Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PpEHBc4j7FK3gBv1hfECb3hjp5Q.roa
File: PpEHBc4j7FK3gBv1hfECb3hjp5Q.roa (raw, json)
Hash identifier: 0Wf8Oms7SJECIBkqrDoXOvQqx3WE4M9QGt26JfSW1ok=
Subject key identifier: 3E:91:07:05:CE:23:EC:52:B7:80:1B:F5:85:F1:02:6F:78:63:A7:94
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196B192CEC682E592F554BEAFBFE9E82C71
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PpEHBc4j7FK3gBv1hfECb3hjp5Q.roa
Signing time: Thu 08 May 2025 20:25:10 +0000
ROA not before: Thu 08 May 2025 20:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200216
IP address blocks: 2a10:3f81::/32 maxlen: 32
2a13:c244:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:92:ce:c6:82:e5:92:f5:54:be:af:bf:e9:e8:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 8 20:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e910705ce23ec52b7801bf585f1026f7863a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:2c:c1:d3:ad:4e:08:7d:2c:28:dd:f2:8d:
05:fd:ce:d0:d9:9f:18:5b:ef:17:22:19:dd:8f:63:
0c:5b:75:b0:0a:76:ae:5e:f5:7d:2a:59:d9:73:86:
08:57:e5:d8:50:8b:5c:7a:13:6e:5d:66:04:14:8d:
22:e0:27:52:7a:0d:48:34:f7:85:85:3a:32:c2:0e:
f9:2e:10:5d:29:dd:e1:b9:81:b4:d6:97:7f:c2:ae:
69:ac:15:a6:a9:28:56:87:bf:00:06:a1:f0:18:f3:
d8:80:40:d2:72:0e:59:1f:4b:78:af:48:bc:50:95:
82:1e:0f:90:f1:08:71:bf:1d:de:a9:17:28:29:f2:
06:d3:66:54:b1:81:32:40:06:bd:82:cf:d4:5b:93:
b2:fd:1b:91:ed:cd:11:52:5c:7a:f5:a5:50:8c:05:
18:ca:36:40:56:53:fd:ce:9e:35:f8:10:c9:ee:7b:
04:ed:0e:16:dd:41:b5:57:4f:6d:f1:85:d5:b8:07:
e9:c4:fd:83:f6:46:e5:9c:a3:1c:0c:84:21:62:85:
d3:84:34:92:26:cc:e8:5e:37:3b:fa:ab:dc:31:37:
10:9b:ef:c4:a0:6e:92:14:0d:2d:d9:8e:2b:b7:b7:
52:18:1c:11:c6:db:67:22:8b:67:ff:c2:24:42:bb:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:07:05:CE:23:EC:52:B7:80:1B:F5:85:F1:02:6F:78:63:A7:94
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PpEHBc4j7FK3gBv1hfECb3hjp5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f81::/32
2a13:c244:8000::/33
Signature Algorithm: sha256WithRSAEncryption
70:e0:65:4f:85:c8:82:b2:1c:bb:91:3c:73:0e:c0:cb:a1:4a:
c2:5a:9f:d3:7b:9c:a1:b8:6e:c0:10:74:7a:ee:54:3a:a9:5b:
ba:e0:f7:e2:47:1b:4b:9b:b5:f6:2e:b5:38:fe:76:94:a9:e5:
17:1d:0b:dd:a2:95:06:49:33:c4:fd:ca:51:84:18:38:89:c0:
08:a7:32:85:1d:2c:08:10:63:06:52:38:b1:56:22:2c:db:97:
f6:08:14:bd:ed:b1:f6:c1:35:27:28:04:0b:20:7e:c8:d5:85:
84:e1:63:5c:0a:44:0d:e7:92:c1:9d:99:b6:01:38:86:2d:70:
5f:01:45:5d:5f:f8:aa:e4:42:45:43:36:7f:6d:86:c4:18:0c:
dc:a8:a7:37:f4:c2:f0:81:0c:f1:7d:f5:69:94:77:1e:eb:2f:
a0:ff:c0:65:55:05:07:06:f6:f3:c0:84:e7:b8:5a:26:de:3b:
c8:a2:0b:82:73:3d:25:ed:97:d8:6e:09:9a:a4:0f:12:8b:a0:
7a:1b:33:e9:ca:60:9f:1a:e7:f8:e9:76:0e:63:0e:f4:83:54:
2c:93:83:86:b9:22:13:67:fb:52:f4:0e:29:c6:13:0a:c3:8f:
63:98:7e:4f:d1:36:b3:e9:e4:9d:95:47:9d:de:96:a8:e2:0e:
bb:92:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:28:48 2025 by rpki-client