Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-az0cd9QtaMSUas6ce3mYGDfsxI.roa
File: 1-az0cd9QtaMSUas6ce3mYGDfsxI.roa (raw, json)
Hash identifier: g25zI80bccXgl+dv5qyVxa67jWeR2ZjIEPbFRDARBKU=
Subject key identifier: F9:AC:F4:71:DF:50:B5:A3:12:51:AB:3A:71:ED:E6:60:60:DF:B3:12
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019653A1BC3F81BAD50D34EBBEAEB683D6AB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-az0cd9QtaMSUas6ce3mYGDfsxI.roa
Signing time: Sun 20 Apr 2025 14:37:10 +0000
ROA not before: Sun 20 Apr 2025 14:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 2a12:bec4:17b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:a1:bc:3f:81:ba:d5:0d:34:eb:be:ae:b6:83:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 20 14:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9acf471df50b5a31251ab3a71ede66060dfb312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:a2:af:87:e4:8e:cc:fc:1f:04:8e:be:93:
7b:3f:a4:a6:e4:9d:7c:67:0c:6d:03:e1:a5:26:2f:
2e:9d:95:90:e4:05:69:8a:b0:59:1c:60:ef:b1:7b:
48:5f:8c:73:73:a7:f8:c2:c0:b9:09:b8:79:f4:b2:
e2:68:a6:12:19:b5:d6:a1:22:45:b8:e3:80:e1:94:
2c:a8:c7:83:fb:0f:2c:78:7a:eb:51:0a:7c:37:05:
0f:25:74:8a:6c:f0:d1:88:92:7a:36:40:40:45:6d:
0b:84:cf:a7:6d:e1:95:9d:a6:f7:f0:30:07:c7:32:
6e:d3:bc:b1:c3:21:52:b0:6c:08:3e:4b:19:d9:b9:
16:90:f3:fa:2f:7c:b7:9d:59:27:d9:a7:67:0c:cd:
6c:bc:fb:cc:0a:e4:f4:25:20:c6:18:ae:ac:61:d4:
cd:72:19:44:0e:96:9f:42:38:9b:87:eb:86:75:b8:
75:2b:6e:4b:5d:19:5a:00:47:14:26:6f:a7:03:39:
8b:e0:93:d1:6e:f3:14:8f:11:85:20:f9:78:6a:7c:
fb:4b:07:44:94:ef:7c:fd:83:df:a9:72:df:0b:bb:
f7:ec:31:fb:93:00:ac:d9:bb:1c:32:47:7d:3d:01:
01:40:f2:a9:93:cc:8c:8e:3f:f9:e0:b5:f0:9f:72:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:F4:71:DF:50:B5:A3:12:51:AB:3A:71:ED:E6:60:60:DF:B3:12
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-az0cd9QtaMSUas6ce3mYGDfsxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:17b0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:77:5e:e3:4f:dc:4f:d0:47:1a:c0:92:9a:f2:46:e2:54:16:
98:bd:7c:07:04:a2:54:c3:0a:75:bc:f5:83:2e:f8:ae:b6:25:
05:24:66:fc:56:1c:ff:68:10:c9:c4:53:a3:08:1b:10:1b:da:
9e:da:6a:29:94:fd:95:8e:d4:30:ef:01:2b:7b:aa:19:fd:27:
e3:ed:9e:ca:67:de:a9:be:f8:6e:30:2d:80:33:42:bf:55:3b:
70:b8:8d:c3:5f:c4:85:b6:90:65:b1:5a:76:7b:26:b5:92:8b:
e9:26:e5:66:dc:9c:1a:c3:86:92:f3:91:67:81:a3:0f:5b:dd:
b6:16:4f:fc:2a:c1:e0:3f:d9:10:9a:98:f0:8a:a2:20:26:84:
1f:bf:f4:4a:1a:bc:cf:7c:fa:38:a9:bf:49:42:d4:a7:63:cb:
6c:51:e8:33:5f:bd:ff:40:97:b2:33:3c:c0:4c:1a:96:d9:ba:
76:54:fb:33:c9:87:75:c5:75:d6:90:a5:90:2b:36:e8:d0:8d:
8f:bd:fa:f1:28:f6:66:26:4b:97:44:03:ea:dd:0d:8a:0c:90:
73:ae:fc:0f:b2:9f:c9:29:3e:14:9a:8a:40:a4:8a:d6:01:cc:
e9:81:ab:78:13:88:cc:43:ef:6d:fb:85:9e:ce:0d:8d:82:de:
79:47:8f:aa
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZZTobw/gbrVDTTrvq62g9arMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwNDIwMTQzNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWFjZjQ3MWRmNTBiNWEzMTI1MWFiM2E3MWVkZTY2MDYwZGZiMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTuir4fkjsz8HwSOvpN7P6Sm5J18
ZwxtA+GlJi8unZWQ5AVpirBZHGDvsXtIX4xzc6f4wsC5Cbh59LLiaKYSGbXWoSJF
uOOA4ZQsqMeD+w8seHrrUQp8NwUPJXSKbPDRiJJ6NkBARW0LhM+nbeGVnab38DAH
xzJu07yxwyFSsGwIPksZ2bkWkPP6L3y3nVkn2adnDM1svPvMCuT0JSDGGK6sYdTN
chlEDpafQjibh+uGdbh1K25LXRlaAEcUJm+nAzmL4JPRbvMUjxGFIPl4anz7SwdE
lO98/YPfqXLfC7v37DH7kwCs2bscMkd9PQEBQPKpk8yMjj/54LXwn3L0jQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPms9HHfULWjElGrOnHt5mBg37MSMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvMS1hejBjZDlRdGFNU1VhczZjZTNtWUdEZnN4SS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODcvOTdmNDlhLTdhOTUtNGRkNS04Yzc0LTU1MzY5Y2Y1MDdl
ZS8xL3MzNGhXa0ZlMTdYZVMyM0JMeTk3ZDFERDFtOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoSvsQX
sDANBgkqhkiG9w0BAQsFAAOCAQEAbHde40/cT9BHGsCSmvJG4lQWmL18BwSiVMMK
dbz1gy74rrYlBSRm/FYc/2gQycRTowgbEBvantpqKZT9lY7UMO8BK3uqGf0n4+2e
ymfeqb74bjAtgDNCv1U7cLiNw1/EhbaQZbFadnsmtZKL6SblZtycGsOGkvORZ4Gj
D1vdthZP/CrB4D/ZEJqY8IqiICaEH7/0Shq8z3z6OKm/SULUp2PLbFHoM1+9/0CX
sjM8wEwaltm6dlT7M8mHdcV11pClkCs26NCNj7368Sj2ZiZLl0QD6t0NigyQc678
D7KfySk+FJqKQKSK1gHM6YGreBOIzEPvbfuFns4NjYLeeUePqg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:48:37 2025 by rpki-client