Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/piHEdydBDoDcvP8EQ-yXEGGM2Qc.roa
File: piHEdydBDoDcvP8EQ-yXEGGM2Qc.roa (raw, json)
Hash identifier: BMYwqO37kjoLDqU4WG7f5HjDi/XvPpoS8XG9BwUkb2k=
Subject key identifier: A6:21:C4:77:27:41:0E:80:DC:BC:FF:04:43:EC:97:10:61:8C:D9:07
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196D45127EF45C6B6453E1F41D746EDFA7D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/piHEdydBDoDcvP8EQ-yXEGGM2Qc.roa
Signing time: Thu 15 May 2025 14:20:10 +0000
ROA not before: Thu 15 May 2025 14:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 2a0f:1584:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:51:27:ef:45:c6:b6:45:3e:1f:41:d7:46:ed:fa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 15 14:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a621c47727410e80dcbcff0443ec9710618cd907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:63:27:de:53:b8:a4:70:e2:ca:67:80:63:
ea:6f:75:11:e3:05:a4:40:c4:28:3a:2b:f7:55:c0:
2a:2f:36:a9:fa:15:a8:ce:51:e8:46:24:51:c8:50:
f0:19:4d:cb:52:8f:62:fa:2d:77:e2:84:ff:97:f5:
66:db:bd:08:bd:37:5e:81:60:b5:75:ba:31:8c:51:
e3:2b:4b:5a:ba:f1:ce:b6:eb:2f:78:de:b5:4f:13:
c3:7e:7d:0d:f2:26:78:ed:b9:3a:37:4e:db:23:05:
07:f0:da:25:ee:d4:8f:26:26:6b:79:77:d2:18:7a:
49:02:0d:cc:7d:5c:95:97:e0:70:1c:bf:6a:37:5d:
a8:6f:b6:7d:97:a4:a4:ad:b4:74:4d:ae:6e:9b:8c:
14:2d:fe:1a:ab:ee:3e:03:72:29:25:7e:cd:c3:a2:
bc:79:12:ee:b8:be:ad:1c:93:be:55:74:e3:0b:f4:
fa:4b:a8:21:67:8b:ad:c6:fe:14:57:46:42:8f:d1:
ec:ea:2d:4e:f1:e8:d0:98:0a:cd:9a:e5:d5:08:78:
df:7b:f8:2e:bf:e8:54:83:16:5d:51:12:ea:cb:23:
8f:26:70:7e:8a:16:6c:19:30:cf:20:5c:ce:49:45:
b7:0a:25:16:79:a0:7c:3e:14:55:77:b3:ac:e1:1a:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:C4:77:27:41:0E:80:DC:BC:FF:04:43:EC:97:10:61:8C:D9:07
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/piHEdydBDoDcvP8EQ-yXEGGM2Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1584:1::/48
Signature Algorithm: sha256WithRSAEncryption
05:5e:70:53:ba:b3:6f:86:55:83:55:c0:55:6c:20:ea:90:35:
29:10:36:2e:4e:75:d9:e1:2e:f4:35:bf:f9:bd:d4:90:78:c4:
4f:e4:2f:50:86:9f:08:9f:34:1c:7c:59:a4:92:76:b7:5b:ce:
c4:8e:4c:b2:ba:4e:d7:a4:7a:66:9a:b7:8d:e7:f9:14:3b:6a:
78:12:cc:dc:32:2b:3c:9a:c7:b3:95:91:7a:58:6b:f6:26:c7:
9b:4a:a9:ca:2f:4a:31:1b:2d:7d:d8:69:8f:62:c3:78:fb:bc:
f6:3b:cb:46:93:8d:8b:c4:49:50:a8:8a:80:85:d8:0b:93:7c:
48:10:bb:42:c9:75:68:a2:db:04:7f:e3:54:97:84:00:73:65:
36:30:38:8c:6e:3c:2b:d5:9e:38:44:37:b6:30:a6:2e:d5:eb:
37:fa:d8:50:72:30:5f:fa:2c:85:55:18:7d:bb:e1:4f:bb:50:
00:7b:39:d2:e3:cf:38:84:d9:0b:df:16:eb:dd:84:d2:ac:0e:
af:8e:f8:6b:9b:0a:be:01:bf:a0:ae:4e:3a:2e:12:8b:1f:6d:
e6:a7:ae:5a:77:f1:a6:d1:78:2d:ba:fc:8c:b2:61:34:d0:cf:
ee:39:c4:3b:19:27:75:bd:a0:53:01:b2:ce:69:bb:31:5b:25:
ce:3d:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:48:23 2025 by rpki-client