Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/EqC_6U8Vu2HfOSZe-aA4-HjYFqM.roa
File: EqC_6U8Vu2HfOSZe-aA4-HjYFqM.roa (raw, json)
Hash identifier: pKv0SZrmZC4/ndco71VpUxRBg8Xk6dp1C+rCl+d4M5U=
Subject key identifier: 12:A0:BF:E9:4F:15:BB:61:DF:39:26:5E:F9:A0:38:F8:78:D8:16:A3
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01978CB2E35D03302DCA01B31E30B4AAAF07
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/EqC_6U8Vu2HfOSZe-aA4-HjYFqM.roa
Signing time: Fri 20 Jun 2025 09:37:03 +0000
ROA not before: Fri 20 Jun 2025 09:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6205
IP address blocks: 2a13:f6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:b2:e3:5d:03:30:2d:ca:01:b3:1e:30:b4:aa:af:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jun 20 09:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a0bfe94f15bb61df39265ef9a038f878d816a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:d9:d3:7e:af:70:8c:a6:bd:69:41:d5:67:
d6:24:de:10:b1:25:c2:12:56:ca:33:5a:00:bd:04:
53:a0:2b:1b:94:9c:d8:54:08:2c:a8:e9:8c:be:61:
cd:45:86:2a:70:f9:37:5a:e7:c6:6f:ea:69:08:f3:
b5:1b:85:e4:60:6f:4c:b5:dc:c6:82:2f:4a:7a:64:
28:0d:9c:8d:25:84:71:0b:38:13:79:0a:c7:72:d3:
8e:57:43:8f:1c:ec:31:bd:0c:51:8e:ff:4f:9e:84:
bf:6f:4b:77:71:a3:63:47:57:bd:bc:c9:f9:3b:89:
48:7d:7e:06:89:a0:97:ee:b8:8c:a0:a5:7c:96:74:
91:e6:cf:5c:ae:70:fe:91:6a:2f:5c:58:a1:38:36:
7e:f6:1a:a9:11:ab:d0:fa:96:16:e9:c3:55:4c:be:
21:e8:6d:50:db:7a:58:61:44:92:67:e1:1d:df:83:
4d:89:78:cd:8a:f4:42:e3:47:06:83:e5:53:1a:0f:
0e:98:8d:08:d5:87:3f:8e:b6:03:ed:5c:81:05:be:
de:97:01:14:d9:5f:e6:eb:74:a0:20:e2:f0:75:9c:
8c:eb:51:41:1f:ff:e3:71:9c:60:e9:7a:40:43:c0:
b8:c1:e8:c1:b4:13:d7:fe:ba:1a:44:6b:a4:38:84:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:BF:E9:4F:15:BB:61:DF:39:26:5E:F9:A0:38:F8:78:D8:16:A3
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/EqC_6U8Vu2HfOSZe-aA4-HjYFqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:60:87:ef:6c:1e:30:86:9a:4a:c6:f8:d5:d4:c9:1a:67:8f:
21:d8:c0:8e:41:11:3d:a5:fe:cb:c0:8b:68:c2:20:ec:b7:e6:
bb:4f:59:2d:01:0f:19:a8:7f:56:1a:31:e4:4a:4e:e1:8b:98:
44:41:6b:c7:41:61:26:70:03:3b:e1:a6:de:0a:80:aa:74:6f:
fc:8a:00:04:02:26:e2:d1:c8:ee:c9:0c:c6:25:3c:8d:21:78:
98:96:db:d7:36:af:12:3d:d8:7c:99:a2:bc:59:0a:2e:91:3e:
74:6a:d6:49:08:9b:19:22:0c:99:b6:65:fc:19:35:1e:20:70:
5c:e0:c8:47:d6:33:a3:d2:ff:ca:48:20:d2:50:a0:7e:f6:84:
f7:78:57:f6:d0:ab:5d:63:1e:47:16:a4:6a:a6:d7:12:45:28:
44:51:2b:90:84:29:f1:8c:17:1b:61:78:5e:67:c7:7a:ab:d9:
16:d6:82:c5:19:4a:fe:3b:87:8f:f8:fc:e5:bb:02:4b:20:19:
dc:9f:5e:50:a4:9b:74:2f:78:5b:7e:43:58:bd:28:d6:52:54:
a5:15:af:e8:94:49:ea:b7:5c:7f:1e:3d:2e:3b:f5:4d:2a:69:
20:da:e2:5e:2b:d5:c3:38:8d:4b:2e:38:8b:af:d9:1a:eb:a5:
c5:cc:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:41:40 2025 by rpki-client