Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/5gIfRwVhqnQUHFSj8ihyvvdKzOQ.roa
File: 5gIfRwVhqnQUHFSj8ihyvvdKzOQ.roa (raw, json)
Hash identifier: gQmpBgCuX5Zweizofj3xCZvVghlwgY/WkExieQFAhus=
Subject key identifier: E6:02:1F:47:05:61:AA:74:14:1C:54:A3:F2:28:72:BE:F7:4A:CC:E4
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 01971C82AAD088655FE4DE988EE7215E6E02
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/5gIfRwVhqnQUHFSj8ihyvvdKzOQ.roa
Signing time: Thu 29 May 2025 14:46:54 +0000
ROA not before: Thu 29 May 2025 14:46:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 2a13:4a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:82:aa:d0:88:65:5f:e4:de:98:8e:e7:21:5e:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: May 29 14:46:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6021f470561aa74141c54a3f22872bef74acce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:02:94:7f:61:9b:b8:e4:7b:dc:9a:a0:fc:
d3:70:4b:62:da:e4:f4:83:59:c9:94:6a:7d:de:3d:
ae:4a:2f:5b:fa:47:b1:7c:e8:3a:84:d1:ca:25:08:
da:b1:d9:7a:ec:ef:55:7b:66:bb:d7:89:9a:ea:4b:
6e:f0:9a:3f:c8:28:e5:38:d8:a1:ee:ae:2c:87:01:
90:f8:a0:d2:bc:39:f5:33:ca:99:b1:01:95:b1:91:
49:9d:0b:dc:e4:cf:6e:dd:8c:b5:99:92:8c:18:d6:
64:b0:4d:96:35:69:1e:07:ba:e7:d7:b4:e8:6f:52:
6d:0c:34:b9:1e:25:da:d5:e9:d0:01:2a:9d:9f:d4:
2d:1f:f9:91:a0:17:cb:3d:4c:f8:92:55:38:12:e9:
32:74:8f:d3:34:3d:d0:69:13:3f:10:23:bc:be:73:
8d:76:6f:5c:e0:b9:9a:fa:02:23:1c:94:3c:ef:78:
ed:f9:47:5f:9e:e6:cf:59:31:34:33:b0:5f:05:d0:
8f:73:ce:c1:66:31:19:11:34:36:64:94:a5:09:1c:
16:2e:ed:bc:00:ce:c8:2f:93:ab:37:1f:0e:3d:07:
f6:16:b6:0d:6e:48:c2:b5:42:71:51:ef:ab:ec:ca:
e8:14:4d:bc:98:dd:90:cd:fc:fc:44:50:18:af:5e:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:1F:47:05:61:AA:74:14:1C:54:A3:F2:28:72:BE:F7:4A:CC:E4
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/5gIfRwVhqnQUHFSj8ihyvvdKzOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
59:14:f3:8a:49:40:b9:5e:7b:de:dd:83:7e:1c:58:f8:94:94:
47:30:3b:56:82:ac:73:91:f0:a2:39:59:80:ef:15:f3:47:34:
ba:b6:0e:34:09:88:2f:80:bc:c4:d4:24:aa:1d:76:80:45:dd:
f8:2f:c8:92:61:c8:2c:0a:9c:d6:5b:fa:75:03:b3:34:fe:46:
9f:1d:53:1b:0d:3f:92:9c:28:a1:cf:fc:79:b4:58:1b:91:9f:
84:19:c2:8f:1f:e2:dd:b1:04:79:7c:55:c9:29:e5:6b:a7:41:
cc:5d:6c:3a:1e:74:90:6a:44:7b:a5:dd:0a:95:08:b5:17:5a:
ba:9a:eb:60:2b:ce:be:a1:8f:b4:12:86:af:d1:7e:e6:d5:8d:
f5:6a:58:d5:f1:22:b8:8c:df:9a:4d:26:dd:7c:37:f6:8f:16:
12:6f:e3:97:c6:8e:e3:8c:23:3f:52:2d:8e:1a:73:91:12:8b:
02:c6:fd:30:1f:e0:6b:46:0a:ca:64:0a:9e:16:dd:d2:5a:ea:
ad:52:35:fd:9f:5c:bb:fd:93:62:70:4d:49:d8:5d:6d:02:dd:
0f:9e:72:8e:7f:7f:ef:a5:b1:f3:ab:f9:c4:e2:dd:f9:dc:1b:
73:1a:91:85:b7:68:71:74:d2:d8:48:dc:7c:b9:1c:ca:ed:a9:
1c:fd:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:35:33 2025 by rpki-client