Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/y77dBZKkwdBWSaHuC-2LOWhhnDE.roa
File: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (raw, json)
Hash identifier: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=
Subject key identifier: CB:BE:DD:05:92:A4:C1:D0:56:49:A1:EE:0B:ED:8B:39:68:61:9C:31
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01977E47B43A6B1AAD806D51E018298ACDBB
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/y77dBZKkwdBWSaHuC-2LOWhhnDE.roa
Signing time: Tue 17 Jun 2025 14:25:17 +0000
ROA not before: Tue 17 Jun 2025 14:25:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a14:5200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:47:b4:3a:6b:1a:ad:80:6d:51:e0:18:29:8a:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jun 17 14:25:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbedd0592a4c1d05649a1ee0bed8b3968619c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:fb:0b:f4:86:03:b4:9b:cb:38:c3:d4:35:
09:95:62:ef:f7:78:94:4a:34:16:cb:7f:3d:8c:97:
79:73:83:3c:f8:93:05:d4:35:95:0b:85:7f:2d:0e:
20:9c:13:b0:a0:5d:96:e0:af:7f:02:b9:43:75:33:
b6:fa:ff:34:34:1e:94:2c:a3:00:af:30:06:ff:9c:
a7:ea:f1:1b:ee:fe:50:34:d0:3a:9e:da:a2:7f:61:
9e:d5:af:b0:17:79:a6:bd:b5:c9:ff:d1:53:12:43:
4f:78:38:60:94:de:ef:8e:49:5d:c9:eb:3c:c5:d8:
bd:1e:80:10:dd:de:b1:f8:a4:d8:27:b7:3c:65:f2:
36:b4:6e:96:c2:54:e2:c9:07:38:a7:d5:4d:45:64:
6a:e7:57:13:98:c1:f1:1e:79:4b:76:4d:b8:91:de:
dc:b0:97:c6:11:46:6d:ea:95:fd:e6:f0:d9:be:a1:
a0:53:35:ec:ac:71:a5:62:f2:e0:10:9a:ff:65:6c:
43:39:cb:2c:36:89:08:ac:8a:28:40:3e:a0:c9:28:
3b:89:e3:3a:25:a6:cd:91:5a:d7:dc:d0:f0:0a:17:
19:ec:76:bc:18:b1:5e:78:6b:d1:8c:88:71:32:b0:
a8:cb:69:9f:29:26:f3:31:97:98:05:0f:9e:4d:f2:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:DD:05:92:A4:C1:D0:56:49:A1:EE:0B:ED:8B:39:68:61:9C:31
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/y77dBZKkwdBWSaHuC-2LOWhhnDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5200::/29
Signature Algorithm: sha256WithRSAEncryption
06:30:2a:96:65:57:63:c0:99:cf:b4:c5:28:68:30:1f:e3:4c:
0a:65:6d:d9:15:2b:bd:04:d0:1a:a6:3f:02:7f:0a:0e:d2:58:
22:2f:61:57:2b:0d:06:b8:d8:07:63:7c:58:d6:9c:64:ba:04:
5d:6b:e5:d2:a0:53:9a:7a:1e:d7:f4:bc:52:b5:d3:a3:b6:ee:
a6:2e:a3:89:16:6d:91:2a:07:fe:4d:fe:e1:0a:10:c9:09:66:
a8:55:db:20:cd:bd:42:d2:65:a0:fb:03:21:b7:a0:ef:73:07:
1d:fc:93:d7:2b:7d:4a:33:58:f5:8f:a0:4a:a5:6f:a0:4d:55:
96:d1:30:6b:9a:d1:08:99:66:d6:b6:35:b7:c3:85:47:de:70:
3d:d0:ed:33:35:ea:f5:61:10:ba:04:b4:00:0f:a6:4b:75:a2:
61:b7:45:c9:e8:37:ba:86:97:fc:be:59:21:ac:dc:10:40:24:
7d:bf:f9:ac:e0:6a:bf:f5:98:da:82:6e:74:52:d4:6d:e4:33:
6d:7b:a6:fa:4c:e1:4b:07:73:75:0c:27:ae:5f:0c:20:0f:b4:
e7:93:a7:23:0d:d6:8a:97:20:8f:c5:3f:45:d6:b3:25:af:84:
f2:48:71:9f:54:37:23:d9:a5:cc:d5:8c:c8:0a:4a:cf:2a:b7:
3f:0b:66:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZd+R7Q6axqtgG1R4Bgpis27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl
OWQyOTAwHhcNMjUwNjE3MTQyNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmJlZGQwNTkyYTRjMWQwNTY0OWExZWUwYmVkOGIzOTY4NjE5YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6P7C/SGA7SbyzjD1DUJlWLv93iU
SjQWy389jJd5c4M8+JMF1DWVC4V/LQ4gnBOwoF2W4K9/ArlDdTO2+v80NB6ULKMA
rzAG/5yn6vEb7v5QNNA6ntqif2Ge1a+wF3mmvbXJ/9FTEkNPeDhglN7vjkldyes8
xdi9HoAQ3d6x+KTYJ7c8ZfI2tG6WwlTiyQc4p9VNRWRq51cTmMHxHnlLdk24kd7c
sJfGEUZt6pX95vDZvqGgUzXsrHGlYvLgEJr/ZWxDOcssNokIrIooQD6gySg7ieM6
JabNkVrX3NDwChcZ7Ha8GLFeeGvRjIhxMrCoy2mfKSbzMZeYBQ+eTfIDGQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMu+3QWSpMHQVkmh7gvtizloYZwxMB8GA1UdIwQY
MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt
ODRjYmM4NWEyMzQzLzEveTc3ZEJaS2t3ZEJXU2FIdUMtMkxPV2hobkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz
LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRSADAN
BgkqhkiG9w0BAQsFAAOCAQEABjAqlmVXY8CZz7TFKGgwH+NMCmVt2RUrvQTQGqY/
An8KDtJYIi9hVysNBrjYB2N8WNacZLoEXWvl0qBTmnoe1/S8UrXTo7bupi6jiRZt
kSoH/k3+4QoQyQlmqFXbIM29QtJloPsDIbeg73MHHfyT1yt9SjNY9Y+gSqVvoE1V
ltEwa5rRCJlm1rY1t8OFR95wPdDtMzXq9WEQugS0AA+mS3WiYbdFyeg3uoaX/L5Z
IazcEEAkfb/5rOBqv/WY2oJudFLUbeQzbXum+kzhSwdzdQwnrl8MIA+055OnIw3W
ipcgj8U/RdazJa+E8khxn1Q3I9mlzNWMyApKzyq3PwtmBw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:34:11 2025 by rpki-client