Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/E0upJVXmvrb9QB1vHUoxxOXLw38.roa
File: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (raw, json)
Hash identifier: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=
Subject key identifier: 13:4B:A9:25:55:E6:BE:B6:FD:40:1D:6F:1D:4A:31:C4:E5:CB:C3:7F
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019879A6765B558C687D49A64AC73A609D54
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/E0upJVXmvrb9QB1vHUoxxOXLw38.roa
Signing time: Tue 05 Aug 2025 09:53:29 +0000
ROA not before: Tue 05 Aug 2025 09:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213911
IP address blocks: 2a0d:d940:17::/48 maxlen: 48
2a0d:d940:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:a6:76:5b:55:8c:68:7d:49:a6:4a:c7:3a:60:9d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 5 09:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134ba92555e6beb6fd401d6f1d4a31c4e5cbc37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:61:8d:22:26:b4:a0:fd:5c:1d:5d:d6:7a:
1e:14:a7:02:e1:bb:db:5e:90:06:e8:0f:35:93:eb:
02:0a:3e:e4:1e:32:76:23:00:b7:f0:31:0c:48:d2:
d5:38:22:94:7d:e6:8a:8f:0b:33:72:17:58:f4:1c:
e5:33:7e:ed:d8:7f:10:9c:2f:61:01:bc:ca:f7:50:
4b:48:7e:d2:6b:05:5e:4d:db:fd:87:9a:43:fa:e7:
28:6f:ae:aa:b1:74:a7:c8:8f:6f:3a:b5:bd:8a:e0:
2c:8a:ad:60:43:10:93:49:3a:8a:e5:3b:9c:d7:b7:
a0:cf:42:eb:35:dc:58:fb:08:c7:ec:75:a6:3a:64:
12:87:c7:57:d0:b0:83:a1:f2:aa:f5:36:59:64:92:
e9:6a:3b:ef:8d:cb:cb:35:7c:5e:e4:3e:7c:17:59:
ae:89:b0:6c:6c:8b:5e:2f:1d:cb:c6:65:97:13:bd:
bf:41:e0:19:e4:14:e8:36:1c:e8:f7:58:55:73:bb:
2b:ec:25:21:fe:0a:17:9d:76:31:5e:18:0a:8e:4b:
bc:ab:1b:05:63:98:40:df:87:4d:eb:7b:fe:01:b1:
85:c2:f8:84:c8:cc:24:3f:5f:27:9a:fa:01:b5:d9:
a0:25:7f:6c:ad:4f:89:b2:8f:62:f2:21:aa:f9:ab:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:A9:25:55:E6:BE:B6:FD:40:1D:6F:1D:4A:31:C4:E5:CB:C3:7F
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/E0upJVXmvrb9QB1vHUoxxOXLw38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:17::/48
2a0d:d940:200::/48
Signature Algorithm: sha256WithRSAEncryption
b6:35:a1:f6:17:3d:f9:c3:53:6a:ff:77:57:93:cd:8f:cd:e0:
19:2d:a0:29:50:0d:f6:8f:26:af:f0:6f:d3:fc:2a:23:be:da:
cb:e9:34:9e:33:e7:65:37:94:ca:65:31:b4:88:09:52:86:6e:
7b:cb:cb:2a:98:22:e4:e5:40:6d:5a:a6:74:bd:e0:80:7d:e5:
08:cb:d7:06:01:91:1d:ee:c4:61:17:98:db:95:40:73:a9:57:
40:e2:51:77:24:49:85:29:a5:ea:5e:42:8a:1b:65:5d:e0:ca:
be:84:f4:19:87:5c:69:50:24:b1:93:cc:8b:4f:57:20:c0:b3:
8c:14:be:6d:97:48:e1:8a:78:c8:6a:44:16:d9:59:1d:78:c1:
b9:ca:21:1c:2e:7a:db:a1:d0:d0:d2:f7:38:03:d0:36:c2:06:
f3:49:e2:da:03:fc:3a:34:58:77:4b:92:f9:0d:48:77:84:1d:
a6:9f:45:bf:5f:de:c5:f8:25:76:ae:2a:29:28:4d:dc:53:3e:
e4:82:c1:8e:a2:62:77:40:15:dc:67:a1:a9:fe:99:0d:2e:6c:
26:af:b3:d9:f0:42:c9:b9:af:4e:45:e9:d3:20:6b:2d:31:ec:
00:87:ee:58:0a:66:85:6b:2d:2d:87:04:95:ce:f5:f0:e1:d2:
16:20:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:51 2025 by rpki-client