Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E7_5GGl-q_EBL7vBs6MPa31Skfo.roa
File: E7_5GGl-q_EBL7vBs6MPa31Skfo.roa (raw, json)
Hash identifier: suNm6X9eG2feFIySkx8fQansyYwRGtBxW6VK4WzDuPc=
Subject key identifier: 13:BF:F9:18:69:7E:AB:F1:01:2F:BB:C1:B3:A3:0F:6B:7D:52:91:FA
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0196A99EAF05F96044E50DCEA49D748A90B4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E7_5GGl-q_EBL7vBs6MPa31Skfo.roa
Signing time: Wed 07 May 2025 07:21:11 +0000
ROA not before: Wed 07 May 2025 07:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1032::/47 maxlen: 48
2a07:3501:1050::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:9e:af:05:f9:60:44:e5:0d:ce:a4:9d:74:8a:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 7 07:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13bff918697eabf1012fbbc1b3a30f6b7d5291fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:bf:94:56:4a:54:0d:a4:53:83:eb:7a:1b:
9b:8e:c1:b5:bf:1f:0c:78:41:75:a4:f1:bd:21:4a:
bc:d9:f9:61:a9:17:a8:12:32:a7:97:ad:16:9c:27:
98:90:cb:b8:f6:ac:e3:d5:c9:e0:b0:bd:5e:ed:1e:
5e:09:1e:17:44:7d:bb:43:77:ac:22:48:79:47:26:
4c:b6:a0:ff:47:50:20:ff:1e:67:f8:7c:e2:06:5f:
f1:0c:91:79:d6:b9:da:e4:aa:b1:23:de:17:58:46:
e2:e7:d8:b3:6c:e8:3d:05:b8:70:df:aa:ab:bd:bf:
4f:76:8d:0b:25:36:c3:7c:9e:7d:aa:81:ae:47:dd:
ee:36:f3:a6:6c:43:bf:a7:b7:11:de:de:17:64:1f:
dc:79:c0:7d:bf:7d:58:85:24:bf:c8:43:8a:4f:67:
0f:46:55:0d:5a:2c:85:3a:07:f4:50:c5:f8:8c:31:
47:98:2c:bc:8f:42:76:f0:3a:45:01:1b:bf:aa:4f:
d0:a3:a3:04:8f:e4:d0:82:05:af:4d:34:80:76:3f:
35:31:f5:25:2e:e5:41:75:19:f5:44:fd:e3:50:20:
bf:f9:eb:fa:a5:b3:de:84:55:4a:2e:35:ba:5b:e8:
f7:ab:4c:cd:87:06:ec:7f:ab:46:8e:c5:ef:50:7a:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:F9:18:69:7E:AB:F1:01:2F:BB:C1:B3:A3:0F:6B:7D:52:91:FA
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/E7_5GGl-q_EBL7vBs6MPa31Skfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1032::/47
2a07:3501:1050::/48
2a07:3501:1060::/48
2a07:3502:10e0::/48
2a07:3502:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
35:79:19:d2:30:f0:31:68:55:23:3d:30:73:21:c0:8e:e8:3f:
a7:62:18:7c:81:b0:f5:bb:61:f4:89:a5:e0:b9:f5:0e:41:a2:
f9:48:d2:df:e1:0c:a4:57:18:d3:8e:fc:db:ff:c0:b2:a1:0c:
80:c2:ce:a4:d8:ce:c9:01:c5:96:43:4a:61:4a:83:93:d0:38:
d4:c9:0b:64:6a:1b:65:7f:9d:24:e7:5c:29:a2:80:3a:e4:7a:
5f:5d:c8:f7:4e:36:64:2a:13:70:e6:e8:a1:cd:95:45:e2:2e:
85:81:11:15:60:53:01:1c:2e:d4:c1:2d:09:ef:3b:5a:a4:2b:
c6:5a:fa:63:04:54:35:8f:43:1b:6a:70:8d:3e:5a:23:7d:5f:
fc:09:e8:e3:b5:80:ad:27:c0:67:54:af:ff:bf:b5:99:ee:17:
49:05:aa:e2:95:f8:7a:8c:58:14:7e:ef:f0:8c:e1:7a:53:33:
27:6f:b5:3a:89:02:c6:0a:a5:75:75:b5:5d:5f:d8:6b:1a:8a:
83:3f:51:74:f8:19:a4:f7:c1:86:ea:5e:f5:87:69:8f:a3:aa:
82:a5:de:e7:49:af:b1:f7:f9:2b:18:b9:c4:93:84:12:19:32:
ce:f8:d7:b8:22:e3:f6:9c:3b:c1:64:31:76:67:e0:96:a4:be:
0b:77:52:63
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZapnq8F+WBE5Q3OpJ10ipC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjUwNTA3MDcyMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2JmZjkxODY5N2VhYmYxMDEyZmJiYzFiM2EzMGY2YjdkNTI5MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6W/lFZKVA2kU4PrehubjsG1vx8M
eEF1pPG9IUq82flhqReoEjKnl60WnCeYkMu49qzj1cngsL1e7R5eCR4XRH27Q3es
Ikh5RyZMtqD/R1Ag/x5n+HziBl/xDJF51rna5KqxI94XWEbi59izbOg9Bbhw36qr
vb9Pdo0LJTbDfJ59qoGuR93uNvOmbEO/p7cR3t4XZB/cecB9v31YhSS/yEOKT2cP
RlUNWiyFOgf0UMX4jDFHmCy8j0J28DpFARu/qk/Qo6MEj+TQggWvTTSAdj81MfUl
LuVBdRn1RP3jUCC/+ev6pbPehFVKLjW6W+j3q0zNhwbsf6tGjsXvUHoTgwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFBO/+RhpfqvxAS+7wbOjD2t9UpH6MB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvRTdfNUdHbC1xX0VCTDd2QnM2TVBhMzFTa2ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgc1ABHg
AwcBKgc1ARAyAwcAKgc1ARBQAwcAKgc1ARBgAwcAKgc1AhDgAwcAKgc1AhHAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1eRnSMPAxaFUjPTBzIcCO6D+nYhh8gbD1u2H0iaXg
ufUOQaL5SNLf4QykVxjTjvzb/8CyoQyAws6k2M7JAcWWQ0phSoOT0DjUyQtkahtl
f50k51wpooA65HpfXcj3TjZkKhNw5uihzZVF4i6FgREVYFMBHC7UwS0J7ztapCvG
WvpjBFQ1j0MbanCNPlojfV/8CejjtYCtJ8BnVK//v7WZ7hdJBarilfh6jFgUfu/w
jOF6UzMnb7U6iQLGCqV1dbVdX9hrGoqDP1F0+Bmk98GG6l71h2mPo6qCpd7nSa+x
9/krGLnEk4QSGTLO+Ne4IuP2nDvBZDF2Z+CWpL4Ld1Jj
-----END CERTIFICATE-----
Generated at Sun May 11 23:31:11 2025 by rpki-client