Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/p9d0QYFVjJnSO9S9nJ5VKvdLbpM.roa
File: p9d0QYFVjJnSO9S9nJ5VKvdLbpM.roa (raw, json)
Hash identifier: zoqFtpp54xueaAozHUY7lpb21P9epqp0NBfmgkj2SEU=
Subject key identifier: A7:D7:74:41:81:55:8C:99:D2:3B:D4:BD:9C:9E:55:2A:F7:4B:6E:93
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0197ADD5D950114D09A54C292721C1F2EB50
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/p9d0QYFVjJnSO9S9nJ5VKvdLbpM.roa
Signing time: Thu 26 Jun 2025 20:02:42 +0000
ROA not before: Thu 26 Jun 2025 20:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0a:bbc1::/32 maxlen: 32
2a0e:9187::/32 maxlen: 32
2a12:1245::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:d5:d9:50:11:4d:09:a5:4c:29:27:21:c1:f2:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jun 26 20:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d7744181558c99d23bd4bd9c9e552af74b6e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:6c:e4:53:58:e7:a5:82:a0:b9:44:a3:62:
43:ca:29:4f:24:b9:5f:d4:f7:5b:83:b8:e9:ca:77:
c9:52:eb:d3:b1:b8:10:80:eb:02:d0:51:c3:e0:fb:
0f:d4:de:ae:e3:17:96:9c:f8:e5:cb:af:0d:f9:79:
2d:ea:5e:84:f0:77:e4:33:44:61:2a:94:b8:b3:0d:
ae:e9:4b:d6:46:00:81:8e:48:79:34:31:d3:f1:16:
d9:f4:72:26:5a:3f:91:e3:50:90:93:9c:f6:44:c5:
96:0b:21:59:36:2f:59:12:eb:2c:42:e9:3c:95:35:
b4:99:5c:3d:71:92:b4:60:8f:87:e8:4f:c5:e4:75:
22:7d:d4:3a:fb:f5:6a:99:e0:46:5f:66:c8:ee:f9:
e4:da:e8:bd:df:6b:93:10:ec:03:d5:f4:54:5f:9c:
71:eb:09:fa:8f:79:03:08:c3:81:33:d3:51:60:f9:
43:74:68:c8:1e:28:38:2b:24:6e:95:48:54:1f:ff:
1f:6d:06:ae:28:c6:c7:24:48:d2:97:91:30:5c:a2:
7e:a5:46:69:c0:3b:63:47:81:2c:e6:d1:10:10:50:
f7:80:c1:3c:ba:d7:89:69:5f:81:de:8d:c9:6b:13:
f1:1b:4e:4a:c5:c3:57:11:b8:1d:2f:fe:60:a6:99:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D7:74:41:81:55:8C:99:D2:3B:D4:BD:9C:9E:55:2A:F7:4B:6E:93
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/p9d0QYFVjJnSO9S9nJ5VKvdLbpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:bbc1::/32
2a0e:9187::/32
2a12:1245::/32
Signature Algorithm: sha256WithRSAEncryption
1d:c8:49:8c:30:dc:ca:9b:6a:fd:83:c3:95:2c:bb:e2:bc:6a:
15:6b:fd:52:0a:f7:7e:25:aa:92:4f:3d:8c:30:00:67:78:d3:
f9:4f:6a:2d:68:1a:59:f0:01:f6:9b:19:55:25:39:eb:bd:33:
19:f9:c8:82:16:5f:9e:a9:ad:9f:c7:c7:39:0c:ee:e5:ec:c7:
1b:40:33:91:13:84:2c:eb:7f:91:09:36:84:ad:8b:33:02:e2:
08:4d:6d:e5:fc:02:be:ac:da:0d:fa:2c:6e:39:29:a1:ca:36:
83:2a:5d:65:7e:f0:0d:28:64:54:9c:74:23:34:af:85:bd:40:
f8:74:3f:a6:d0:e8:b6:54:79:9b:a5:ad:f2:ba:a2:c7:8c:7d:
02:1d:3a:dd:5e:56:af:50:b5:61:6c:71:39:b0:32:30:54:63:
d2:0c:74:36:f4:41:a7:19:9a:db:a1:b8:a6:00:03:b6:cc:ea:
a9:2f:64:d3:37:f1:18:ab:a6:ee:e8:2b:e1:f7:84:dc:c9:3e:
ca:1b:b5:1b:60:3a:ca:37:c4:21:fa:24:c6:f9:76:8a:74:da:
cf:20:ae:e0:34:a5:ed:25:0a:32:4b:cc:c2:e9:2e:c0:05:53:
27:a2:90:89:43:4c:2c:bc:8d:d1:99:51:8c:bd:48:8f:2a:87:
d5:2b:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:15:43 2025 by rpki-client