Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3UD83TpOxPeRIFW5dCr6MRnbWIo.roa
File: 3UD83TpOxPeRIFW5dCr6MRnbWIo.roa (raw, json)
Hash identifier: LK2PHJhAs91RwtccX/vsZem+QP+pvWYYER/4TBS5RoA=
Subject key identifier: DD:40:FC:DD:3A:4E:C4:F7:91:20:55:B9:74:2A:FA:31:19:DB:58:8A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01992E57BBB7626BB97877015031F741F262
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3UD83TpOxPeRIFW5dCr6MRnbWIo.roa
Signing time: Tue 09 Sep 2025 11:58:45 +0000
ROA not before: Tue 09 Sep 2025 11:58:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215059
IP address blocks: 2a04:6e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:57:bb:b7:62:6b:b9:78:77:01:50:31:f7:41:f2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 9 11:58:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd40fcdd3a4ec4f7912055b9742afa3119db588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:ae:ee:5e:c3:6d:4d:f6:db:7c:ea:8c:e9:
da:04:c7:d4:77:e1:fe:1e:5c:fe:1f:cf:65:dc:6e:
5b:d4:f7:d4:5d:65:3b:41:32:a1:73:0a:e4:1a:40:
44:df:55:51:1b:a3:92:3f:3e:d6:7c:51:a7:5d:ee:
07:7f:4e:b3:7a:f3:db:6d:18:54:40:a6:e6:a0:40:
ca:98:bf:9b:b2:08:5f:3a:97:b6:32:3d:ec:e4:ee:
b3:ef:1d:22:73:be:8c:0e:c8:1d:50:f9:9a:19:73:
f3:9d:cf:a0:83:0c:1d:39:da:0a:5a:cc:e2:6a:69:
8c:61:9e:4f:e3:a2:5d:90:80:90:50:58:06:55:b5:
e8:2e:d3:de:cb:2e:22:02:e5:be:01:b0:3d:72:bd:
79:42:94:d5:16:0b:00:ca:92:67:9c:7a:e5:f4:a8:
38:4b:69:35:3f:93:08:13:96:13:97:18:47:51:cb:
98:0f:1a:4a:69:bc:eb:e2:66:25:23:ad:27:20:8e:
d9:32:e2:51:b2:9e:7a:2d:df:8c:b4:7d:24:ba:1c:
9c:fe:1e:49:ac:db:64:f7:11:7c:4c:9a:69:4f:4d:
91:fc:71:3c:08:71:e3:d5:e9:56:2a:88:65:15:3d:
47:b0:2b:82:46:15:8e:8a:69:c4:c2:db:92:83:76:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:FC:DD:3A:4E:C4:F7:91:20:55:B9:74:2A:FA:31:19:DB:58:8A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3UD83TpOxPeRIFW5dCr6MRnbWIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:9e:21:9e:01:f9:ac:ae:6b:cf:4b:50:fd:a1:0e:9c:a7:e4:
b0:72:c2:49:fc:4a:76:9c:09:f7:27:45:1c:4d:59:03:b3:ff:
47:57:97:df:e9:78:81:db:58:10:19:4b:0e:40:d7:e2:4a:ee:
08:d9:57:41:11:41:a2:c2:03:56:6e:51:4c:b0:78:11:ce:11:
80:87:f7:1a:7a:7c:90:22:95:c8:df:0d:b5:7f:f3:5d:a7:ce:
92:43:52:c2:ae:22:b0:4d:40:28:24:bc:76:81:51:6a:b0:b9:
41:79:ed:75:94:01:6c:99:04:58:57:d8:78:8b:89:c4:2c:be:
16:0f:33:43:55:77:72:31:26:7c:a9:33:fd:b8:c8:c9:eb:e1:
47:29:3c:00:72:69:ed:ed:2c:97:da:58:ac:75:d0:1d:af:3a:
a0:11:75:45:cb:2e:ba:20:b2:fb:48:f2:32:41:94:05:49:45:
a3:74:87:ec:c8:17:63:5f:bb:27:84:b6:ab:15:2f:48:77:a3:
9b:04:9a:b6:aa:b3:b7:35:a3:84:e5:d0:b3:6b:3d:6c:1c:92:
a6:b6:1c:0d:97:b4:07:b9:b9:94:41:fd:be:c3:7f:2d:d9:7c:
04:5d:d1:33:e2:89:03:81:45:11:1f:62:69:dc:55:c7:57:09:
90:be:18:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZkuV7u3Ymu5eHcBUDH3QfJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjUwOTA5MTE1ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDQwZmNkZDNhNGVjNGY3OTEyMDU1Yjk3NDJhZmEzMTE5ZGI1ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoGu7l7DbU3223zqjOnaBMfUd+H+
Hlz+H89l3G5b1PfUXWU7QTKhcwrkGkBE31VRG6OSPz7WfFGnXe4Hf06zevPbbRhU
QKbmoEDKmL+bsghfOpe2Mj3s5O6z7x0ic76MDsgdUPmaGXPznc+ggwwdOdoKWszi
ammMYZ5P46JdkICQUFgGVbXoLtPeyy4iAuW+AbA9cr15QpTVFgsAypJnnHrl9Kg4
S2k1P5MIE5YTlxhHUcuYDxpKabzr4mYlI60nII7ZMuJRsp56Ld+MtH0kuhyc/h5J
rNtk9xF8TJppT02R/HE8CHHj1elWKohlFT1HsCuCRhWOimnEwtuSg3Z8swIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN1A/N06TsT3kSBVuXQq+jEZ21iKMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvM1VEODNUcE94UGVSSUZXNWRDcjZNUm5iV0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgRuQDAN
BgkqhkiG9w0BAQsFAAOCAQEAa54hngH5rK5rz0tQ/aEOnKfksHLCSfxKdpwJ9ydF
HE1ZA7P/R1eX3+l4gdtYEBlLDkDX4kruCNlXQRFBosIDVm5RTLB4Ec4RgIf3Gnp8
kCKVyN8NtX/zXafOkkNSwq4isE1AKCS8doFRarC5QXntdZQBbJkEWFfYeIuJxCy+
Fg8zQ1V3cjEmfKkz/bjIyevhRyk8AHJp7e0sl9pYrHXQHa86oBF1RcsuuiCy+0jy
MkGUBUlFo3SH7MgXY1+7J4S2qxUvSHejmwSatqqztzWjhOXQs2s9bBySprYcDZe0
B7m5lEH9vsN/Ldl8BF3RM+KJA4FFER9iadxVx1cJkL4YOw==
-----END CERTIFICATE-----
Generated at Sat Sep 13 10:22:30 2025 by rpki-client