Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/y8pL_FjJom2Y3UrPoyYCUnH1OsQ.roa
File: y8pL_FjJom2Y3UrPoyYCUnH1OsQ.roa (raw, json)
Hash identifier: VeyQt/dIKbpIVSCLQL71FQ6u0OY2EB2+izmsokZSt9s=
Subject key identifier: CB:CA:4B:FC:58:C9:A2:6D:98:DD:4A:CF:A3:26:02:52:71:F5:3A:C4
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019779DDF1E3CBE45CF1D814AF64D1B50296
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/y8pL_FjJom2Y3UrPoyYCUnH1OsQ.roa
Signing time: Mon 16 Jun 2025 17:51:17 +0000
ROA not before: Mon 16 Jun 2025 17:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:b480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:dd:f1:e3:cb:e4:5c:f1:d8:14:af:64:d1:b5:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 16 17:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbca4bfc58c9a26d98dd4acfa326025271f53ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:74:8a:55:39:63:de:d6:00:0d:0f:f8:79:
a3:0f:bb:eb:f1:20:55:f1:05:c6:69:9f:45:f8:c0:
91:55:ad:a2:20:97:40:5f:6a:7a:f0:ad:d2:a3:dc:
bd:7a:53:19:7c:22:b9:30:ca:02:2f:47:7d:38:93:
ad:a9:dc:6c:74:16:4c:67:f3:6c:98:2e:bf:32:8e:
83:33:bf:86:79:9a:6d:b7:6d:ab:02:ca:37:b9:d6:
e0:5b:29:eb:b7:b8:09:a1:b1:db:f7:b8:68:d4:11:
52:b0:b9:54:af:28:ee:f5:f5:48:67:74:b3:f6:84:
ba:de:07:d8:5d:76:3d:58:d0:4b:dd:bc:75:f9:75:
1b:2f:b9:0d:c2:cc:ac:92:12:ce:05:5f:d5:31:4d:
7a:f6:d5:74:09:99:d9:8e:2e:a6:13:7d:ae:b8:f7:
e8:e3:81:28:d8:29:31:64:83:57:a6:c0:0d:d4:86:
39:8c:58:c4:9b:dd:71:8f:4d:8a:ef:75:00:19:a5:
c2:e1:f5:2c:2a:6f:d6:7f:fe:85:f8:97:f1:f1:4b:
e5:51:1b:ae:97:93:02:3c:ae:fb:c4:90:c2:a0:30:
70:77:45:f3:6a:64:81:19:fa:48:ee:af:7e:06:c2:
97:14:0f:bb:ab:77:e5:f5:f1:88:dd:79:fa:8f:d0:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:4B:FC:58:C9:A2:6D:98:DD:4A:CF:A3:26:02:52:71:F5:3A:C4
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/y8pL_FjJom2Y3UrPoyYCUnH1OsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
72:e9:fe:a7:f7:cf:af:41:e3:2e:e6:4f:59:41:f9:99:50:4d:
ff:9d:1e:9c:5d:d7:eb:bb:32:5e:79:6c:9f:2b:d4:06:f4:a1:
da:6e:22:ca:10:8b:5e:5f:61:af:35:b2:e4:e3:2b:23:e1:77:
f5:a5:f3:ca:eb:fe:3f:c4:2a:b8:88:86:91:67:cf:33:25:aa:
ba:e3:36:31:81:92:0f:4c:6f:e6:76:42:c4:9b:3a:32:0a:e9:
41:20:5c:d7:c7:50:8f:f2:4f:2e:06:a9:2c:95:fc:12:48:c9:
44:39:7e:34:89:65:f3:a8:90:57:bc:07:dc:0e:98:4c:fd:41:
74:35:0d:82:1d:22:da:b0:5a:a9:14:ae:fa:af:23:dc:b1:ca:
ed:23:72:5d:3a:82:7a:d5:e6:65:55:1d:b9:45:6a:9e:b6:dc:
1c:47:72:c1:49:04:57:c7:8a:b1:cd:f2:39:b1:6b:21:ef:e6:
c4:5e:9b:61:98:bb:ad:c9:c6:9a:61:ee:8e:e8:48:04:e3:77:
24:c5:a3:00:b0:df:50:60:86:d6:3d:e9:9f:15:e5:30:62:7a:
14:8a:19:da:42:2b:44:6a:91:3a:53:c7:23:1b:9d:8f:a1:7d:
e7:73:22:39:54:b4:bd:8a:26:7f:53:47:22:a6:88:6f:98:f6:
44:07:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:18:51 2025 by rpki-client