Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa
File: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (raw, json)
Hash identifier: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=
Subject key identifier: F8:F2:94:B8:DB:04:27:7B:4B:64:4B:8F:8E:80:0E:40:C4:FF:5A:87
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 0198B98E8DDF84C4A75C6EB83E740A2B799E
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa
Signing time: Sun 17 Aug 2025 19:43:04 +0000
ROA not before: Sun 17 Aug 2025 19:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a12:5343:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 01:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b9:8e:8d:df:84:c4:a7:5c:6e:b8:3e:74:0a:2b:79:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Aug 17 19:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f294b8db04277b4b644b8f8e800e40c4ff5a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:73:54:52:01:76:37:3e:c5:ee:30:da:a1:
7a:13:d1:bb:ef:d5:2b:9e:f9:ba:12:cc:98:c0:82:
dd:72:6d:12:14:19:c2:5e:57:79:3b:5f:63:c6:45:
46:ba:74:f5:47:fe:56:c8:f2:59:38:f4:c0:97:5d:
38:e6:98:7f:30:3f:0e:59:dd:1b:13:93:13:16:b5:
4c:a1:e3:d9:5b:cc:27:2d:44:b9:cc:18:e2:3a:2e:
89:d0:ad:2c:b6:2d:40:90:d7:cc:cb:7b:02:a9:fe:
b2:3d:53:ed:3f:0e:f1:d9:b3:32:40:26:86:9d:1f:
61:b8:14:ee:2f:1c:03:cc:bc:e5:07:75:ae:50:b0:
1b:c8:f5:9d:69:06:6a:a9:09:34:d2:7b:cc:0a:4b:
71:3a:9e:2a:1b:ac:72:db:b6:81:38:b7:aa:03:de:
d7:bf:41:e9:38:9e:49:1f:58:8e:27:2a:2f:83:a4:
bc:6d:08:40:96:46:b3:77:7d:a4:3b:33:fa:61:4a:
22:fc:c9:8f:c9:d3:f9:a9:cf:f3:60:b5:84:09:2d:
b3:c8:32:cf:8d:a0:e0:f5:28:8a:b6:58:8a:4b:37:
ed:e9:da:be:b4:bc:5e:85:13:9c:65:3d:77:ff:1a:
d7:f9:13:69:7f:96:4f:2a:48:c1:91:83:00:4b:08:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:94:B8:DB:04:27:7B:4B:64:4B:8F:8E:80:0E:40:C4:FF:5A:87
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5343:6::/48
Signature Algorithm: sha256WithRSAEncryption
46:f2:bc:89:fe:ba:71:76:f0:14:34:fc:fd:1b:3c:42:d7:44:
99:10:ea:a9:2e:e0:5f:4a:82:02:15:b9:9c:01:43:92:87:d4:
ff:6f:32:3d:40:8d:0a:0d:15:6b:c0:8e:de:e3:67:b0:65:99:
2f:bb:ef:27:84:ff:47:da:42:e1:b3:14:3c:41:12:2b:70:0d:
8f:f3:25:07:71:08:3b:6d:bd:09:de:ce:8d:ef:1c:7e:ca:90:
6c:46:30:e0:5b:db:e7:6a:a7:b7:0e:fc:52:2d:3b:0d:a2:df:
ff:56:54:ee:4b:8d:f3:39:fc:72:c0:cc:43:59:09:a7:45:c2:
ab:45:e2:d1:d8:9e:84:ee:bf:75:f8:10:41:0f:58:fb:7b:73:
ab:28:41:06:9c:b0:91:f7:f6:1a:38:cb:1a:eb:36:74:11:5e:
d6:d0:fa:93:4b:9c:57:ba:05:00:13:70:a3:8a:9b:a8:fc:f5:
66:96:fc:1f:02:ea:7b:c8:e5:3f:cf:2f:d2:62:7d:1b:85:0e:
be:80:35:cf:c9:49:eb:c0:77:79:e5:20:8a:7d:58:d0:70:13:
16:31:9f:fe:d2:51:fb:59:ee:cb:fe:47:75:09:7d:5a:6a:c0:
c4:68:2e:89:5d:27:d1:55:33:20:ef:48:ef:9a:73:c1:6c:4c:
c5:07:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:24 2025 by rpki-client