Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D8WtQTZCIdbzIxZEzqOjYt11R5A.roa
File: D8WtQTZCIdbzIxZEzqOjYt11R5A.roa (raw, json)
Hash identifier: mTjIP060ZUh7omSO0Zdfe1RUcEila1seoPIqhcfag/8=
Subject key identifier: 0F:C5:AD:41:36:42:21:D6:F3:23:16:44:CE:A3:A3:62:DD:75:47:90
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 01975988E359DD645D7CBD059522C50EC6AA
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D8WtQTZCIdbzIxZEzqOjYt11R5A.roa
Signing time: Tue 10 Jun 2025 11:10:32 +0000
ROA not before: Tue 10 Jun 2025 11:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a09:e1c1:f100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:88:e3:59:dd:64:5d:7c:bd:05:95:22:c5:0e:c6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jun 10 11:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fc5ad41364221d6f3231644cea3a362dd754790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:35:be:be:32:0a:cd:8f:a7:89:bb:3d:3c:
d5:ff:8d:eb:16:94:b7:19:12:d3:de:de:04:c9:39:
1d:f4:f0:6a:13:7a:ce:4a:eb:06:c1:68:4f:2d:af:
19:b6:49:1a:87:c5:eb:2a:9b:8a:c6:ca:1a:ae:18:
b3:77:4f:4a:1d:93:89:60:52:fd:a8:d3:79:e9:3b:
4b:33:31:db:45:6e:f8:67:88:fc:9d:c4:cc:8b:c4:
77:19:81:5a:2a:08:36:3b:7c:5d:78:7a:a3:e4:22:
ac:3b:06:96:5e:5e:85:b5:b3:33:2e:10:0c:c7:b6:
41:45:e2:3f:5a:94:ae:f1:90:99:97:81:e5:58:61:
9d:c1:de:22:17:24:ed:f8:52:30:8c:e7:64:76:29:
bf:e4:f1:f5:89:8e:d9:1b:d6:56:7d:8b:14:1f:2a:
c1:d5:ea:d1:ef:ed:c0:2d:ff:5c:df:51:59:09:af:
2f:68:42:ed:85:84:df:c7:09:e2:ac:6e:7f:86:04:
ec:1a:b7:5d:dd:c1:ac:07:0c:ce:18:5d:8e:15:54:
63:9b:38:99:7c:a6:e8:68:d0:c1:b5:b5:6c:43:97:
f0:2a:9a:91:ee:9e:b8:67:b9:1f:3a:ba:18:de:be:
a4:f4:b5:8a:ee:01:17:33:b6:e7:cd:d4:cf:da:24:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:AD:41:36:42:21:D6:F3:23:16:44:CE:A3:A3:62:DD:75:47:90
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D8WtQTZCIdbzIxZEzqOjYt11R5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:f100::/48
Signature Algorithm: sha256WithRSAEncryption
61:c9:45:ac:7c:f7:55:5b:2c:b2:66:4f:91:8c:b6:a0:76:2c:
5f:51:45:b0:c3:c4:d8:7f:ee:47:52:bf:f3:00:97:da:d8:57:
b3:1d:a4:e9:af:1b:ea:69:7a:fc:b5:29:0f:5f:6d:c7:80:66:
08:b6:6d:f5:79:1f:f0:47:9a:3a:9a:21:8f:2a:45:c7:cb:05:
43:9b:66:9e:9a:37:c2:97:7d:f6:8b:b3:17:fb:05:e2:47:26:
f6:1e:b5:58:a5:87:a3:f0:8a:97:96:71:3e:79:42:95:0d:12:
0b:6a:32:c6:93:05:79:ee:b2:16:01:26:8b:e9:f5:42:39:d1:
08:20:8c:6a:40:37:81:aa:bc:b1:d2:fa:39:65:b5:46:6c:f7:
fa:6a:09:9b:c2:ea:eb:dd:56:85:4b:e4:c5:2a:25:4d:92:a2:
cb:94:61:0b:eb:cd:f9:9c:24:75:8b:3c:7a:01:0b:a4:e1:48:
e2:ce:d7:57:4f:0f:5f:3c:9e:c8:47:6f:68:9f:d6:03:23:98:
6e:a9:46:30:69:73:92:f1:80:f2:77:21:d4:9a:12:43:d4:df:
14:c0:c7:48:98:37:6f:16:e1:c0:38:b4:27:f2:f5:0a:b4:33:
22:e4:4c:77:20:4e:ee:39:89:86:fd:9e:31:b4:51:a1:2f:32:
5d:4d:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:08:47 2025 by rpki-client