Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uFuuZlRwY4F1Pfy1HlZ_5uA7_vE.roa
File: uFuuZlRwY4F1Pfy1HlZ_5uA7_vE.roa (raw, json)
Hash identifier: WT8DOhFElmbEVLOg27FPha0R8y0H60qZdr9LfEj1sTk=
Subject key identifier: B8:5B:AE:66:54:70:63:81:75:3D:FC:B5:1E:56:7F:E6:E0:3B:FE:F1
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0197640B9D8E5A32A2C1E24E8B731CA6509F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uFuuZlRwY4F1Pfy1HlZ_5uA7_vE.roa
Signing time: Thu 12 Jun 2025 12:09:32 +0000
ROA not before: Thu 12 Jun 2025 12:09:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215427
IP address blocks: 2001:3185::/32 maxlen: 32
2a11:ad80::/29 maxlen: 29
2a13:c0c0::/29 maxlen: 29
2a13:c140::/29 maxlen: 29
2a13:d240::/29 maxlen: 29
2a13:d2c0::/29 maxlen: 29
2a14:5740::/29 maxlen: 29
2a14:58c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0b:9d:8e:5a:32:a2:c1:e2:4e:8b:73:1c:a6:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jun 12 12:09:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85bae6654706381753dfcb51e567fe6e03bfef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:4a:b4:ef:c9:94:6e:bc:98:92:f1:c6:cc:
7c:0c:34:81:30:2e:7a:13:91:ad:37:6f:48:6d:74:
25:d8:58:c4:f0:d8:25:62:76:1f:10:d8:a8:a9:a6:
8e:a6:97:1e:0f:1b:4c:ab:9b:c8:39:3f:96:10:6f:
ef:77:02:25:5c:4a:de:c7:1f:57:62:da:7e:5c:41:
d8:fb:44:5d:88:c5:8b:cb:91:51:42:9c:29:31:10:
90:4e:e1:56:9f:ac:17:ce:23:80:ce:61:0d:d0:d7:
26:a8:57:06:bb:05:78:f2:b3:51:59:65:51:fa:17:
44:fd:9d:93:2f:11:73:71:07:16:99:18:1f:45:8e:
a1:bd:7b:5e:c5:0d:27:5a:1d:ba:26:e3:bf:bc:6b:
1b:93:9e:5b:81:70:24:2b:10:f1:28:00:79:ff:d6:
69:cd:50:64:bc:f2:fa:41:a3:a3:83:81:b5:09:e3:
ed:fc:b5:8c:37:c4:00:15:a8:43:46:47:02:61:77:
5b:ae:6b:17:d0:ac:12:ca:94:2a:cf:98:ac:ad:38:
3d:f4:ae:7f:d1:db:21:28:9a:b9:89:8a:ec:4b:30:
a8:f7:d8:74:7f:48:78:ed:88:9b:86:bb:86:83:dc:
29:73:b2:88:77:88:42:6b:27:83:dc:fa:f3:c4:17:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:AE:66:54:70:63:81:75:3D:FC:B5:1E:56:7F:E6:E0:3B:FE:F1
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/uFuuZlRwY4F1Pfy1HlZ_5uA7_vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3185::/32
2a11:ad80::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a13:d2c0::/29
2a14:5740::/29
2a14:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:7b:51:32:4a:8c:f5:32:4a:ba:7c:5c:c2:8a:07:2e:32:5a:
23:98:e6:51:30:c8:2e:7c:8b:c3:9c:a2:4d:dd:be:7d:57:f5:
54:64:06:fb:c5:39:69:a4:90:d7:f2:fe:42:46:75:5c:44:32:
7c:0f:07:44:fc:4a:38:71:c1:8a:d4:a9:bd:89:a1:c5:18:93:
75:b9:b5:d9:bd:4c:8f:ef:9b:67:fd:b8:e3:6b:35:42:7a:d6:
9d:9c:58:c6:96:01:11:6f:fb:b0:37:37:2e:0f:ca:5b:d7:55:
7d:d6:78:12:02:b8:bc:4c:9a:d1:8f:29:92:62:a1:8f:f7:71:
9f:d9:a0:88:f2:12:76:3e:dc:5a:5c:d2:56:31:c8:5e:a4:c5:
b7:e9:70:ac:93:d1:c5:01:6d:1e:31:d5:fb:b2:8c:9a:08:c4:
36:d2:e1:f5:c1:3e:76:23:78:08:00:f4:d4:4c:5c:f6:f6:14:
f5:72:2a:00:f8:27:a3:44:e9:76:65:09:ab:74:7e:2f:aa:8d:
1c:9a:6b:0e:e1:2f:84:9b:39:60:1c:63:e0:d4:08:71:79:eb:
e2:bf:85:1c:70:2d:a1:ba:79:60:b4:f9:e1:b9:91:51:c2:6a:
92:6a:f6:28:52:00:24:43:71:e9:e6:cf:6c:a3:d6:70:d2:bb:
91:0b:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:59:11 2025 by rpki-client