Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/bv4QETSWqF3TL8v6bkdkOmJCnV8.roa
File: bv4QETSWqF3TL8v6bkdkOmJCnV8.roa (raw, json)
Hash identifier: u3f6KbVOSd8SH6/L76YsF9GXLmgRIwxXE5d59oV84rQ=
Subject key identifier: 6E:FE:10:11:34:96:A8:5D:D3:2F:CB:FA:6E:47:64:3A:62:42:9D:5F
Certificate issuer: /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial: 0198CF00F9004B56980BE4CF3A598BD86D4F
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/bv4QETSWqF3TL8v6bkdkOmJCnV8.roa
Signing time: Thu 21 Aug 2025 23:40:04 +0000
ROA not before: Thu 21 Aug 2025 23:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205966
IP address blocks: 2001:678:10dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cf:00:f9:00:4b:56:98:0b:e4:cf:3a:59:8b:d8:6d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Validity
Not Before: Aug 21 23:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6efe10113496a85dd32fcbfa6e47643a62429d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:48:2d:8d:b3:3a:78:57:22:f0:b0:e6:bc:
56:cb:17:6f:ed:9b:b7:4b:c0:17:6f:3d:38:7b:96:
a6:b0:55:fe:ed:fa:19:9b:f3:02:bc:14:fa:24:f9:
07:f0:0b:91:b5:a6:97:d0:bd:da:47:0f:3a:49:6b:
11:6b:2f:4f:19:2b:94:66:6c:9f:e7:d0:2c:71:ff:
c4:9c:a5:cf:05:17:b6:da:97:79:d0:ae:45:83:9f:
fe:c6:c8:91:f6:d4:7a:8a:e9:de:6a:6c:d5:bc:0a:
44:a0:9c:1d:48:ca:89:a6:4b:81:69:dd:d1:24:b7:
e7:2e:04:d7:68:f0:66:9a:70:77:b7:19:ca:46:73:
28:51:cb:b3:67:63:4b:ac:19:c5:5c:0f:0f:2f:53:
29:c7:7f:05:58:cc:c3:08:18:5d:47:4d:f9:7d:e0:
b0:57:d2:93:02:3b:19:18:25:fa:c5:04:b8:a8:a3:
1c:ad:72:14:dd:0c:4c:6d:5c:49:e6:b9:99:d0:35:
d2:22:d5:4f:3f:a6:43:e1:10:69:9e:1e:44:02:77:
5d:aa:02:4a:95:93:e8:c5:33:7f:a9:45:2d:f7:4d:
48:1b:95:ea:9b:eb:1b:ae:94:c8:fe:f1:e3:71:0a:
f9:36:3a:59:12:75:f2:e7:4e:6e:66:d5:72:1c:dd:
ef:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:10:11:34:96:A8:5D:D3:2F:CB:FA:6E:47:64:3A:62:42:9D:5F
X509v3 Authority Key Identifier:
keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/bv4QETSWqF3TL8v6bkdkOmJCnV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10dc::/48
Signature Algorithm: sha256WithRSAEncryption
b6:c9:b1:39:7a:8e:a9:f6:71:d3:4a:2e:1c:90:86:63:3c:28:
f0:cd:e4:44:e6:cf:02:6a:ec:ed:a1:9f:13:c3:84:fd:bb:2b:
47:0e:b3:b0:dc:b2:dc:f1:06:2a:6d:19:89:b8:f4:29:c5:75:
c5:0a:39:37:a9:0a:f4:03:68:71:75:b9:a1:25:01:75:b9:24:
e8:0f:0f:58:92:2f:3b:cb:47:ec:87:f9:a1:cc:cb:d4:0e:d4:
43:5f:d7:56:d4:47:eb:32:70:49:0e:54:1f:b4:18:c3:cb:c2:
1f:35:32:cb:56:fb:36:de:ba:9b:32:74:a0:94:60:3b:ae:0f:
02:fd:c7:f0:4c:f7:39:75:f9:b7:2f:22:b5:d0:01:a5:20:10:
c7:3f:3c:4e:67:d4:6b:8d:89:2b:b9:be:16:6c:e0:43:b7:19:
da:9e:81:c0:9f:eb:e9:2d:15:21:96:2e:be:4a:6b:71:14:bd:
92:ee:8b:ad:c3:98:ad:22:b4:9d:1d:cc:ca:6a:7e:79:11:82:
34:cf:0c:39:9e:b2:b7:df:2a:11:94:d5:cc:17:1d:42:97:98:
e6:2d:31:4b:53:8c:ee:47:01:fe:a9:ac:43:6f:41:2d:31:53:
b9:50:8c:de:d0:ff:ae:2f:66:96:00:9d:1f:65:c3:c9:c5:74:
e7:f1:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:23 2025 by rpki-client