Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/TTSyIzViMuPmm4r1I97cBnG33cE.roa
File: TTSyIzViMuPmm4r1I97cBnG33cE.roa (raw, json)
Hash identifier: /RwghgJbxiyCi6D+YecoRRM3krJG78rViLWnYxAONgY=
Subject key identifier: 4D:34:B2:23:35:62:32:E3:E6:9B:8A:F5:23:DE:DC:06:71:B7:DD:C1
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 01988110825DA1CDFFF43A09E8CE84D66431
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/TTSyIzViMuPmm4r1I97cBnG33cE.roa
Signing time: Wed 06 Aug 2025 20:26:39 +0000
ROA not before: Wed 06 Aug 2025 20:26:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208893
IP address blocks: 2a14:e200::/48 maxlen: 48
2a14:e200:1::/48 maxlen: 48
2a14:e200:2::/48 maxlen: 48
2a14:e200:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:10:82:5d:a1:cd:ff:f4:3a:09:e8:ce:84:d6:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Aug 6 20:26:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d34b223356232e3e69b8af523dedc0671b7ddc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:f4:38:93:a8:fe:5e:22:04:d6:c2:53:eb:
4b:84:5f:02:ed:e7:0e:43:db:6a:99:ee:4c:f5:d5:
4a:88:75:fb:f9:3e:1f:40:cb:06:77:4f:8d:16:aa:
ee:ea:3d:76:bd:6b:20:77:1d:1f:b3:e0:de:5d:1d:
f0:c0:76:a1:12:39:1c:ee:74:9d:b8:71:a9:b2:a9:
6d:ed:06:b2:bc:63:a4:6d:ea:3e:02:97:37:02:19:
3d:97:34:aa:51:e9:e5:0b:15:40:4d:0a:64:8a:9c:
f9:60:78:3c:4b:62:7f:0b:54:5d:c8:6f:e8:0e:88:
b4:ae:34:b7:e8:21:38:ad:06:fd:8e:4f:e7:a7:cf:
72:30:2c:87:89:ea:45:fb:44:17:19:67:cf:d5:83:
8a:ea:51:37:a1:a5:7a:c4:bf:37:56:af:64:53:13:
58:2c:3c:d0:b0:88:0c:14:6d:49:b5:d4:73:e0:b3:
31:65:5d:9c:c7:82:91:ac:37:f3:20:fa:54:0c:ec:
0f:41:68:12:27:2f:dc:0c:85:ce:33:5a:ab:9a:c1:
cc:d5:94:de:65:7e:ac:99:93:3a:95:64:66:dc:c5:
9e:f6:b1:b2:9f:7c:53:b3:24:bd:6d:96:16:ae:0e:
4d:b4:b3:e5:86:8d:c7:58:50:1f:33:4a:8c:08:b0:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:B2:23:35:62:32:E3:E6:9B:8A:F5:23:DE:DC:06:71:B7:DD:C1
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/TTSyIzViMuPmm4r1I97cBnG33cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e200::/46
Signature Algorithm: sha256WithRSAEncryption
8c:40:0b:17:f2:9d:da:87:7f:08:9c:39:0e:55:64:f2:7c:d8:
59:e5:98:28:0a:5b:8b:ed:7f:1e:3f:a5:3b:3f:33:64:ab:8c:
2d:af:49:12:eb:dd:5c:b2:5f:03:a4:99:11:2c:f7:72:d8:b6:
1d:36:4b:e0:c9:8d:06:34:54:be:ff:1b:5b:e3:13:66:af:6f:
10:34:e5:0b:e7:d4:88:6e:1d:b3:3f:16:0d:93:5a:2f:bb:de:
61:06:5b:db:1e:52:a5:6e:27:ec:83:ac:d5:34:0d:82:16:1c:
99:bf:d5:ef:41:64:31:fa:bf:69:81:57:ef:97:cd:7e:6c:ab:
2e:87:06:bf:f6:33:b6:a4:f5:bc:24:78:69:f0:8d:07:b3:5f:
3f:20:9e:b5:ed:80:be:aa:56:6f:cd:01:37:cd:d9:ff:92:df:
94:8e:94:91:e6:45:87:2d:b8:3f:05:86:40:6b:f6:b0:f4:04:
6e:12:28:a0:d6:16:7f:78:90:99:56:93:8a:e8:00:03:54:e8:
40:19:6f:ab:e4:3c:a4:b8:7d:91:83:26:9c:ba:95:a9:d0:a0:
78:46:9a:e9:e9:ab:ee:01:98:03:48:0d:fc:95:a4:a6:34:5d:
b7:ae:0f:71:cf:9e:0d:45:b5:6e:83:80:e9:33:c8:81:28:b3:
f3:3a:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:09 2025 by rpki-client