Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tMqc8QkrkmTG1qkSecwe_VuMxlE.roa
File: tMqc8QkrkmTG1qkSecwe_VuMxlE.roa (raw, json)
Hash identifier: qSRIr0HelMZMIYHWZ9caCrEsqm2bmngY+KPXB4t9oPk=
Subject key identifier: B4:CA:9C:F1:09:2B:92:64:C6:D6:A9:12:79:CC:1E:FD:5B:8C:C6:51
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197ABEFB4A16F713FC3C52724FFAA8A4C00
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tMqc8QkrkmTG1qkSecwe_VuMxlE.roa
Signing time: Thu 26 Jun 2025 11:11:42 +0000
ROA not before: Thu 26 Jun 2025 11:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213542
IP address blocks: 2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:ef:b4:a1:6f:71:3f:c3:c5:27:24:ff:aa:8a:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 26 11:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ca9cf1092b9264c6d6a91279cc1efd5b8cc651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:a8:8c:43:1b:eb:3a:06:f6:7a:8b:db:b4:
c0:22:ee:44:e0:de:30:33:6d:e2:2d:63:da:92:30:
51:ff:41:cc:7d:a4:01:7f:33:7f:18:18:0e:4e:08:
cc:df:cd:73:23:70:df:2e:d4:1a:43:66:90:8c:b8:
0e:52:d3:1b:e3:02:73:db:be:3d:85:7b:e1:20:7c:
73:44:13:b2:a5:0c:7b:b7:52:f4:81:67:14:f0:63:
d9:f7:88:e5:7d:0e:64:3f:d4:01:7d:6c:76:f6:ac:
02:39:1a:7c:bc:f3:41:00:76:15:dc:0f:4e:34:db:
f0:03:28:13:a5:e7:91:fa:bc:01:7d:a0:6d:3f:0e:
92:51:c3:bb:ca:c4:5f:6b:50:7b:db:15:21:e3:d6:
84:45:96:a9:88:ac:89:f1:2f:77:b6:1d:4f:15:a6:
40:bf:87:1f:98:7c:be:b4:f7:c8:2a:f6:ea:6b:ac:
ef:5d:2a:0a:25:3e:95:a5:95:c7:a9:90:bc:3b:d9:
29:9a:b0:dd:91:03:b9:0e:de:9b:47:1d:b2:b4:ea:
07:7a:7c:5d:be:3d:51:51:2b:c3:21:5d:04:4c:c8:
7b:b8:78:74:9f:9c:8d:cf:6f:bd:02:46:bd:b5:5a:
90:d9:a5:1a:c5:4a:87:7d:33:72:e8:e5:07:9b:14:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:9C:F1:09:2B:92:64:C6:D6:A9:12:79:CC:1E:FD:5B:8C:C6:51
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/tMqc8QkrkmTG1qkSecwe_VuMxlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1106::/31
Signature Algorithm: sha256WithRSAEncryption
08:96:de:b4:e0:4d:2f:c7:3b:1b:b7:6e:5d:7a:31:3d:fb:b6:
f4:6a:7c:b7:0a:8d:31:02:6e:50:ae:ca:2f:9c:53:6c:37:2a:
5a:16:01:e9:ff:04:bd:76:79:41:bf:b2:06:d5:83:36:10:cc:
ee:60:80:2b:3d:97:90:65:e6:2d:84:73:4e:c1:0e:14:7a:60:
4d:c7:35:30:81:5f:5b:a8:22:46:52:4b:fd:9a:c3:27:0b:0a:
bc:2a:0a:81:4a:fa:2d:9c:85:c5:ec:5b:ae:4e:eb:f6:9a:59:
00:2f:29:23:d9:5b:4e:e8:99:31:90:04:92:79:55:e9:4d:82:
43:e7:7a:d0:9e:18:56:a4:90:bb:61:6b:17:e9:9a:f8:99:d8:
e0:85:e0:f5:8f:9d:43:c4:cb:9d:de:69:bf:e0:06:24:7d:ea:
44:4b:4b:3d:1b:b1:97:84:66:ba:da:35:a5:7d:dd:e9:65:dd:
ac:a3:47:f2:2f:7e:4c:2a:3e:f2:57:08:80:88:db:38:06:f9:
a2:93:81:e6:db:d7:6b:22:97:f4:5f:55:f2:eb:02:fb:fb:fc:
4e:5a:d2:5d:29:54:77:2e:db:dd:51:5a:0c:31:1d:82:20:59:
42:f4:a5:0a:88:0d:79:a0:6d:4e:1d:8d:d1:d2:1b:01:cd:aa:
2b:e4:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:14 2025 by rpki-client