Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/vj8_IlTF4gQOhKDYFlmdkPyTZFY.roa
File: vj8_IlTF4gQOhKDYFlmdkPyTZFY.roa (raw, json)
Hash identifier: NIiwFYBXaeo7nmwF1tqQoUP+kn0hB4f7x9lz6NMy9k8=
Subject key identifier: BE:3F:3F:22:54:C5:E2:04:0E:84:A0:D8:16:59:9D:90:FC:93:64:56
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0196ABDAE0D9BD62C66E8B72ACCB38DB349F
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/vj8_IlTF4gQOhKDYFlmdkPyTZFY.roa
Signing time: Wed 07 May 2025 17:46:10 +0000
ROA not before: Wed 07 May 2025 17:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:cdc7::/32 maxlen: 32
2a0e:7f02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:da:e0:d9:bd:62:c6:6e:8b:72:ac:cb:38:db:34:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 7 17:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be3f3f2254c5e2040e84a0d816599d90fc936456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:24:8c:dd:45:fd:b2:65:d4:67:36:41:50:
f3:95:b8:8a:7c:46:35:cb:e3:6f:1b:b0:50:0a:7d:
e9:fc:c2:05:da:ff:c7:04:92:b4:00:91:e8:94:5f:
96:21:80:16:52:0b:1e:a7:8a:ab:49:fd:ac:ea:f2:
28:5b:fd:0b:58:d9:59:65:97:2b:a7:e5:ef:95:5b:
91:cb:85:bb:dc:28:51:9e:4c:47:65:95:16:70:29:
a2:fc:6a:16:95:ab:cb:65:23:73:7a:c0:d1:d0:1a:
bd:74:8f:e8:6d:b8:8b:6e:93:c7:8d:61:57:06:49:
db:83:e1:0f:6c:af:97:94:68:7e:43:51:bd:5d:dc:
16:9b:1a:f2:fe:b9:3b:86:4d:10:db:7f:c6:5b:dc:
71:70:88:18:9e:de:2c:66:bb:87:d6:64:da:7b:25:
77:88:1b:d1:4a:d7:53:83:5f:83:63:e9:65:5a:4f:
d5:6e:47:e1:cc:07:72:70:48:0b:81:77:a9:9d:5a:
b5:ac:b6:77:86:10:b7:76:c8:94:66:23:3c:3b:93:
ef:f8:c8:3a:64:e9:45:06:44:7c:75:eb:5e:78:33:
af:4d:0a:56:d3:cf:e0:17:f0:ae:10:b6:62:4a:ec:
9a:46:7e:c7:ff:16:11:f8:5d:78:7e:29:2a:17:23:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3F:3F:22:54:C5:E2:04:0E:84:A0:D8:16:59:9D:90:FC:93:64:56
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/vj8_IlTF4gQOhKDYFlmdkPyTZFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:cdc7::/32
2a0e:7f02::/32
Signature Algorithm: sha256WithRSAEncryption
70:5d:b3:ad:55:51:fa:e4:75:fb:d4:09:26:aa:ef:9c:30:89:
89:9c:8e:7c:1b:40:c3:8d:d9:91:af:01:33:11:2c:68:c7:b8:
ff:6b:52:75:e1:fd:5c:65:84:b8:65:26:cd:cd:c4:26:ca:c2:
bd:61:77:8b:a5:e4:38:67:e9:49:10:75:8f:3b:eb:28:0f:16:
3e:f9:9f:4f:91:46:18:8c:83:36:55:3b:69:bf:73:a0:f7:0f:
d8:cb:41:77:61:0a:a4:19:7c:58:86:2c:9f:3e:93:68:96:d4:
87:06:f4:c3:ac:af:ad:89:6a:26:02:31:c6:32:9e:bf:59:f4:
b6:20:c5:c9:9b:9e:b0:4c:52:5b:27:29:3d:f8:32:96:62:08:
a8:fc:d6:83:ba:20:1a:e4:1c:b3:37:d9:ad:9b:c2:72:f9:ca:
2c:15:c1:7c:bb:f4:9f:04:04:7c:4f:59:df:ed:8f:55:72:0e:
93:01:0a:63:1f:1d:d7:2c:13:69:08:a7:a1:0d:62:48:b6:c0:
bb:83:c9:0a:6f:e6:f1:07:78:94:b1:be:7c:4e:9f:38:e5:ae:
54:f6:d9:2d:5c:2d:d0:1a:a4:98:2f:74:1a:5b:3b:c2:6a:b6:
76:d2:b9:38:83:eb:7d:91:f9:b4:75:d4:97:91:d6:f1:1b:c1:
28:3f:50:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZar2uDZvWLGbotyrMs42zSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwNTA3MTc0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTNmM2YyMjU0YzVlMjA0MGU4NGEwZDgxNjU5OWQ5MGZjOTM2NDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscIkjN1F/bJl1Gc2QVDzlbiKfEY1
y+NvG7BQCn3p/MIF2v/HBJK0AJHolF+WIYAWUgsep4qrSf2s6vIoW/0LWNlZZZcr
p+XvlVuRy4W73ChRnkxHZZUWcCmi/GoWlavLZSNzesDR0Bq9dI/obbiLbpPHjWFX
Bknbg+EPbK+XlGh+Q1G9XdwWmxry/rk7hk0Q23/GW9xxcIgYnt4sZruH1mTaeyV3
iBvRStdTg1+DY+llWk/VbkfhzAdycEgLgXepnVq1rLZ3hhC3dsiUZiM8O5Pv+Mg6
ZOlFBkR8deteeDOvTQpW08/gF/CuELZiSuyaRn7H/xYR+F14fikqFyM+/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL4/PyJUxeIEDoSg2BZZnZD8k2RWMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvdmo4X0lsVEY0Z1FPaEtEWUZsbWRrUHlUWkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg3NxwMF
ACoOfwIwDQYJKoZIhvcNAQELBQADggEBAHBds61VUfrkdfvUCSaq75wwiYmcjnwb
QMON2ZGvATMRLGjHuP9rUnXh/VxlhLhlJs3NxCbKwr1hd4ul5Dhn6UkQdY876ygP
Fj75n0+RRhiMgzZVO2m/c6D3D9jLQXdhCqQZfFiGLJ8+k2iW1IcG9MOsr62JaiYC
McYynr9Z9LYgxcmbnrBMUlsnKT34MpZiCKj81oO6IBrkHLM32a2bwnL5yiwVwXy7
9J8EBHxPWd/tj1VyDpMBCmMfHdcsE2kIp6ENYki2wLuDyQpv5vEHeJSxvnxOnzjl
rlT22S1cLdAapJgvdBpbO8JqtnbSuTiD632R+bR11JeR1vEbwSg/UPs=
-----END CERTIFICATE-----
Generated at Fri May 9 04:37:51 2025 by rpki-client