
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa
File: pz5iKSS3DjXvuOKM5710xrPbd3k.roa (raw, json)
Hash identifier: BAQauhMx2S4URlRz7DXain/wmvSRTTI+4gS0hRToEQ8=
Subject key identifier: A7:3E:62:29:24:B7:0E:35:EF:B8:E2:8C:E7:BD:74:C6:B3:DB:77:79
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 01987B996D87163581D14830DEC63941786A
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa
Signing time: Tue 05 Aug 2025 18:58:29 +0000
ROA not before: Tue 05 Aug 2025 18:58:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43278
IP address blocks: 2a06:1301:4350::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:99:6d:87:16:35:81:d1:48:30:de:c6:39:41:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Aug 5 18:58:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73e622924b70e35efb8e28ce7bd74c6b3db7779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:98:25:67:e9:f2:e4:24:f4:ce:da:20:b2:
e3:a9:fb:77:27:d2:75:d0:dd:d7:08:78:d2:01:33:
65:81:3c:43:26:58:10:19:5d:5a:d2:0f:c6:44:02:
b4:f5:39:e6:75:24:9a:e3:b4:9a:90:86:95:35:41:
e0:48:76:a6:0a:ae:ad:41:d0:df:67:16:55:5f:c3:
aa:4f:1f:c2:17:5b:c8:54:6a:6b:c4:ea:b1:78:47:
60:7e:a0:b0:56:c2:68:a2:59:2e:96:73:8e:4b:ef:
76:53:20:b1:24:21:00:d9:69:ee:19:9e:ca:f6:ff:
a3:20:08:50:5c:8e:e8:3a:66:12:5f:3c:6c:29:0c:
7d:73:8c:6e:2a:4d:ab:2d:ea:66:82:b3:58:87:a9:
66:c1:5d:66:cb:79:5a:20:19:54:2f:f2:7a:f3:51:
7a:ab:4d:45:e1:1b:83:cc:ed:a0:a3:63:cf:ae:7b:
16:cb:3f:5c:ce:60:fb:2b:a5:db:2d:c6:75:28:3d:
5a:31:ba:be:f0:ec:a0:90:e0:6f:b9:cc:66:ad:6c:
d3:a8:14:28:3f:f7:95:72:fb:b0:d5:ad:25:8d:b1:
be:99:8c:48:31:ad:3b:e6:88:37:e9:d7:59:4c:70:
7a:e4:69:30:ea:01:fe:2b:d1:11:eb:41:60:13:e4:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:62:29:24:B7:0E:35:EF:B8:E2:8C:E7:BD:74:C6:B3:DB:77:79
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/pz5iKSS3DjXvuOKM5710xrPbd3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4350::/48
Signature Algorithm: sha256WithRSAEncryption
17:d9:98:b3:15:98:30:4e:e1:c3:a7:c9:9b:56:74:dc:c9:a7:
6c:1c:93:87:76:6e:d2:22:11:78:cc:0a:65:eb:49:8f:f7:82:
29:2c:47:db:df:d7:11:b2:68:ba:fb:d2:98:7b:b8:c7:d2:7e:
6d:df:09:08:4e:77:f5:31:07:2a:79:c8:87:de:2e:de:18:d6:
8d:ef:f1:20:52:f9:4d:ce:1b:db:54:9a:e4:20:25:88:69:12:
6e:15:13:56:a7:ff:e3:57:a1:8e:e9:0f:0f:8e:e3:8d:d4:66:
c6:2d:25:65:df:c2:30:c8:ad:bf:48:68:d5:4b:3e:7a:86:a8:
b6:12:5e:76:bc:39:45:dd:f5:b8:9a:a9:e9:c2:b0:5e:b6:c9:
64:44:33:25:3b:c4:37:7a:ae:86:6a:26:df:54:38:c1:be:ac:
76:85:07:ac:65:dd:58:8c:e2:1c:05:8f:44:ef:27:d1:85:04:
b8:12:49:ed:e1:73:c4:50:2f:e5:ad:75:86:8d:91:3a:a2:b0:
b9:ba:4f:70:1d:08:f3:ed:ce:7e:60:7c:b7:90:d8:36:e4:af:
17:3a:ed:de:8e:4a:fb:3f:a3:8a:ac:c3:61:44:99:c3:ce:91:
66:ad:d6:d7:ab:50:8b:18:36:93:08:e1:42:1f:c5:aa:98:c6:
60:c8:f7:30
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZh7mW2HFjWB0Ugw3sY5QXhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUwODA1MTg1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzNlNjIyOTI0YjcwZTM1ZWZiOGUyOGNlN2JkNzRjNmIzZGI3Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5aYJWfp8uQk9M7aILLjqft3J9J1
0N3XCHjSATNlgTxDJlgQGV1a0g/GRAK09TnmdSSa47SakIaVNUHgSHamCq6tQdDf
ZxZVX8OqTx/CF1vIVGprxOqxeEdgfqCwVsJoolkulnOOS+92UyCxJCEA2WnuGZ7K
9v+jIAhQXI7oOmYSXzxsKQx9c4xuKk2rLepmgrNYh6lmwV1my3laIBlUL/J681F6
q01F4RuDzO2go2PPrnsWyz9czmD7K6XbLcZ1KD1aMbq+8OygkOBvucxmrWzTqBQo
P/eVcvuw1a0ljbG+mYxIMa075og36ddZTHB65Gkw6gH+K9ER60FgE+SwLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKc+Yikktw4177jijOe9dMaz23d5MB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvcHo1aUtTUzNEalh2dU9LTTU3MTB4clBiZDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgYTAUNQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAX2ZizFZgwTuHDp8mbVnTcyadsHJOHdm7SIhF4
zApl60mP94IpLEfb39cRsmi6+9KYe7jH0n5t3wkITnf1MQcqeciH3i7eGNaN7/Eg
UvlNzhvbVJrkICWIaRJuFRNWp//jV6GO6Q8PjuON1GbGLSVl38IwyK2/SGjVSz56
hqi2El52vDlF3fW4mqnpwrBetslkRDMlO8Q3eq6GaibfVDjBvqx2hQesZd1YjOIc
BY9E7yfRhQS4Eknt4XPEUC/lrXWGjZE6orC5uk9wHQjz7c5+YHy3kNg25K8XOu3e
jkr7P6OKrMNhRJnDzpFmrdbXq1CLGDaTCOFCH8WqmMZgyPcw
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:02 2025 by rpki-client