Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/xeLI7zyLRI5-K4gpbP7OZcEWJ38.roa
File: xeLI7zyLRI5-K4gpbP7OZcEWJ38.roa (raw, json)
Hash identifier: 5ZVCaZrIVGQlhuykRe/1oY7M4NUtj7Vvf3gd5YRzb+E=
Subject key identifier: C5:E2:C8:EF:3C:8B:44:8E:7E:2B:88:29:6C:FE:CE:65:C1:16:27:7F
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0197B07B56C89225F7948F7113A06122342B
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/xeLI7zyLRI5-K4gpbP7OZcEWJ38.roa
Signing time: Fri 27 Jun 2025 08:22:42 +0000
ROA not before: Fri 27 Jun 2025 08:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:21c6::/32 maxlen: 32
2a11:3084::/32 maxlen: 32
2a11:35c0::/32 maxlen: 32
2a11:3d03::/32 maxlen: 32
2a11:7085::/32 maxlen: 32
2a11:d380::/32 maxlen: 32
2a11:d700::/32 maxlen: 32
2a12:35c2::/32 maxlen: 32
2a14:9707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:7b:56:c8:92:25:f7:94:8f:71:13:a0:61:22:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Jun 27 08:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e2c8ef3c8b448e7e2b88296cfece65c116277f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:54:e9:fe:80:27:a6:4b:fb:4e:b5:b3:2a:
f2:02:77:1e:88:0e:a6:8a:91:c6:c6:55:ac:20:9a:
9c:d2:1f:d5:f2:73:bb:01:23:72:02:7c:01:2d:e5:
c0:85:ee:23:67:43:ce:07:3b:d7:cc:65:4b:ba:2b:
b4:12:ff:9b:17:7e:6d:85:53:40:a1:e4:ef:18:3f:
d5:07:bd:c4:13:ef:76:0e:85:d6:8b:7e:48:99:7b:
6e:b2:95:07:d2:4a:d4:7d:26:1b:e8:63:5b:f2:24:
ab:82:1e:9f:25:29:b2:f4:a4:d4:5c:1e:6f:b8:1c:
fa:59:86:eb:d4:42:42:62:44:cf:58:a5:9a:e1:aa:
1e:d2:3c:4c:ac:56:b1:35:05:de:b5:f5:8e:e4:a3:
59:7b:dd:4f:d7:ce:4e:d8:ab:d5:86:3c:88:1d:96:
ae:bd:29:f3:68:79:e0:bc:a3:6f:97:e0:a5:2b:2b:
32:22:74:13:60:52:98:ca:ef:78:dc:35:43:cf:5f:
e6:09:6e:97:c3:21:de:25:1d:3d:8d:43:1b:3b:8f:
e8:8b:5e:56:6f:22:cc:c5:d0:94:a2:d1:49:3d:f0:
ba:6c:38:35:c1:2d:24:0b:a7:ce:44:9d:cb:ed:5b:
35:82:d5:b0:4a:e7:72:f9:70:f6:8d:e2:45:57:2e:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:C8:EF:3C:8B:44:8E:7E:2B:88:29:6C:FE:CE:65:C1:16:27:7F
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/xeLI7zyLRI5-K4gpbP7OZcEWJ38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:21c6::/32
2a11:3084::/32
2a11:35c0::/32
2a11:3d03::/32
2a11:7085::/32
2a11:d380::/32
2a11:d700::/32
2a12:35c2::/32
2a14:9707::/32
Signature Algorithm: sha256WithRSAEncryption
6f:88:f1:e3:3f:63:dd:84:64:15:eb:20:19:4b:ca:08:c7:ad:
80:bc:ff:c4:7c:a7:ff:0f:24:07:52:8f:49:2f:8f:57:0b:46:
a2:d4:18:83:6f:cc:7f:a3:b2:ff:8d:be:48:44:3b:f2:7e:e8:
e8:ab:39:f8:2e:1c:37:df:e4:43:b3:b8:98:53:d6:ec:4e:95:
09:dc:1d:b2:3b:62:d5:32:3c:3a:f1:82:ca:4f:98:72:31:f6:
05:75:93:50:d0:8d:c4:e2:46:5f:9e:6b:7e:1b:93:d5:cf:ac:
2c:7c:30:b2:a6:4c:4d:8c:d8:38:52:1e:4f:a1:4b:02:4d:6e:
96:25:08:ce:80:58:c6:f9:e4:23:80:e6:3f:b8:d3:22:1c:3e:
65:96:94:7a:96:5a:4b:2b:30:2f:f2:49:22:24:d2:66:64:8b:
fd:65:b2:0e:a2:20:d6:56:c9:26:01:74:ac:60:6b:32:d4:b2:
70:d8:6f:b0:6b:bd:83:4c:15:69:10:e4:0b:24:22:74:68:5d:
b0:85:43:b9:2c:a1:61:59:f0:a5:e1:09:af:91:96:c8:64:27:
db:7d:08:f8:c0:1f:88:e2:d4:53:83:40:a8:3d:ff:97:8a:78:
c3:b9:2d:a8:1e:f7:3a:9c:45:07:f7:10:0f:97:57:97:1d:33:
35:84:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:12 2025 by rpki-client