Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa
File: 3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa (raw, json)
Hash identifier: Jx3hDEYSWvyg0teai/myn3+xGqI2AFge39hcH66bs6U=
Subject key identifier: DF:19:7D:83:3D:AF:D9:F4:E1:41:91:04:67:8C:DD:0B:B2:68:2A:CE
Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Certificate serial: 01978322FD31FDBB39B9D4F71E476BE1E25F
Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa
Signing time: Wed 18 Jun 2025 13:03:17 +0000
ROA not before: Wed 18 Jun 2025 13:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44398
IP address blocks: 2a00:1e58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:22:fd:31:fd:bb:39:b9:d4:f7:1e:47:6b:e1:e2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5
Validity
Not Before: Jun 18 13:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df197d833dafd9f4e1419104678cdd0bb2682ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:3e:5e:9e:a5:5a:c9:b0:4a:4b:66:b4:a0:
06:92:81:c4:74:ec:31:e5:92:9f:ac:7a:95:7b:4b:
51:70:99:c6:d7:af:f7:7e:16:65:4d:7e:af:11:54:
64:5c:ad:42:b1:8c:5a:00:a7:ad:16:1e:70:2c:ff:
93:7b:fd:15:91:5e:e0:80:3b:99:0f:e0:5b:25:d3:
f9:2d:c1:65:e2:a0:c7:fc:00:b5:a1:d9:27:ef:61:
b7:02:5c:5c:83:b6:66:83:f7:95:5c:43:2d:f4:c5:
29:f0:b2:a3:ff:dd:b3:75:2e:29:11:48:01:66:54:
e2:7c:fd:53:1d:ab:1f:b4:12:33:ff:ff:16:29:37:
d7:76:f3:d4:3c:3d:81:c1:61:a7:18:a0:73:41:ee:
61:9d:dd:f0:0e:ec:3b:19:66:10:cf:26:44:08:e2:
d6:9f:3a:76:cb:df:28:e7:e7:3b:6e:dd:67:3d:8e:
fc:d6:53:ae:1b:9d:5f:d2:43:64:37:30:0c:1e:6c:
bb:86:c0:3b:f9:1b:56:d5:38:1d:68:63:da:0c:c9:
2b:02:a7:14:27:be:2f:84:d4:95:31:72:22:b1:1e:
e0:90:e0:67:a3:24:bb:fa:82:bb:c8:87:5c:53:78:
d5:a8:bd:ba:ee:6b:59:0a:cc:83:98:1c:46:4a:96:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:7D:83:3D:AF:D9:F4:E1:41:91:04:67:8C:DD:0B:B2:68:2A:CE
X509v3 Authority Key Identifier:
keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/3xl9gz2v2fThQZEEZ4zdC7JoKs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e58::/32
Signature Algorithm: sha256WithRSAEncryption
45:df:24:fa:c7:d4:37:90:4c:43:1f:1a:6f:27:95:42:84:97:
9e:4a:e2:ab:04:e0:ed:23:7d:f6:72:3c:f0:d9:c6:74:f0:49:
93:c4:43:75:34:3a:ed:d8:17:a6:81:58:20:0f:d2:13:74:03:
60:82:a7:2d:a1:10:ab:c0:60:b0:ea:1d:fd:55:fe:9e:20:11:
13:b6:be:e8:01:f4:0a:59:83:41:cd:12:6c:e0:a9:e9:c2:3f:
36:33:80:b3:a0:93:00:ce:df:9d:c9:79:15:23:f0:91:ec:36:
6c:c5:e5:14:91:eb:51:09:b6:57:cf:19:f2:ea:64:38:00:ea:
ba:e8:e4:b7:42:07:57:7e:8a:ea:f8:6d:dc:c6:b8:53:3e:69:
f4:30:6e:16:de:a9:51:35:a0:21:de:e7:f4:6c:87:b3:06:5b:
92:24:24:dc:85:4b:ac:6d:1e:a0:14:89:71:4f:c6:ea:f1:e3:
a2:a6:50:b9:65:f3:12:cc:5e:98:d1:17:de:3f:c3:89:c1:5a:
e3:1e:32:59:ae:12:fb:0a:8b:c5:09:89:14:2e:54:b8:2c:3c:
ab:23:b4:41:9c:6d:a6:f0:d5:d9:b1:df:b8:a6:11:f7:9d:8a:
bc:f9:43:0c:51:f6:47:0c:f6:2d:0b:12:ea:79:7f:2e:85:94:
4f:17:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:20:27 2025 by rpki-client