Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa
File: HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa (raw, json)
Hash identifier: YrKgLZLOw/EtLShX/OiK2tyZzChYVExfgbBKDYbGseU=
Subject key identifier: 1E:BC:33:15:B7:B7:52:DC:A8:04:CE:73:EC:2B:D2:C0:D2:32:E2:9E
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0196BFCBDB312DEB9FEB43F0E5BEE1CA76E7
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa
Signing time: Sun 11 May 2025 14:42:10 +0000
ROA not before: Sun 11 May 2025 14:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208886
IP address blocks: 2a13:a5c7:3200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:cb:db:31:2d:eb:9f:eb:43:f0:e5:be:e1:ca:76:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: May 11 14:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ebc3315b7b752dca804ce73ec2bd2c0d232e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:e0:d1:6d:cb:54:35:3d:d7:dc:70:e2:fc:
5a:7a:5d:42:e5:ca:2f:55:56:3b:e5:85:2b:7f:73:
28:aa:3a:68:68:36:31:00:d8:05:9a:0e:e5:01:af:
ad:de:5a:30:2a:a1:1a:2c:f9:21:84:05:ea:e9:1d:
33:1c:4c:93:26:0e:e7:d6:bc:03:5e:79:ff:37:5a:
20:c8:13:82:e4:eb:f5:f9:c3:0f:ec:ee:a6:b7:79:
4e:c8:53:31:33:35:10:8a:07:3f:ad:d3:9f:40:ab:
6f:89:4e:5a:a1:78:42:f0:df:a9:0d:7f:58:09:07:
97:7f:7c:28:6a:33:28:af:9f:cd:a6:dc:4e:5a:07:
bb:f8:a8:57:86:0e:89:f6:33:77:1a:72:ee:2a:0a:
ec:89:9e:c0:08:50:d3:f0:94:b2:90:7c:29:cf:06:
d4:ed:8d:2a:e0:02:a7:71:e6:18:2e:ac:b8:5a:09:
c4:88:12:8a:0e:37:cc:af:6e:41:18:50:9f:75:4f:
21:1f:a8:8e:5a:90:1f:9a:ca:ad:22:e0:ff:16:56:
4f:56:b2:55:ff:05:16:cf:c1:48:1e:37:bc:78:c6:
0a:0f:3b:9a:94:dd:0a:c1:7a:5c:3c:9c:e0:2f:1f:
05:3b:4a:5b:82:41:ed:56:62:e8:7e:43:50:b8:f5:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:33:15:B7:B7:52:DC:A8:04:CE:73:EC:2B:D2:C0:D2:32:E2:9E
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/HrwzFbe3UtyoBM5z7CvSwNIy4p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:3200::/40
Signature Algorithm: sha256WithRSAEncryption
18:60:89:a7:18:a1:1e:31:2f:30:70:c8:ed:d1:c0:2e:d6:66:
64:43:7e:f1:e3:ee:1b:22:f7:44:53:c0:c5:6c:98:55:7c:59:
d2:7f:e6:b5:92:10:b9:63:57:45:d3:42:3e:ac:bd:d7:31:e7:
2c:08:94:7e:3b:dd:91:e0:19:7e:01:b3:c9:f2:2d:d3:fc:2f:
8a:f8:46:5f:dc:25:e8:7a:82:cc:d4:79:65:79:f7:50:53:38:
81:2b:a5:09:22:ef:d5:4b:4c:f7:5f:24:27:70:81:11:ff:e4:
b9:3d:b4:0f:0d:43:bd:c3:9b:32:0f:2e:54:1b:b2:eb:65:79:
46:04:85:38:90:63:14:b2:dc:a0:70:0b:b7:34:d9:03:96:5c:
26:77:1a:e3:68:8e:90:40:96:03:4d:2c:e4:2b:6a:32:e8:f7:
6a:76:93:7c:30:c3:85:0e:63:9a:72:fe:88:29:e7:d5:13:c9:
74:6a:b3:69:0f:42:42:76:41:aa:ee:16:6c:52:b4:29:50:40:
d5:a9:dd:29:77:2e:fe:9f:af:ea:30:b7:a0:a8:47:f7:66:d5:
b9:1f:4c:3a:56:d3:b7:47:eb:86:be:01:18:c2:a5:dc:3d:58:
7c:f3:e8:7c:d6:a9:ab:04:a1:c4:6c:7c:be:c7:85:8c:e3:c5:
71:12:3e:b4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZa/y9sxLeuf60Pw5b7hynbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwNTExMTQ0MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWJjMzMxNWI3Yjc1MmRjYTgwNGNlNzNlYzJiZDJjMGQyMzJlMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ibg0W3LVDU919xw4vxael1C5cov
VVY75YUrf3MoqjpoaDYxANgFmg7lAa+t3lowKqEaLPkhhAXq6R0zHEyTJg7n1rwD
Xnn/N1ogyBOC5Ov1+cMP7O6mt3lOyFMxMzUQigc/rdOfQKtviU5aoXhC8N+pDX9Y
CQeXf3woajMor5/NptxOWge7+KhXhg6J9jN3GnLuKgrsiZ7ACFDT8JSykHwpzwbU
7Y0q4AKnceYYLqy4WgnEiBKKDjfMr25BGFCfdU8hH6iOWpAfmsqtIuD/FlZPVrJV
/wUWz8FIHje8eMYKDzualN0KwXpcPJzgLx8FO0pbgkHtVmLofkNQuPUNOQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB68MxW3t1LcqATOc+wr0sDSMuKeMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvSHJ3ekZiZTNVdHlvQk01ejdDdlN3Tkl5NHA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxzIw
DQYJKoZIhvcNAQELBQADggEBABhgiacYoR4xLzBwyO3RwC7WZmRDfvHj7hsi90RT
wMVsmFV8WdJ/5rWSELljV0XTQj6svdcx5ywIlH473ZHgGX4Bs8nyLdP8L4r4Rl/c
Jeh6gszUeWV591BTOIErpQki79VLTPdfJCdwgRH/5Lk9tA8NQ73DmzIPLlQbsutl
eUYEhTiQYxSy3KBwC7c02QOWXCZ3GuNojpBAlgNNLOQrajLo92p2k3www4UOY5py
/ogp59UTyXRqs2kPQkJ2QaruFmxStClQQNWp3Sl3Lv6fr+owt6CoR/dm1bkfTDpW
07dH64a+ARjCpdw9WHzz6HzWqasEocRsfL7HhYzjxXESPrQ=
-----END CERTIFICATE-----
Generated at Thu May 15 05:59:20 2025 by rpki-client