FB:14:0E:7D:93:6B:46
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/3-fP9p4N-Js1uWY2EPsUDn2Ta0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c20::/32
Signature Algorithm: sha256WithRSAEncryption
48:bd:65:a1:d8:da:d0:3a:f9:16:1e:d4:a2:bc:51:88:2c:65:
a0:46:7b:89:9a:aa:4a:c1:91:22:5e:df:12:a3:b5:68:17:d8:
62:4f:9f:0a:0b:e4:6a:b1:77:bc:05:ca:02:7c:56:a1:d7:45:
34:ac:2b:a8:30:23:d9:6d:76:d5:9b:15:25:82:79:95:8c:6a:
fe:f0:de:56:84:9c:f6:cf:24:62:32:b3:28:47:14:a4:66:21:
39:66:ae:63:e4:7f:27:b2:e8:f3:9c:e0:c0:28:f0:27:f2:83:
ad:3c:d4:fd:27:5d:d5:ea:ec:c3:4b:6a:27:04:59:2a:21:7d:
23:9d:09:f7:fc:a7:49:fb:b8:70:b7:43:e7:ee:dc:ee:ef:b6:
8d:b4:49:d7:a3:19:e4:ff:e1:33:39:96:fc:0f:ef:0c:f2:7f:
ed:cc:0c:b6:12:85:c9:36:e9:d9:93:ee:ee:3f:9d:72:3a:50:
94:c6:c7:6e:9c:54:05:df:17:24:d8:be:78:d7:d5:7f:74:de:
a7:22:17:75:c6:38:d2:20:a0:e9:69:fd:3f:50:84:fa:10:ae:
3f:4a:04:f2:3c:b3:8f:26:db:6f:d4:b9:c9:60:1c:1e:2e:c7:
13:f2:ac:94:c0:48:a9:20:33:47:5c:2a:99:e9:24:96:1f:be:
d9:49:27:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:20 2025 by rpki-client