Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/RuZvzxLvicWfAkL-HU_suiyEHkc.roa
File: RuZvzxLvicWfAkL-HU_suiyEHkc.roa (raw, json)
Hash identifier: 1ChRVjdhLwU5Jyhx1uu/EkAAaI5ej8w7SIJnkr0NI2Q=
Subject key identifier: 46:E6:6F:CF:12:EF:89:C5:9F:02:42:FE:1D:4F:EC:BA:2C:84:1E:47
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 0198EFD5834775C7C723CC804481A0C7C22D
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/RuZvzxLvicWfAkL-HU_suiyEHkc.roa
Signing time: Thu 28 Aug 2025 08:40:04 +0000
ROA not before: Thu 28 Aug 2025 08:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50346
IP address blocks: 212.6.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:d5:83:47:75:c7:c7:23:cc:80:44:81:a0:c7:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Aug 28 08:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46e66fcf12ef89c59f0242fe1d4fecba2c841e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:84:f5:ec:5b:2c:11:cf:74:c1:1a:35:0f:
0e:cb:ef:b9:2d:ca:79:a5:97:15:f7:47:75:4d:d5:
f9:ad:f2:f8:a8:2c:89:c4:57:1b:35:5f:32:3a:8c:
14:63:f7:4a:ce:fb:22:b7:31:48:ab:b2:c2:f0:8b:
40:62:40:43:ee:41:1c:d4:ea:92:23:8f:39:16:40:
71:20:f4:92:f6:ba:95:c3:e3:7f:e7:ad:9b:8a:2d:
45:e6:98:ca:60:17:e6:ef:ec:71:b3:ec:0c:3b:77:
80:81:4b:91:c3:5d:82:52:60:75:f9:9c:26:8c:92:
c9:f5:a3:4a:4c:b4:51:9f:12:36:03:ae:fb:6b:e1:
03:52:ec:5a:e5:99:20:26:37:cc:90:6e:e9:fe:6b:
79:65:28:ad:00:9c:46:f0:8f:73:d6:e9:9b:4d:59:
10:4b:ba:5a:16:67:a6:15:31:85:be:f4:d9:ed:a2:
7a:de:a5:1d:81:2c:c8:ee:fa:11:49:b0:5a:f5:09:
c5:70:64:e4:05:08:e3:9b:65:28:6e:43:8f:cc:db:
7d:76:c5:56:94:59:1b:29:88:3c:d9:71:3b:e0:45:
e8:f8:e8:1a:c3:85:dd:fe:07:df:cc:36:ac:13:eb:
40:df:2c:f0:4b:37:86:2a:7a:e1:9a:8a:81:a3:f5:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:6F:CF:12:EF:89:C5:9F:02:42:FE:1D:4F:EC:BA:2C:84:1E:47
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/RuZvzxLvicWfAkL-HU_suiyEHkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cd:fa:72:68:bd:71:df:82:2a:d7:cc:98:d8:92:da:c2:29:
b4:b4:2f:0c:a1:b9:61:51:47:f7:38:24:d2:52:04:82:60:0b:
66:1c:25:b0:38:d0:8f:e4:ae:c5:e7:c4:7d:f6:e2:d8:58:3c:
18:65:07:db:b9:25:a6:bc:b8:29:b0:5d:f9:ed:4c:f2:a5:fa:
52:94:a8:15:21:40:81:90:0a:71:57:58:75:2b:33:09:4f:a2:
20:84:b4:85:c7:89:32:79:53:d0:22:29:9f:bf:08:f3:75:f8:
67:a2:bb:3d:9e:a2:6f:9a:4b:f9:8c:fe:d9:e7:e8:84:44:cf:
b4:ad:47:c7:5e:64:f2:a1:f5:e2:c4:6f:80:e3:b0:1f:fb:f8:
28:e4:f2:a1:a7:98:05:c3:82:42:49:83:8d:e2:2c:5e:0b:35:
4b:fb:00:6c:7c:bb:2f:a5:f2:c9:55:b8:c9:88:80:64:6d:56:
6b:41:03:c9:57:6a:4b:ed:19:4a:fd:03:cf:03:62:d0:d6:fd:
63:67:88:a0:19:4e:e2:d6:a4:66:bf:3e:13:51:a7:c6:50:62:
70:e0:4a:e9:5a:4e:3b:cc:44:f9:3e:f7:d6:aa:26:3c:c0:2d:
76:be:c1:3c:19:1b:13:5b:74:41:05:57:fd:e9:88:f4:5e:fe:
75:b2:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:48:41 2025 by rpki-client