Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U8SFCm_YJD-IR_sf3HrLOa-H6Zo.roa
File: U8SFCm_YJD-IR_sf3HrLOa-H6Zo.roa (raw, json)
Hash identifier: Em+95kok3F05Ou2/4BiTdLA18WEjFgkVWqoAjKXuowU=
Subject key identifier: 53:C4:85:0A:6F:D8:24:3F:88:47:FB:1F:DC:7A:CB:39:AF:87:E9:9A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBD7721F8FD433AAFBA2CB4735EFA84
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U8SFCm_YJD-IR_sf3HrLOa-H6Zo.roa
Signing time: Tue 17 Jun 2025 11:54:18 +0000
ROA not before: Tue 17 Jun 2025 11:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204872
IP address blocks: 2a13:c441::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bd:77:21:f8:fd:43:3a:af:ba:2c:b4:73:5e:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c4850a6fd8243f8847fb1fdc7acb39af87e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:9d:6b:2e:9e:bf:d4:49:81:0f:de:1a:cd:
6c:cf:1b:97:9b:27:3d:c9:f0:a8:7d:2a:22:33:f1:
02:e4:73:73:62:8c:ce:45:1b:24:e1:cb:ac:37:0e:
98:a3:d6:b9:35:df:b6:55:09:e0:98:04:ac:cf:15:
f6:f0:55:96:65:1e:9b:68:69:2e:4b:3a:e3:c4:46:
c0:7b:b5:c3:fc:81:ba:de:cf:30:33:89:45:9a:73:
42:fa:25:46:25:1e:14:39:fa:40:37:70:76:15:07:
c1:2e:22:20:0a:31:c9:36:16:cd:38:36:a8:0d:56:
04:03:b2:bf:d9:90:5b:40:99:c2:b5:12:e9:49:a0:
12:b3:06:7a:1f:4b:c6:c2:92:7c:e4:ca:6c:36:4c:
69:55:cc:7b:64:c8:29:96:d0:31:c0:89:f5:e0:cd:
76:01:a2:82:00:c5:f4:9c:f6:54:88:a6:3f:14:98:
1e:ed:bd:88:3c:02:9c:77:c8:a4:5b:9e:1b:a7:f7:
2b:19:d9:8c:ff:d6:0f:98:1a:63:7a:a3:48:2b:20:
12:4d:e3:82:c0:12:e9:b3:6b:31:12:eb:2f:76:d8:
b1:6e:83:e0:5c:0a:73:89:38:59:af:fc:33:47:58:
11:06:2a:5e:2d:6d:2e:ed:a2:83:01:72:0a:39:f6:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C4:85:0A:6F:D8:24:3F:88:47:FB:1F:DC:7A:CB:39:AF:87:E9:9A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U8SFCm_YJD-IR_sf3HrLOa-H6Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c441::/32
Signature Algorithm: sha256WithRSAEncryption
36:ab:fd:ee:4e:7f:e6:45:5c:38:cb:7e:a6:51:09:ed:46:50:
b2:0e:6d:35:bb:87:9c:e8:fc:13:88:41:d4:4f:44:36:85:e0:
17:0a:bd:e5:41:e0:85:0d:c3:df:ba:ab:9b:d8:0f:1d:5a:39:
b6:bb:b6:61:2b:5c:0b:c6:55:b7:a9:06:d2:c1:d4:71:60:53:
af:41:68:79:87:df:6b:e3:2c:ef:98:d1:41:a0:09:2e:45:4e:
81:3f:3e:ed:ce:8f:2f:92:40:b5:6b:c9:5a:7c:c1:ea:a5:95:
bc:c0:87:49:94:c3:d9:17:fe:2f:5b:05:85:ab:37:ac:fd:51:
56:71:ee:04:69:64:50:0a:76:ba:eb:c6:4b:18:84:5d:af:94:
0d:27:4a:bd:94:72:78:8f:3d:13:fd:93:ce:fb:78:a1:63:a7:
be:62:20:8b:da:95:ea:2b:6a:5f:1c:e5:8e:92:14:4b:02:1e:
f1:49:ea:3d:f4:50:12:08:39:9c:94:f8:c2:13:e4:5c:67:bc:
4b:20:7c:9b:65:bd:d5:e5:92:94:cc:80:ea:d3:07:f5:90:2a:
8e:eb:9f:a5:a0:76:50:c1:77:0b:44:12:dc:b4:14:6a:cd:9b:
34:c8:c0:45:96:61:95:7b:dd:01:4d:30:0c:c3:58:20:31:70:
f4:a2:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:05:57 2025 by rpki-client