Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/u2Dzm91kUE_eC2Pu-Gjng3uZ6ZM.roa
File: u2Dzm91kUE_eC2Pu-Gjng3uZ6ZM.roa (raw, json)
Hash identifier: SxDQMd2lagCie0YuCoz52kOVJrxPDTSs23cUao9Fhn4=
Subject key identifier: BB:60:F3:9B:DD:64:50:4F:DE:0B:63:EE:F8:68:E7:83:7B:99:E9:93
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0197ADC81E25ED533A4E7AB6E161D5C08286
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/u2Dzm91kUE_eC2Pu-Gjng3uZ6ZM.roa
Signing time: Thu 26 Jun 2025 19:47:42 +0000
ROA not before: Thu 26 Jun 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a0d:f647::/32 maxlen: 32
2a0e:9180::/32 maxlen: 32
2a11:31c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:c8:1e:25:ed:53:3a:4e:7a:b6:e1:61:d5:c0:82:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jun 26 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb60f39bdd64504fde0b63eef868e7837b99e993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:82:50:54:e0:65:a3:dc:9b:5b:31:c0:38:
aa:59:43:84:89:98:d4:5e:82:c9:5c:bf:90:99:aa:
67:3e:44:64:9d:aa:dc:21:2d:9a:d4:05:83:db:94:
93:92:e9:5a:7f:54:03:33:b2:41:2b:8e:13:09:2d:
5e:03:9b:ca:6a:ea:db:59:c3:90:c3:35:f9:2d:f9:
c0:51:96:cf:ea:d4:46:e0:0f:6b:db:43:d5:27:bb:
78:e5:eb:5e:06:3b:78:e0:5e:bc:3a:56:04:79:fb:
56:19:d9:d7:da:37:ed:31:2d:3d:76:9f:d7:79:d7:
c0:3b:6a:c3:cc:ca:e5:b8:73:c3:cf:b8:a4:e1:8d:
8e:e1:02:5f:54:b8:71:88:da:00:7d:00:21:3f:a1:
99:df:85:a6:7e:d9:c2:08:7b:72:44:ed:d9:51:d5:
88:8d:99:c1:6a:73:c2:51:7f:06:7b:f1:67:64:65:
7b:27:23:8b:7d:03:c6:04:53:bf:5f:e7:52:01:c8:
53:99:74:b1:1e:1f:b6:6a:38:d2:19:eb:b7:1d:f0:
96:d4:a9:99:df:2b:1d:1c:64:2e:d1:0c:4d:30:5b:
0b:96:d6:5b:e6:a3:f3:75:1d:fe:42:5d:f8:00:e5:
2b:c1:5d:1b:e5:a8:41:97:a6:82:ca:ad:a8:f6:b9:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:F3:9B:DD:64:50:4F:DE:0B:63:EE:F8:68:E7:83:7B:99:E9:93
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/u2Dzm91kUE_eC2Pu-Gjng3uZ6ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f647::/32
2a0e:9180::/32
2a11:31c4::/32
Signature Algorithm: sha256WithRSAEncryption
9a:59:48:66:5e:85:a8:30:da:5f:8d:d3:12:25:b6:75:19:cc:
d2:3c:4f:81:14:21:94:42:98:26:27:64:b7:5b:c6:91:b1:ca:
a7:d8:e9:04:26:c7:fa:23:d4:fa:f1:22:4b:a2:7c:08:c2:14:
5e:07:e8:ad:be:46:df:c6:ce:ee:75:04:60:cd:9a:7f:4c:e3:
c9:7d:c3:7b:85:46:7c:66:f6:58:f6:21:14:e7:cd:fc:6c:14:
b6:df:3d:a9:7a:af:7c:f9:f7:58:a1:62:21:a6:c0:1e:07:7a:
fe:d1:18:b9:f4:2e:47:40:ff:e1:b0:09:68:1f:09:45:4a:af:
13:fb:9d:66:75:b4:1b:bf:31:72:f0:1c:65:16:e4:37:17:f4:
8b:88:83:bc:53:39:3a:ec:a1:bf:d1:9d:93:07:f1:57:a6:57:
d7:47:46:1f:97:e1:99:e4:ff:46:d9:22:d8:a7:60:ad:25:f7:
cd:37:ed:24:c0:65:44:d8:5a:2e:17:53:d3:37:9e:69:ae:a9:
6f:2d:f6:54:f0:af:ee:34:fd:a0:49:09:e9:67:bf:71:45:87:
0c:6f:57:26:24:db:bd:35:62:a7:c7:6e:d9:c9:d8:db:37:88:
52:09:fb:e6:b5:1d:66:87:9c:7c:c1:d6:6b:07:20:a1:3f:0f:
14:b7:06:c8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZetyB4l7VM6Tnq24WHVwIKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzUwYWI0Y2NmNzJlM2Q2MGMwOWY5NjQwMTlkNmMwMzRj
NTBhNmMwHhcNMjUwNjI2MTk0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjYwZjM5YmRkNjQ1MDRmZGUwYjYzZWVmODY4ZTc4MzdiOTllOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MWCUFTgZaPcm1sxwDiqWUOEiZjU
XoLJXL+QmapnPkRknarcIS2a1AWD25STkulaf1QDM7JBK44TCS1eA5vKaurbWcOQ
wzX5LfnAUZbP6tRG4A9r20PVJ7t45eteBjt44F68OlYEeftWGdnX2jftMS09dp/X
edfAO2rDzMrluHPDz7ik4Y2O4QJfVLhxiNoAfQAhP6GZ34WmftnCCHtyRO3ZUdWI
jZnBanPCUX8Ge/FnZGV7JyOLfQPGBFO/X+dSAchTmXSxHh+2ajjSGeu3HfCW1KmZ
3ysdHGQu0QxNMFsLltZb5qPzdR3+Ql34AOUrwV0b5ahBl6aCyq2o9rn6pwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLtg85vdZFBP3gtj7vho54N7memTMB8GA1UdIwQY
MBaAFD7FCrTM9y49YMCflkAZ1sA0xQpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTct
MjE1OTM3NmQzYTY0LzEvdTJEem05MWtVRV9lQzJQdS1Ham5nM3VaNlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83OWVmNGYtZTM4ZS00NGRhLWE2NTctMjE1OTM3NmQzYTY0
LzEvUHNVS3RNejNMajFnd0otV1FCbld3RFRGQ213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKg32RwMF
ACoOkYADBQAqETHEMA0GCSqGSIb3DQEBCwUAA4IBAQCaWUhmXoWoMNpfjdMSJbZ1
GczSPE+BFCGUQpgmJ2S3W8aRscqn2OkEJsf6I9T68SJLonwIwhReB+itvkbfxs7u
dQRgzZp/TOPJfcN7hUZ8ZvZY9iEU5838bBS23z2peq98+fdYoWIhpsAeB3r+0Ri5
9C5HQP/hsAloHwlFSq8T+51mdbQbvzFy8BxlFuQ3F/SLiIO8Uzk67KG/0Z2TB/FX
plfXR0Yfl+GZ5P9G2SLYp2CtJffNN+0kwGVE2FouF1PTN55prqlvLfZU8K/uNP2g
SQnpZ79xRYcMb1cmJNu9NWKnx27ZydjbN4hSCfvmtR1mh5x8wdZrByChPw8UtwbI
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:32:03 2025 by rpki-client