Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uhF03Yc1JxsPZ0KnnHnfX41YJyE.roa
File: uhF03Yc1JxsPZ0KnnHnfX41YJyE.roa (raw, json)
Hash identifier: W/r62NWmaWELZrUHVPB5QxxMOy8ZVybioXPH2mw8REE=
Subject key identifier: BA:11:74:DD:87:35:27:1B:0F:67:42:A7:9C:79:DF:5F:8D:58:27:21
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0196B193B9CBB0272218EEE9462CF803A798
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uhF03Yc1JxsPZ0KnnHnfX41YJyE.roa
Signing time: Thu 08 May 2025 20:26:10 +0000
ROA not before: Thu 08 May 2025 20:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215819
IP address blocks: 2a10:3f84::/32 maxlen: 32
2a13:c246::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:93:b9:cb:b0:27:22:18:ee:e9:46:2c:f8:03:a7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 8 20:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba1174dd8735271b0f6742a79c79df5f8d582721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:ad:0f:c4:bc:39:af:f8:44:b2:10:72:52:
db:06:d5:aa:6c:15:55:3b:75:07:50:06:1a:0a:39:
f5:73:da:1e:8b:28:00:58:56:0b:52:f1:86:a6:3b:
d4:86:4c:4b:d1:62:cd:06:4b:d1:26:b2:e7:ea:8d:
8f:37:e6:4f:14:0f:e8:a7:36:42:6f:27:f7:45:60:
30:fc:35:ac:0b:41:16:2b:b8:83:ed:8a:4d:4e:aa:
12:12:68:54:ad:d1:43:97:5d:51:c0:c3:cf:11:ed:
eb:ae:53:9b:e8:4a:df:b5:8f:e6:6a:a4:1c:c7:cf:
06:88:8c:9f:82:32:49:83:30:fc:83:6a:fb:43:59:
94:7f:2a:fc:f2:dd:a4:6f:0c:1a:17:c5:b0:57:86:
34:b4:de:2d:88:6c:ee:9c:a8:16:ba:d2:05:86:be:
39:e7:14:91:1c:55:7e:ad:35:94:ca:ce:59:47:f1:
21:90:b2:e6:ad:e7:ba:8f:0e:d4:bf:53:95:4f:c2:
48:c9:ef:45:c0:0e:85:87:82:ad:fb:e3:bc:70:fa:
4e:5b:bc:77:14:c9:85:0d:cb:f7:eb:7f:68:27:ef:
af:5d:15:da:c8:7d:7a:63:a6:90:1d:2f:d4:ea:9d:
8a:dc:db:3b:89:db:98:ca:9b:e7:54:44:43:73:c6:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:74:DD:87:35:27:1B:0F:67:42:A7:9C:79:DF:5F:8D:58:27:21
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uhF03Yc1JxsPZ0KnnHnfX41YJyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f84::/32
2a13:c246::/33
Signature Algorithm: sha256WithRSAEncryption
cb:ef:fc:6f:11:1d:fb:b8:82:b3:14:77:1c:ad:7b:15:27:9d:
c8:29:b4:af:ec:cb:aa:7e:f8:c2:c7:ea:d0:80:9d:60:52:fb:
95:0a:be:23:f9:4d:52:15:f8:75:f0:ea:96:1b:61:7b:f8:e3:
5f:7c:09:fa:39:1c:40:c1:4c:d3:05:a1:ab:cd:81:cb:d6:67:
28:f3:ab:d9:26:5e:3b:24:80:82:8b:34:b3:85:9b:a4:6a:73:
6a:ae:be:f8:51:3a:13:df:db:b6:6c:1a:89:98:1e:48:15:75:
f3:44:0e:0d:13:c6:f8:ff:10:4b:7f:65:e3:88:7f:98:17:25:
15:a8:25:da:a0:4d:95:f6:88:42:cf:f4:aa:b5:42:93:31:f1:
c8:20:ce:11:8e:cf:31:61:66:79:65:a5:4e:58:2e:e3:a7:60:
45:5e:23:e8:10:86:78:91:b9:4b:60:07:ca:e0:49:1d:6e:24:
8a:a4:8f:cc:05:8c:0b:bb:1c:c9:61:37:c5:96:a5:c1:7b:dc:
0d:eb:09:e7:78:02:b3:1f:5c:07:db:ba:24:15:2a:ed:2d:05:
5b:f6:f2:ba:f9:74:0a:c4:cb:2a:46:3e:a1:cd:67:e8:f7:61:
51:b4:04:00:59:dc:26:e2:f2:b1:10:9a:7e:a6:66:46:82:c8:
83:34:ec:d1
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZaxk7nLsCciGO7pRiz4A6eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNTA4MjAyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTExNzRkZDg3MzUyNzFiMGY2NzQyYTc5Yzc5ZGY1ZjhkNTgyNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ytD8S8Oa/4RLIQclLbBtWqbBVV
O3UHUAYaCjn1c9oeiygAWFYLUvGGpjvUhkxL0WLNBkvRJrLn6o2PN+ZPFA/opzZC
byf3RWAw/DWsC0EWK7iD7YpNTqoSEmhUrdFDl11RwMPPEe3rrlOb6ErftY/maqQc
x88GiIyfgjJJgzD8g2r7Q1mUfyr88t2kbwwaF8WwV4Y0tN4tiGzunKgWutIFhr45
5xSRHFV+rTWUys5ZR/EhkLLmree6jw7Uv1OVT8JIye9FwA6Fh4Kt++O8cPpOW7x3
FMmFDcv3639oJ++vXRXayH16Y6aQHS/U6p2K3Ns7iduYypvnVERDc8b/XwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFLoRdN2HNScbD2dCp5x531+NWCchMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvdWhGMDNZYzFKeHNQWjBLbm5IbmZYNDFZSnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUAKhA/hAMG
ByoTwkYAMA0GCSqGSIb3DQEBCwUAA4IBAQDL7/xvER37uIKzFHccrXsVJ53IKbSv
7MuqfvjCx+rQgJ1gUvuVCr4j+U1SFfh18OqWG2F7+ONffAn6ORxAwUzTBaGrzYHL
1mco86vZJl47JICCizSzhZukanNqrr74UToT39u2bBqJmB5IFXXzRA4NE8b4/xBL
f2XjiH+YFyUVqCXaoE2V9ohCz/SqtUKTMfHIIM4Rjs8xYWZ5ZaVOWC7jp2BFXiPo
EIZ4kblLYAfK4EkdbiSKpI/MBYwLuxzJYTfFlqXBe9wN6wnneAKzH1wH27okFSrt
LQVb9vK6+XQKxMsqRj6hzWfo92FRtAQAWdwm4vKxEJp+pmZGgsiDNOzR
-----END CERTIFICATE-----
Generated at Wed May 14 15:00:28 2025 by rpki-client