Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Un_m0DbVRENrUueiG3ELv6Kx-eE.roa
File: Un_m0DbVRENrUueiG3ELv6Kx-eE.roa (raw, json)
Hash identifier: pEXnje18ssNBz+sY/hTtrPTkAvEMGt9WYJcpE39pmUM=
Subject key identifier: 52:7F:E6:D0:36:D5:44:43:6B:52:E7:A2:1B:71:0B:BF:A2:B1:F9:E1
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0197B00BA502E4062031CAE0AAAD8B0A3025
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Un_m0DbVRENrUueiG3ELv6Kx-eE.roa
Signing time: Fri 27 Jun 2025 06:20:42 +0000
ROA not before: Fri 27 Jun 2025 06:20:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:404a::/47 maxlen: 47
2a02:ee80:404a::/48 maxlen: 48
2a02:ee80:404b::/48 maxlen: 48
2a02:ee80:4066::/47 maxlen: 47
2a02:ee80:4066::/48 maxlen: 48
2a02:ee80:4067::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:42d4::/47 maxlen: 47
2a02:ee80:4354::/47 maxlen: 47
2a02:ee80:4354::/48 maxlen: 48
2a02:ee80:4355::/48 maxlen: 48
2a02:ee80:437e::/47 maxlen: 47
2a02:ee80:437e::/48 maxlen: 48
2a02:ee80:437f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:0b:a5:02:e4:06:20:31:ca:e0:aa:ad:8b:0a:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jun 27 06:20:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=527fe6d036d544436b52e7a21b710bbfa2b1f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:80:42:40:e7:13:95:0b:e1:c7:ec:2b:2c:
cf:66:02:8f:37:89:c5:b9:b7:98:e4:62:ad:01:b5:
ad:7c:f7:6d:11:bb:a2:3c:6d:2c:6a:0c:a3:c0:68:
9c:2c:24:cb:9d:5c:90:da:6f:2a:21:38:c8:4a:07:
56:dc:a3:9a:93:6f:f2:00:de:57:38:8d:02:ff:05:
bb:89:6a:bb:5b:b7:cb:8a:d8:0a:09:7f:70:d4:bf:
39:35:ab:70:b7:9d:96:00:10:af:f4:20:0e:27:9a:
b0:be:dc:65:74:fd:3b:8a:32:40:01:1c:0f:9a:d7:
d0:70:1c:98:24:38:1b:d4:a5:5e:6f:64:68:82:cd:
2a:77:d9:13:dd:bb:f6:59:f8:05:aa:28:0f:da:a1:
32:2e:f9:1b:70:60:48:79:d9:db:ef:a4:0c:e6:57:
61:ad:f5:24:4c:a2:92:d0:9c:88:38:df:61:2f:59:
b9:77:a2:2b:7b:0f:eb:3c:bf:57:d6:7c:22:11:01:
31:0d:e3:95:bb:13:ac:d8:c7:21:23:73:56:63:ae:
17:2e:81:5a:3a:48:a7:c8:68:2a:3e:c4:3b:cc:d2:
41:53:0f:e2:56:fe:a5:3b:6c:2c:46:d0:09:71:b8:
d0:a1:89:00:0f:e8:ac:cd:73:6a:cf:be:21:74:dd:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:E6:D0:36:D5:44:43:6B:52:E7:A2:1B:71:0B:BF:A2:B1:F9:E1
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Un_m0DbVRENrUueiG3ELv6Kx-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:404a::/47
2a02:ee80:4066::/47
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
2a02:ee80:42d4::/47
2a02:ee80:4354::/47
2a02:ee80:437e::/47
Signature Algorithm: sha256WithRSAEncryption
48:d5:09:5d:38:56:a2:03:0c:3b:04:b3:09:9c:35:f4:56:70:
eb:07:10:d3:fb:16:72:67:68:bd:24:eb:49:d3:9d:02:f9:cd:
d7:c8:3f:e1:00:5f:62:2c:e5:d7:56:92:cc:eb:e4:14:50:a9:
45:06:2d:53:cd:f6:a4:c3:ea:e3:e3:7c:c4:56:5f:3d:dd:e1:
74:b4:4f:39:40:d1:7e:a0:96:66:01:f0:98:e6:d7:b7:c7:34:
90:1b:d5:72:aa:19:d9:6f:4d:df:47:7d:a5:f5:c7:a9:20:ab:
02:48:69:66:2b:9d:0e:71:9e:2c:eb:63:80:22:98:d9:2d:b6:
b7:71:f7:b4:bd:b0:2f:e3:f4:04:6b:02:10:12:cd:f7:2f:39:
49:96:1d:46:26:e6:e0:ca:15:00:20:71:77:3e:1f:ae:17:8a:
12:bd:2e:ed:44:21:b0:44:19:49:bf:c8:85:11:9d:8c:3f:32:
fc:1c:46:cc:21:2b:da:89:d2:9e:c8:4c:8e:9b:bb:1d:b1:fb:
72:bf:e8:f9:32:83:7f:90:bf:db:ad:87:5b:71:c4:e3:be:f8:
e0:b3:37:4b:d9:f5:0f:cb:01:84:e8:3e:aa:1e:b4:27:24:46:
49:9f:4d:78:ad:8a:f3:9e:6c:5f:7b:26:d3:7c:19:36:c7:83:
62:e4:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:12:52 2025 by rpki-client