Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa
File: T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa (raw, json)
Hash identifier: td8rBwHJnN+UP91bKfMfmPAq5aMPIDcnHWXi4WyoQek=
Subject key identifier: 4F:BB:79:07:1E:97:D8:33:7F:E6:D7:F8:79:FA:C0:EE:F9:EA:8F:69
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01989FD66537BAB2AC6F74756749DD8DE12A
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa
Signing time: Tue 12 Aug 2025 19:51:24 +0000
ROA not before: Tue 12 Aug 2025 19:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 2a12:2cc5::/32 maxlen: 32
2a12:4140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:d6:65:37:ba:b2:ac:6f:74:75:67:49:dd:8d:e1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Aug 12 19:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fbb79071e97d8337fe6d7f879fac0eef9ea8f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:43:1a:91:d5:9d:96:19:a9:cb:05:2e:8e:
c2:d8:b9:06:21:72:94:3b:43:4a:a3:a8:94:6e:a6:
0b:b6:2d:59:dc:13:24:f7:01:b8:37:a8:e5:9e:81:
41:84:79:8c:b1:a4:62:d3:67:5a:a5:3e:f1:53:ae:
34:90:2d:e9:51:b6:36:69:15:2e:aa:ff:9a:93:5d:
02:4f:23:c7:dd:5c:39:e9:2a:f6:bc:cd:9a:6c:77:
22:29:42:b9:00:b4:7c:b8:8b:cc:62:9f:1b:f1:b8:
07:ef:5a:9c:05:90:84:21:30:de:9e:fa:56:fa:c7:
d3:fd:5b:05:2f:fe:67:35:23:ea:c4:70:47:ac:75:
4d:6f:4d:bf:a9:1c:ce:94:fe:ad:4d:e9:74:61:2d:
28:a6:05:34:bf:2f:b4:3c:b8:c7:cd:fb:d6:67:2f:
59:11:6b:af:3c:77:c6:17:20:50:1c:98:5a:0f:db:
dc:fc:50:78:66:c9:57:48:67:ef:cb:29:10:45:7b:
86:6e:4e:b8:6a:ac:d5:09:88:36:7a:b6:b9:d3:54:
83:15:1a:a4:c9:0a:40:73:61:67:a4:bf:8a:d3:08:
b3:f9:dc:bc:4c:69:c3:34:11:94:83:93:f9:7b:a6:
ca:5f:2b:00:e1:82:86:97:f3:18:a2:49:21:e8:6a:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BB:79:07:1E:97:D8:33:7F:E6:D7:F8:79:FA:C0:EE:F9:EA:8F:69
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/T7t5Bx6X2DN_5tf4efrA7vnqj2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2cc5::/32
2a12:4140::/32
Signature Algorithm: sha256WithRSAEncryption
78:96:53:bd:4e:a4:19:9a:b6:79:6f:d2:25:35:c4:ac:59:f4:
4f:73:d7:0f:e3:3c:56:01:5a:35:d9:15:43:08:cb:bd:5a:a4:
0e:4b:40:1f:4e:5f:66:76:91:64:a7:66:93:66:1e:54:73:30:
85:f6:dc:a5:18:08:4d:b5:61:1c:c8:90:f1:a2:ad:e6:43:a8:
81:d7:9a:2b:71:58:fc:2b:b8:ec:77:ab:76:0c:1f:c6:26:a9:
a2:de:01:22:e0:cc:c4:8e:e0:34:81:d0:16:cc:0e:da:f1:73:
7b:ed:a1:fe:2d:08:cb:c1:ba:f2:2b:4f:b9:67:b5:75:48:da:
5f:d3:61:e4:43:38:85:6f:8b:7f:53:10:ea:c0:e9:1f:d8:95:
5a:b1:42:ab:9d:ff:92:ff:4e:e9:4c:af:cd:64:c3:68:0c:79:
a6:10:16:cb:57:ce:8f:b2:26:7b:d8:ed:2b:52:98:ad:73:ab:
70:e1:0d:f3:d7:58:51:07:67:ab:53:24:82:10:a5:a0:1b:51:
a4:31:8c:58:55:4e:3d:7e:85:ab:95:a9:42:14:03:05:0f:53:
db:72:18:6e:c7:66:1a:b8:ee:92:2b:b2:08:59:bd:fe:8e:a5:
c5:75:d2:71:c7:e6:2b:8e:81:e4:cf:03:74:1d:1a:4b:93:37:
ec:b3:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:13:34 2025 by rpki-client