Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa
File: 3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa (raw, json)
Hash identifier: GyLSfZMIbW5GjQFGTgFakvct5lf6SBp5gMlZA4ZRfho=
Subject key identifier: DD:3A:B5:DD:62:1C:8C:4E:30:AC:5F:5F:98:91:97:B8:92:77:10:0D
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019686694F8C25FEC45FF2A360FD361AAB87
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa
Signing time: Wed 30 Apr 2025 11:16:10 +0000
ROA not before: Wed 30 Apr 2025 11:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214454
IP address blocks: 2a13:fc2::/32 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:69:4f:8c:25:fe:c4:5f:f2:a3:60:fd:36:1a:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Apr 30 11:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3ab5dd621c8c4e30ac5f5f989197b89277100d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:7e:55:2b:07:10:24:9f:0d:8c:34:c2:ab:
35:1c:37:1c:8e:40:64:ba:a0:3e:9a:6e:c6:d5:fe:
06:23:2e:83:73:71:e5:e0:61:f7:f2:23:1b:82:e2:
ee:43:60:74:5a:20:87:10:16:5d:90:50:50:b5:ac:
be:cc:6f:a1:88:17:4e:50:6b:7e:88:d6:46:b3:bb:
de:65:7d:a7:6c:09:d4:6a:70:4e:f6:58:86:2d:76:
b7:10:f5:5a:78:d1:ef:46:10:65:ec:9d:38:27:27:
ba:8c:d3:07:28:e0:33:06:b3:f5:19:b4:42:14:53:
dd:79:55:12:3c:72:fe:f5:0e:78:f1:96:73:83:fc:
30:61:27:62:b8:32:d4:5e:77:c1:c5:f8:d7:0b:29:
6d:a2:05:1f:92:c7:9a:a1:a0:be:bd:9a:35:d0:fe:
ae:20:5e:24:8b:3a:76:99:2f:16:d2:48:da:9c:f2:
3d:0e:1b:21:1e:b1:b4:7a:bc:2b:c9:bc:7b:3d:40:
56:fa:63:e2:56:71:8d:3a:6c:29:7b:1e:76:cc:01:
26:5e:c2:57:0f:20:08:99:67:c8:40:05:ab:fd:97:
85:58:87:76:2f:4b:40:ac:a9:88:ca:b9:d1:8d:0c:
54:48:8b:10:ad:6c:8a:09:a3:19:74:40:ce:77:1a:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:B5:DD:62:1C:8C:4E:30:AC:5F:5F:98:91:97:B8:92:77:10:0D
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/3Tq13WIcjE4wrF9fmJGXuJJ3EA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc2::/32
Signature Algorithm: sha256WithRSAEncryption
b5:39:9b:6b:0b:9d:ec:4f:16:2b:6c:43:22:7a:17:6f:c8:9c:
a6:a9:04:67:92:0e:df:b0:5b:ce:47:c6:1c:1e:ee:16:c8:20:
00:c9:54:50:57:6c:ba:91:84:36:d3:f9:37:58:cb:3c:ae:be:
96:c1:e2:24:2e:af:43:1f:fc:a0:1d:58:a4:e5:b2:96:9a:6e:
47:df:f1:f1:ce:10:9b:51:a0:59:a9:08:53:98:77:4e:3e:c1:
e6:a3:f9:e6:dd:40:21:a5:ac:41:dc:1c:af:1f:15:d8:97:47:
a3:e0:e4:28:8d:25:df:45:b7:da:45:99:3b:1a:de:9b:0a:fe:
79:dd:e1:87:9a:0f:3c:f3:98:4d:e0:8c:c0:b9:5f:fb:bf:9b:
54:95:67:82:95:10:6a:ba:f4:8a:2f:51:0b:90:f0:1e:76:4f:
83:de:39:b8:41:b7:61:ca:94:a9:37:ab:53:f6:60:40:cf:26:
f2:bf:a1:49:21:34:b3:3f:9e:de:f4:10:86:bb:13:54:88:cf:
53:ae:e1:8f:5d:23:77:f3:7c:d1:f8:04:6d:8e:87:53:ee:1d:
3c:ca:f9:71:c1:b0:81:80:74:ae:3c:61:65:e4:6e:4a:83:0e:
e0:21:60:c9:17:a6:87:44:50:d7:35:6e:9a:ae:36:a8:02:61:
04:18:89:fd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZaGaU+MJf7EX/KjYP02GquHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwNDMwMTExNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDNhYjVkZDYyMWM4YzRlMzBhYzVmNWY5ODkxOTdiODkyNzcxMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZJ+VSsHECSfDYw0wqs1HDccjkBk
uqA+mm7G1f4GIy6Dc3Hl4GH38iMbguLuQ2B0WiCHEBZdkFBQtay+zG+hiBdOUGt+
iNZGs7veZX2nbAnUanBO9liGLXa3EPVaeNHvRhBl7J04Jye6jNMHKOAzBrP1GbRC
FFPdeVUSPHL+9Q548ZZzg/wwYSdiuDLUXnfBxfjXCyltogUfkseaoaC+vZo10P6u
IF4kizp2mS8W0kjanPI9DhshHrG0erwrybx7PUBW+mPiVnGNOmwpex52zAEmXsJX
DyAImWfIQAWr/ZeFWId2L0tArKmIyrnRjQxUSIsQrWyKCaMZdEDOdxo1yQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN06td1iHIxOMKxfX5iRl7iSdxANMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvM1RxMTNXSWNqRTR3ckY5Zm1KR1h1SkozRUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMPwjAN
BgkqhkiG9w0BAQsFAAOCAQEAtTmbawud7E8WK2xDInoXb8icpqkEZ5IO37BbzkfG
HB7uFsggAMlUUFdsupGENtP5N1jLPK6+lsHiJC6vQx/8oB1YpOWylppuR9/x8c4Q
m1GgWakIU5h3Tj7B5qP55t1AIaWsQdwcrx8V2JdHo+DkKI0l30W32kWZOxremwr+
ed3hh5oPPPOYTeCMwLlf+7+bVJVngpUQarr0ii9RC5DwHnZPg945uEG3YcqUqTer
U/ZgQM8m8r+hSSE0sz+e3vQQhrsTVIjPU67hj10jd/N80fgEbY6HU+4dPMr5ccGw
gYB0rjxhZeRuSoMO4CFgyRemh0RQ1zVumq42qAJhBBiJ/Q==
-----END CERTIFICATE-----
Generated at Sun May 11 21:13:35 2025 by rpki-client