Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/eHCPsFGmisg7lRclzimiGG_V3JA.roa
File: eHCPsFGmisg7lRclzimiGG_V3JA.roa (raw, json)
Hash identifier: //Um4LhSOzAoBsOI7xMkiMxwqQTwKL5Npb082+X9U6M=
Subject key identifier: 78:70:8F:B0:51:A6:8A:C8:3B:95:17:25:CE:29:A2:18:6F:D5:DC:90
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0197A0DE2CBBA5024C8427955A41192F678B
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/eHCPsFGmisg7lRclzimiGG_V3JA.roa
Signing time: Tue 24 Jun 2025 07:36:44 +0000
ROA not before: Tue 24 Jun 2025 07:36:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15614
IP address blocks: 2a01:510::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:de:2c:bb:a5:02:4c:84:27:95:5a:41:19:2f:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Jun 24 07:36:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78708fb051a68ac83b951725ce29a2186fd5dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:bb:1d:32:48:ec:0a:95:44:b3:8d:4a:f9:
0d:fc:5e:95:47:76:38:9b:87:37:1a:2c:ef:c1:84:
7f:c5:78:51:f9:2d:b3:34:32:42:90:4f:48:8e:92:
b7:c0:11:33:8a:c8:e2:44:40:cf:2e:ec:87:1c:60:
ac:c1:e3:27:99:ee:13:69:0e:63:02:2f:ae:36:c4:
23:91:9c:31:c1:09:62:59:79:e9:a2:3e:f3:1b:29:
6a:d9:e3:09:95:c9:bc:f2:4a:d8:95:a7:75:63:32:
71:3a:16:9f:f0:e5:24:46:dd:63:e2:ba:10:8c:c0:
83:6c:32:eb:01:b4:f2:9f:45:ef:db:91:8b:dd:9b:
d0:1f:13:41:a6:78:a1:6e:4b:7d:c8:85:07:e8:62:
46:bc:01:ae:00:90:50:9c:d7:ba:a8:cc:33:1f:f0:
b2:e5:22:be:e1:54:5a:51:88:be:ed:91:42:1e:90:
e7:7b:2f:de:5f:d2:39:3d:5f:76:e1:6a:34:f6:20:
1e:7c:e9:51:f5:38:e4:66:4b:8d:f5:7a:c2:8c:29:
95:ac:51:31:5b:b6:9e:af:a7:9e:fb:b0:58:63:bf:
62:d9:2c:5a:f8:f1:9a:d0:3d:cd:5d:d7:5d:27:e9:
ee:d5:02:e3:b8:b2:ce:b8:9f:6d:b9:89:46:60:16:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:8F:B0:51:A6:8A:C8:3B:95:17:25:CE:29:A2:18:6F:D5:DC:90
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/eHCPsFGmisg7lRclzimiGG_V3JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:510::/32
Signature Algorithm: sha256WithRSAEncryption
d6:3a:4a:0c:f2:65:ea:10:37:a7:7f:83:48:5f:df:7b:be:82:
d5:a4:97:22:5d:ef:91:26:64:bc:5b:c4:08:fc:7c:f4:ad:8d:
52:d5:62:64:8e:33:a9:c4:ff:aa:72:12:a8:80:0a:e8:0c:ae:
d0:66:c8:1b:c4:71:18:93:a2:69:f0:9f:74:4a:7e:60:e2:53:
15:ca:1e:f8:43:a2:1d:31:c7:c9:fa:33:16:54:5d:b8:43:21:
81:e9:c3:45:6e:c6:6a:96:50:8e:cc:35:95:38:9c:71:d4:52:
6b:c6:2c:13:2c:de:6a:9f:f2:4b:17:69:51:41:d6:fe:2e:77:
0d:1f:25:13:f9:4f:bd:f2:ac:ff:59:9f:72:8a:38:21:32:81:
5f:a6:b1:ae:0d:85:31:06:e8:2a:0e:a2:8f:39:c8:75:ef:96:
84:88:9f:c8:c6:38:52:69:c6:43:1f:41:54:d6:0d:fc:ea:8e:
85:0e:c9:83:8c:cc:e2:89:2c:5a:d0:fe:40:9d:20:81:fa:ef:
76:be:9b:cf:ab:4d:d1:1e:e9:f1:38:4f:eb:b6:1e:ec:37:b3:
dc:f1:cd:10:7c:3f:6f:08:db:5d:5a:1e:fa:67:e6:4a:01:de:
c4:de:ca:81:35:27:16:63:e3:b8:2a:36:68:2a:49:74:ef:63:
b2:2f:7c:de
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZeg3iy7pQJMhCeVWkEZL2eLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYyMGE0ODM4ZWY2ZTIxYmNjMjZhZDM1MTI2MmQ3NTY2
ZWIyNzUwHhcNMjUwNjI0MDczNjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODcwOGZiMDUxYTY4YWM4M2I5NTE3MjVjZTI5YTIxODZmZDVkYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoy7HTJI7AqVRLONSvkN/F6VR3Y4
m4c3GizvwYR/xXhR+S2zNDJCkE9IjpK3wBEzisjiREDPLuyHHGCsweMnme4TaQ5j
Ai+uNsQjkZwxwQliWXnpoj7zGylq2eMJlcm88krYlad1YzJxOhaf8OUkRt1j4roQ
jMCDbDLrAbTyn0Xv25GL3ZvQHxNBpnihbkt9yIUH6GJGvAGuAJBQnNe6qMwzH/Cy
5SK+4VRaUYi+7ZFCHpDney/eX9I5PV924Wo09iAefOlR9TjkZkuN9XrCjCmVrFEx
W7aer6ee+7BYY79i2Sxa+PGa0D3NXdddJ+nu1QLjuLLOuJ9tuYlGYBYE4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHhwj7BRporIO5UXJc4pohhv1dyQMB8GA1UdIwQY
MBaAFI+2IKSDjvbiG8wmrTUSYtdWbrJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEt
ZGE3ZDQ1YjczMmZhLzEvZUhDUHNGR21pc2c3bFJjbHppbWlHR19WM0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEtZGE3ZDQ1YjczMmZh
LzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgEFEDAN
BgkqhkiG9w0BAQsFAAOCAQEA1jpKDPJl6hA3p3+DSF/fe76C1aSXIl3vkSZkvFvE
CPx89K2NUtViZI4zqcT/qnISqIAK6Ayu0GbIG8RxGJOiafCfdEp+YOJTFcoe+EOi
HTHHyfozFlRduEMhgenDRW7GapZQjsw1lTiccdRSa8YsEyzeap/ySxdpUUHW/i53
DR8lE/lPvfKs/1mfcoo4ITKBX6axrg2FMQboKg6ijznIde+WhIifyMY4UmnGQx9B
VNYN/OqOhQ7Jg4zM4oksWtD+QJ0ggfrvdr6bz6tN0R7p8ThP67Ye7Dez3PHNEHw/
bwjbXVoe+mfmSgHexN7KgTUnFmPjuCo2aCpJdO9jsi983g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:33:46 2025 by rpki-client