Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/q6ADt_Z-l3_87v9IfzfFITnQ5Eo.roa
File: q6ADt_Z-l3_87v9IfzfFITnQ5Eo.roa (raw, json)
Hash identifier: yL7npIbAJ9XEt7UJOm8Xcx1NV4YccOxTyCRdP11Z57o=
Subject key identifier: AB:A0:03:B7:F6:7E:97:7F:FC:EE:FF:48:7F:37:C5:21:39:D0:E4:4A
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197ADD432C34627C9F1E613B8BD3025D36E
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/q6ADt_Z-l3_87v9IfzfFITnQ5Eo.roa
Signing time: Thu 26 Jun 2025 20:00:54 +0000
ROA not before: Thu 26 Jun 2025 20:00:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:ac6::/32 maxlen: 32
2a0d:adc0::/32 maxlen: 32
2a11:21c0::/32 maxlen: 32
2a11:21c4::/32 maxlen: 32
2a11:21c7::/32 maxlen: 32
2a11:3087::/32 maxlen: 32
2a11:35c2::/32 maxlen: 32
2a11:35c6::/32 maxlen: 32
2a11:3d02::/32 maxlen: 32
2a11:3d05::/32 maxlen: 32
2a11:7080::/32 maxlen: 32
2a11:7087::/32 maxlen: 32
2a11:d382::/32 maxlen: 32
2a11:d385::/32 maxlen: 32
2a11:d387::/32 maxlen: 32
2a11:d701::/32 maxlen: 32
2a11:d704::/32 maxlen: 32
2a12:24c0::/32 maxlen: 32
2a12:24c6::/32 maxlen: 32
2a12:24c7::/32 maxlen: 32
2a12:35c0::/32 maxlen: 32
2a12:35c3::/32 maxlen: 32
2a14:9702::/32 maxlen: 32
2a14:9706::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:d4:32:c3:46:27:c9:f1:e6:13:b8:bd:30:25:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 26 20:00:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba003b7f67e977ffceeff487f37c52139d0e44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:a2:34:7c:59:9a:0e:2d:5d:11:eb:49:48:
4f:b3:d8:ca:29:e5:97:05:d1:7e:70:82:a1:22:96:
03:ee:25:b3:c3:1c:e9:57:14:31:8e:d5:e8:06:1e:
57:0e:1f:34:dc:3f:ca:50:bd:c8:d0:4f:b1:2b:c4:
e6:74:04:25:2e:53:60:16:e1:ee:a0:26:7f:d3:ec:
91:5a:d4:df:20:e4:23:c7:1a:b6:c5:84:06:d8:85:
f6:8f:7e:9c:74:0a:fc:b9:29:4e:46:06:cf:14:0d:
0e:75:3b:e6:4e:4a:3f:db:ec:55:29:64:d2:68:42:
27:39:14:fe:5f:0d:65:f0:a4:be:52:a5:d2:e8:ec:
26:6e:f4:d3:e6:61:fb:49:a6:a6:59:d6:02:af:67:
0f:43:ea:e0:e2:08:65:04:54:d7:20:39:9d:b7:a7:
d2:af:12:d5:6a:0e:de:75:87:8b:71:f9:d7:da:e2:
75:c9:41:77:06:e6:81:75:74:6c:ec:7a:66:f1:83:
b5:66:db:95:57:18:e2:96:5b:d6:03:73:e5:65:5c:
fd:c8:07:2b:bf:68:80:db:c4:9a:8e:56:ca:f6:58:
48:90:b1:6c:c5:31:ca:d9:a9:d5:39:34:2e:34:49:
95:ab:19:a5:cf:bc:64:1a:01:c7:32:68:e0:28:cd:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A0:03:B7:F6:7E:97:7F:FC:EE:FF:48:7F:37:C5:21:39:D0:E4:4A
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/q6ADt_Z-l3_87v9IfzfFITnQ5Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ac6::/32
2a0d:adc0::/32
2a11:21c0::/32
2a11:21c4::/32
2a11:21c7::/32
2a11:3087::/32
2a11:35c2::/32
2a11:35c6::/32
2a11:3d02::/32
2a11:3d05::/32
2a11:7080::/32
2a11:7087::/32
2a11:d382::/32
2a11:d385::/32
2a11:d387::/32
2a11:d701::/32
2a11:d704::/32
2a12:24c0::/32
2a12:24c6::/31
2a12:35c0::/32
2a12:35c3::/32
2a14:9702::/32
2a14:9706::/32
Signature Algorithm: sha256WithRSAEncryption
b8:cf:ea:b6:9d:eb:2f:7f:4c:0e:37:a2:20:fc:78:01:12:95:
90:2f:fe:32:c2:45:bf:41:43:a7:64:53:d3:2c:7a:91:48:0e:
25:5e:ee:cf:74:5d:6d:94:11:62:f9:c4:08:79:6b:e0:c4:4c:
86:fa:b6:97:18:f7:18:7e:eb:ec:48:f9:9a:7e:7c:eb:d0:0d:
96:4d:20:10:85:9b:02:7b:28:bb:df:91:e9:3e:23:5e:04:5a:
18:c1:01:76:be:14:c9:7c:44:fb:08:86:1d:e5:c2:12:02:59:
5b:a8:d4:8f:ea:91:59:1d:01:e6:a8:8a:59:85:f5:bf:8a:f3:
f8:1f:67:e4:15:73:9f:ab:9f:eb:67:97:40:2c:7e:84:4a:51:
e3:fb:61:fa:22:98:14:01:5a:46:94:2a:f6:89:ec:fd:b1:43:
3b:d3:6d:13:69:f3:ff:28:1e:2a:97:08:a3:08:1d:08:21:5f:
6a:35:63:7a:07:56:5f:0e:2b:5f:de:70:cd:7b:1e:a3:28:ae:
35:fb:02:bf:8e:fc:cb:70:70:8c:5a:7b:cd:1b:a7:fb:bb:7a:
cd:b5:6f:46:39:d5:5d:9f:15:57:f7:fa:d1:4f:78:e4:33:71:
2a:b6:e7:23:94:0b:a0:a8:46:5d:64:9b:40:f0:47:9b:ab:7a:
e9:5b:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:29:17 2025 by rpki-client