Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/l79QQR7g1xzaNKvAKVBm_1WTi-U.roa
File: l79QQR7g1xzaNKvAKVBm_1WTi-U.roa (raw, json)
Hash identifier: zsYKnqOhG4R3n+JU3wTocn0a5Xc3hvZm12NnQ85n+jA=
Subject key identifier: 97:BF:50:41:1E:E0:D7:1C:DA:34:AB:C0:29:50:66:FF:55:93:8B:E5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01977DBF4C44ED2098CB274CF7F62B74901A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/l79QQR7g1xzaNKvAKVBm_1WTi-U.roa
Signing time: Tue 17 Jun 2025 11:56:18 +0000
ROA not before: Tue 17 Jun 2025 11:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205770
IP address blocks: 2a13:bb42::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:bf:4c:44:ed:20:98:cb:27:4c:f7:f6:2b:74:90:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 17 11:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97bf50411ee0d71cda34abc0295066ff55938be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:42:67:88:3b:64:6e:21:10:0b:b8:a2:b2:
a8:01:88:b2:45:a1:a4:1a:95:d9:4c:95:5f:f0:ff:
25:ae:a3:47:13:d9:f4:fb:ae:e1:ca:15:6b:f2:19:
66:6d:97:3b:eb:4c:14:79:d6:71:37:41:4e:d8:3e:
40:bb:9f:2f:dd:84:e8:19:3e:33:5b:73:45:6e:9c:
15:16:46:eb:36:d7:13:e3:89:af:78:c3:ee:73:8e:
38:7b:0f:9c:3a:09:c0:d8:b8:64:37:db:3b:ff:b3:
30:15:92:4b:a2:08:ee:7a:63:a8:50:1e:d3:f6:86:
57:61:a4:2a:91:f7:e9:ed:56:ed:b5:44:a8:41:8c:
e3:b2:ad:d6:2d:53:c2:ef:4e:66:63:75:0a:97:c3:
b1:37:7d:5d:21:aa:48:86:80:3c:6b:45:c0:49:13:
4c:7b:5c:ec:67:ca:26:82:72:e3:71:f9:de:5e:f4:
03:33:9f:a9:7c:3a:f3:de:d7:99:17:57:fa:be:d0:
19:21:d8:4b:7e:9c:39:2d:b9:14:50:4d:59:5e:53:
bd:0c:da:31:5a:50:ba:84:5b:a3:7e:f3:f3:2f:de:
ca:6d:d7:08:45:80:b6:2c:01:da:b0:34:06:91:9f:
5b:c2:a2:95:cf:59:83:4d:9a:c7:b6:cd:7f:e0:60:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:50:41:1E:E0:D7:1C:DA:34:AB:C0:29:50:66:FF:55:93:8B:E5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/l79QQR7g1xzaNKvAKVBm_1WTi-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb42::/32
Signature Algorithm: sha256WithRSAEncryption
04:c7:c3:8f:c4:db:5f:9e:4b:65:05:3a:78:c0:ff:e7:a5:37:
c8:35:8b:8d:e1:6d:cc:cf:a7:56:1f:db:03:35:e6:00:a1:e1:
60:2d:e2:9e:df:9d:94:9f:2b:42:41:6b:ad:d1:ef:58:04:0d:
54:0c:c3:55:84:22:92:81:b9:9e:59:0a:d1:81:a1:c1:c4:94:
0b:52:09:8e:90:b8:9c:29:54:a4:d1:dc:4a:59:ff:bc:fd:b9:
67:21:61:52:f1:f6:bd:7e:92:90:3b:02:95:2e:ff:09:b4:3f:
82:6f:f5:b2:90:9a:b1:46:11:bd:c4:44:05:b4:ec:6f:29:16:
01:2b:86:73:50:28:f3:11:c2:97:d6:2b:f1:d8:ac:e3:3c:79:
0a:68:e9:d3:77:f4:19:2f:80:c4:f9:54:df:31:42:66:2c:94:
41:d9:9d:1c:29:c1:ec:d6:ae:cd:de:54:19:76:76:90:74:67:
00:fd:ad:0e:c2:8e:73:40:5a:c7:13:70:6c:be:b6:4e:21:bc:
d6:0e:c0:cc:9f:dc:b0:5d:f0:05:dd:90:f9:79:ad:04:4a:71:
ac:c3:fe:08:a8:ca:91:30:1b:8a:ff:c5:1c:f9:7d:cb:94:69:
27:7e:0f:72:4a:bc:85:8d:33:8d:44:45:bb:ce:94:7d:50:ad:
76:66:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:37:12 2025 by rpki-client