Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/urNCOC8Bqsk3pFCN0t1Hskum-JI.roa
File: urNCOC8Bqsk3pFCN0t1Hskum-JI.roa (raw, json)
Hash identifier: E++7uPw3+ITDjWLK5PWVzWMaNRHO57R17to2Xn2MHBg=
Subject key identifier: BA:B3:42:38:2F:01:AA:C9:37:A4:50:8D:D2:DD:47:B2:4B:A6:F8:92
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 0197A6DC8B7464F41CAD5478DAAE0A881865
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/urNCOC8Bqsk3pFCN0t1Hskum-JI.roa
Signing time: Wed 25 Jun 2025 11:32:40 +0000
ROA not before: Wed 25 Jun 2025 11:32:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201980
IP address blocks: 2a02:4f20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:dc:8b:74:64:f4:1c:ad:54:78:da:ae:0a:88:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Jun 25 11:32:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bab342382f01aac937a4508dd2dd47b24ba6f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:3b:44:79:6c:99:a1:f8:37:63:84:41:09:
ba:f4:9b:49:44:59:33:d3:b3:57:fb:2e:b1:10:b0:
5a:fc:01:b1:47:31:30:ab:16:87:d9:b9:84:6b:c0:
63:f6:81:60:c4:b5:f9:18:2f:ce:d1:db:84:53:0f:
21:49:4c:cb:a2:a8:e3:43:4e:ce:55:ee:5f:bf:d6:
ce:d1:63:33:82:34:df:15:9e:53:91:df:30:e2:5f:
fe:1e:ea:18:4c:ca:f0:2e:de:71:07:08:94:98:c9:
cc:1d:50:6e:28:f3:68:ff:fd:e5:6a:8e:ad:c9:72:
76:42:12:68:ac:93:4e:38:01:12:80:c5:5f:10:72:
7b:85:e8:b3:25:a4:3b:ea:0d:56:b7:c2:ee:31:55:
8e:9f:4f:74:b3:be:c5:ee:68:cc:b4:08:ee:f6:96:
4d:ed:d3:05:3e:de:5e:52:b4:a0:58:d3:21:f9:6f:
45:d4:ed:46:b3:c3:9d:cb:54:a6:7f:46:e3:6a:ee:
25:06:e5:07:0e:db:97:9d:57:95:3f:f5:f2:1a:c7:
e6:19:02:6b:f9:62:1b:96:e7:ab:68:15:2f:58:a6:
78:3b:f3:70:a4:91:1a:4c:38:f0:f6:32:f9:14:f4:
27:56:a2:22:24:ab:5d:e0:3c:1e:c5:e5:97:5a:59:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:42:38:2F:01:AA:C9:37:A4:50:8D:D2:DD:47:B2:4B:A6:F8:92
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/urNCOC8Bqsk3pFCN0t1Hskum-JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:4f20::/32
Signature Algorithm: sha256WithRSAEncryption
a3:2d:6c:52:85:2f:52:c0:1f:b8:62:2d:6a:36:9b:29:33:98:
b7:eb:b8:95:27:33:fb:37:ca:89:79:20:10:3b:1e:44:92:38:
e5:df:8a:ea:f5:cb:dd:36:22:1a:94:81:a0:32:d8:d3:9d:b3:
db:a6:58:18:33:52:69:55:67:a8:3b:ba:59:62:99:d3:ac:65:
2a:4d:68:3f:92:9b:ab:ad:ec:a2:65:84:1f:fd:f1:f8:f9:dc:
7b:63:c9:19:03:0e:2c:b7:8e:e1:52:e6:b2:bb:95:c1:5b:9a:
fa:fa:4b:96:3e:09:7f:a3:4e:3a:e9:64:95:7e:64:2f:67:2b:
cd:85:cb:e1:ed:64:20:89:9c:d3:2b:af:78:45:83:54:4e:21:
96:59:51:7b:0e:64:e7:cc:7d:03:6f:f1:8e:70:45:55:5b:9e:
ca:ab:52:76:a8:49:db:39:88:5e:66:ac:0b:b3:1a:52:96:be:
c2:d4:a0:08:06:c6:57:7b:b7:1c:3b:d4:6e:bc:92:2b:66:83:
5f:66:e2:66:80:10:46:97:26:a3:b8:b5:f7:5a:f1:9e:b9:6f:
0d:b8:b0:4d:fd:fa:80:eb:80:2a:03:44:c1:cb:24:2e:65:6e:
d5:47:64:f6:3c:f4:78:de:e9:a0:ac:bb:aa:99:e1:d0:78:6d:
bb:b3:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:08:37 2025 by rpki-client