Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6xBMykXleXyosV01BLEJTU6ypG8.roa
File: 6xBMykXleXyosV01BLEJTU6ypG8.roa (raw, json)
Hash identifier: ZdidGgqZmV19VuoUDkEoHJw8nogOkry2PBFmQAw+osI=
Subject key identifier: EB:10:4C:CA:45:E5:79:7C:A8:B1:5D:35:04:B1:09:4D:4E:B2:A4:6F
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0197A90A1FF6A077D1A0FEDA06FED6FEBF78
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6xBMykXleXyosV01BLEJTU6ypG8.roa
Signing time: Wed 25 Jun 2025 21:41:42 +0000
ROA not before: Wed 25 Jun 2025 21:41:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 2a0d:d940:52::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a9:0a:1f:f6:a0:77:d1:a0:fe:da:06:fe:d6:fe:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jun 25 21:41:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb104cca45e5797ca8b15d3504b1094d4eb2a46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:92:38:2b:c3:d1:68:d9:91:de:a9:ee:8d:
68:ca:fd:87:af:63:a0:da:91:c1:31:2e:1b:a5:ad:
b6:4d:00:f8:e4:c0:bd:9b:72:8e:34:94:1d:49:34:
38:1a:ce:b2:0e:ef:86:a9:57:fd:ee:c2:53:c5:75:
8c:8e:24:8d:15:cd:da:ac:86:df:85:39:d3:f2:d5:
33:e3:c7:07:47:4d:8c:c1:38:a7:de:15:21:99:17:
b1:dc:57:6b:82:11:71:64:0a:d8:0c:fd:5f:2a:8a:
9d:f1:e5:08:b2:e5:43:b2:7b:bd:06:b9:2b:cc:54:
7b:90:7b:67:fa:07:ff:d9:a0:92:c5:1c:f9:5d:96:
50:fb:6e:2e:d5:76:e8:41:22:2d:db:85:4e:ff:d7:
14:9e:f9:59:f7:a9:56:cc:9f:73:ed:d9:d9:7c:ef:
3a:03:5a:9a:b6:fa:6b:a1:e6:7d:e7:a4:f5:0a:3f:
82:0a:8a:ef:35:e5:a0:31:dc:21:48:0c:ca:cb:f1:
fc:29:d5:a5:78:63:80:73:cf:65:b3:5c:93:8d:77:
8b:49:dd:54:b5:b9:7c:9b:87:d3:19:d2:1e:28:c0:
b7:46:93:a9:87:d5:c5:8a:d9:85:cf:ba:9d:6d:a7:
59:63:03:cc:3b:30:15:1c:70:87:09:23:d0:8b:ef:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:4C:CA:45:E5:79:7C:A8:B1:5D:35:04:B1:09:4D:4E:B2:A4:6F
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/6xBMykXleXyosV01BLEJTU6ypG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:52::/47
Signature Algorithm: sha256WithRSAEncryption
7a:50:b6:c9:43:5a:bf:a3:6c:bb:d4:f0:b0:03:5a:83:9a:b6:
24:e1:b3:16:56:9a:8f:ef:a5:53:1b:30:94:b8:3c:ab:f7:07:
fc:73:6b:56:fa:bf:39:bc:8d:e7:1c:41:74:80:3c:4f:75:86:
c4:62:a6:50:b8:35:0a:0f:4c:fa:53:c0:e4:5f:fc:02:3b:37:
cf:4e:0d:ed:d4:30:75:ce:6d:ce:48:81:bd:3b:15:70:46:64:
bf:d2:9b:2f:bf:e7:35:23:28:eb:91:e7:15:e0:e1:01:fa:69:
25:af:9a:72:7d:67:81:6c:14:18:89:87:b9:db:50:e1:c0:4c:
32:80:88:c4:d8:74:5e:55:d1:d4:14:db:0a:ca:20:61:04:56:
69:da:a6:1d:83:aa:1f:07:67:25:52:88:41:9e:fa:5d:b4:9f:
c8:ec:ce:a4:c2:ec:b1:2c:2f:54:6b:ff:a1:bc:ce:2f:86:7a:
6b:fa:a7:84:a7:5d:05:18:a8:d1:cc:c5:d0:54:f2:53:68:ba:
9a:a5:60:fe:6b:09:c4:0a:aa:85:04:eb:c0:e5:43:de:3c:8f:
d3:a0:e6:3e:37:e6:cb:79:4b:9f:0d:6c:2e:f7:51:8c:cd:e2:
c3:fa:0e:c3:a3:60:3d:2c:19:e6:d7:26:b8:8a:4a:cf:ce:1d:
f7:5e:86:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZepCh/2oHfRoP7aBv7W/r94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwNjI1MjE0MTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjEwNGNjYTQ1ZTU3OTdjYThiMTVkMzUwNGIxMDk0ZDRlYjJhNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkKSOCvD0WjZkd6p7o1oyv2Hr2Og
2pHBMS4bpa22TQD45MC9m3KONJQdSTQ4Gs6yDu+GqVf97sJTxXWMjiSNFc3arIbf
hTnT8tUz48cHR02MwTin3hUhmRex3FdrghFxZArYDP1fKoqd8eUIsuVDsnu9Brkr
zFR7kHtn+gf/2aCSxRz5XZZQ+24u1XboQSIt24VO/9cUnvlZ96lWzJ9z7dnZfO86
A1qatvproeZ956T1Cj+CCorvNeWgMdwhSAzKy/H8KdWleGOAc89ls1yTjXeLSd1U
tbl8m4fTGdIeKMC3RpOph9XFitmFz7qdbadZYwPMOzAVHHCHCSPQi+9Y1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOsQTMpF5Xl8qLFdNQSxCU1OsqRvMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvNnhCTXlrWGxlWHlvc1YwMUJMRUpUVTZ5cEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg3ZQABS
MA0GCSqGSIb3DQEBCwUAA4IBAQB6ULbJQ1q/o2y71PCwA1qDmrYk4bMWVpqP76VT
GzCUuDyr9wf8c2tW+r85vI3nHEF0gDxPdYbEYqZQuDUKD0z6U8DkX/wCOzfPTg3t
1DB1zm3OSIG9OxVwRmS/0psvv+c1IyjrkecV4OEB+mklr5pyfWeBbBQYiYe521Dh
wEwygIjE2HReVdHUFNsKyiBhBFZp2qYdg6ofB2clUohBnvpdtJ/I7M6kwuyxLC9U
a/+hvM4vhnpr+qeEp10FGKjRzMXQVPJTaLqapWD+awnECqqFBOvA5UPePI/ToOY+
N+bLeUufDWwu91GMzeLD+g7Do2A9LBnm1ya4ikrPzh33XoYu
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:10:13 2025 by rpki-client