Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XLUh0v_eWb4ByZlyr_8IFlpagYM.roa
File: XLUh0v_eWb4ByZlyr_8IFlpagYM.roa (raw, json)
Hash identifier: OZc6IBFQYjTFaecuhGPDb6Fno7u24w/UXmkci73bi8k=
Subject key identifier: 5C:B5:21:D2:FF:DE:59:BE:01:C9:99:72:AF:FF:08:16:5A:5A:81:83
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0197B095E3325350DD46F3FEC42A34531EBE
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XLUh0v_eWb4ByZlyr_8IFlpagYM.roa
Signing time: Fri 27 Jun 2025 08:51:42 +0000
ROA not before: Fri 27 Jun 2025 08:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34907
IP address blocks: 2a14:140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:95:e3:32:53:50:dd:46:f3:fe:c4:2a:34:53:1e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 27 08:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cb521d2ffde59be01c99972afff08165a5a8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:0a:9c:aa:77:7a:9a:6f:06:d2:3d:d2:f0:
f0:3a:ea:9a:7c:28:e2:3d:e7:ab:6f:37:e1:61:91:
f5:91:68:43:ed:97:7f:4b:26:a4:d6:27:38:44:11:
42:22:e5:3a:d7:68:14:38:3e:d6:85:d4:35:81:7f:
ed:76:11:5f:f2:9c:14:21:cc:c5:c7:4f:71:f3:f5:
ce:b4:b1:8d:91:26:e6:dd:ce:84:4a:20:2b:96:68:
b6:ab:e8:7e:2d:79:9b:73:ad:47:96:54:df:b3:61:
75:08:c3:28:9d:bf:d0:37:a3:a7:bd:22:90:5d:52:
2f:37:af:99:be:8d:e1:b4:ed:4a:56:ef:7d:d1:01:
a6:99:8e:32:e2:34:c1:99:1f:e1:c7:e1:f9:f1:e9:
f9:fa:f6:c3:a7:22:cd:76:e2:b3:e5:16:fa:8a:53:
95:6f:e5:1a:38:45:87:33:1d:84:75:f5:0a:b4:5e:
74:9a:72:74:88:e0:83:db:21:a1:b2:df:d2:94:04:
c3:61:34:cd:ca:e4:5c:e5:cb:31:55:77:b0:a4:2a:
3b:21:75:9b:59:f0:78:d1:3a:1b:00:61:c8:d9:55:
2c:58:28:c0:5d:1f:76:d4:87:e2:ab:1c:cf:d9:d7:
11:47:96:f0:9c:5c:31:71:cf:3e:79:f1:9e:27:b8:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:21:D2:FF:DE:59:BE:01:C9:99:72:AF:FF:08:16:5A:5A:81:83
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XLUh0v_eWb4ByZlyr_8IFlpagYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:140::/29
Signature Algorithm: sha256WithRSAEncryption
17:f2:28:5e:a7:bc:90:02:fc:ed:ba:16:1e:6e:f8:7e:5f:ee:
ee:3a:d5:73:a6:30:c0:43:7c:f0:0b:fc:00:e7:dc:ca:5e:57:
40:cb:eb:bf:30:b2:2c:1f:24:54:59:e6:1c:47:19:e4:47:6e:
ae:09:0b:aa:a4:bc:df:fc:80:63:02:60:6a:b1:4d:83:ef:a5:
a6:8c:b8:60:46:2e:44:89:31:f3:36:25:41:8c:de:d8:c1:49:
a5:8b:4c:62:58:9e:d3:30:46:94:23:2d:6f:8f:52:c4:6a:a7:
f9:01:3a:fa:3e:d4:40:3f:ca:4a:82:cb:67:20:9a:1f:98:30:
b0:9c:c3:84:7b:6e:6b:74:d3:a8:b9:c6:ce:7f:5c:64:fb:81:
55:ad:b6:c7:f0:0d:b8:19:92:9e:5b:aa:aa:85:9e:6a:9d:2c:
80:79:fd:9b:af:c5:ca:2b:e5:44:6b:3c:2e:86:06:8d:8f:93:
06:a2:f5:59:0e:1c:c2:fe:ef:d6:d3:ba:56:73:4c:67:c8:58:
34:db:6f:87:44:b9:4a:7d:5c:9e:ac:cd:7f:84:8b:90:55:dc:
f8:d2:9f:44:03:d8:eb:d2:ad:7a:bc:f8:40:ed:e8:e0:be:ae:
55:44:c5:37:d9:d2:f5:52:33:40:ef:14:cf:3d:39:a0:ce:c9:
8b:a5:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:12 2025 by rpki-client