Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dPBWOAjDPSyaJg3qVcoCknCh0DA.roa
File: dPBWOAjDPSyaJg3qVcoCknCh0DA.roa (raw, json)
Hash identifier: bWpRT5SrAk5OKKd7euetLqbd4gUehbWydPzsIIF1hds=
Subject key identifier: 74:F0:56:38:08:C3:3D:2C:9A:26:0D:EA:55:CA:02:92:70:A1:D0:30
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019711251F255FBF6437CA74FB9AA1AE1955
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dPBWOAjDPSyaJg3qVcoCknCh0DA.roa
Signing time: Tue 27 May 2025 09:48:54 +0000
ROA not before: Tue 27 May 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204868
IP address blocks: 2a05:9a40::/32 maxlen: 32
2a13:c440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:25:1f:25:5f:bf:64:37:ca:74:fb:9a:a1:ae:19:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 27 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f0563808c33d2c9a260dea55ca029270a1d030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:2d:fb:35:ba:ea:74:2a:c7:fb:88:81:3a:
26:b1:05:d2:a2:20:71:d7:6f:3f:3d:0f:fd:ed:8e:
5f:63:5c:02:42:95:14:30:20:df:05:f1:6e:9f:ef:
52:a8:73:52:46:26:9d:f8:e6:a9:d0:d6:d7:4a:ee:
72:1c:de:ad:00:68:a9:51:a5:1f:1f:8d:61:de:95:
1d:8b:95:bd:f6:d9:3c:9d:f8:d6:26:79:f1:2d:e0:
9c:68:f3:8c:87:a8:ed:f2:2f:8b:6f:c4:06:b8:39:
a1:16:3a:32:8b:0c:17:75:1b:40:eb:0f:3c:df:50:
e9:ce:4a:49:b5:29:04:21:12:cf:7c:b6:e1:d6:ca:
4e:2d:38:b0:26:36:b3:b8:14:dc:97:66:7b:90:65:
8b:29:9a:1b:38:e9:a4:5e:c1:5b:a3:b2:df:5c:7e:
78:a3:02:7b:4c:3a:f8:5e:7c:8b:f4:b9:13:69:a1:
62:33:4d:e1:a3:14:51:33:63:ad:de:94:a7:ac:e6:
3b:f7:6f:f2:b8:c4:19:37:75:27:d0:75:0e:05:5f:
7b:a6:47:44:cc:08:36:8e:97:93:0d:fc:86:c1:35:
0f:e7:cc:fe:3a:d3:2f:77:cd:6b:9e:31:d5:8a:c8:
b2:80:da:b8:ee:e5:3b:85:3d:ab:ac:92:57:03:3d:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:56:38:08:C3:3D:2C:9A:26:0D:EA:55:CA:02:92:70:A1:D0:30
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dPBWOAjDPSyaJg3qVcoCknCh0DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/32
2a13:c440::/32
Signature Algorithm: sha256WithRSAEncryption
33:b1:98:0e:0e:6e:3e:85:66:a8:dc:89:0b:ce:73:e3:05:9f:
ec:14:fd:6e:b6:85:94:08:b8:31:b3:e9:53:6c:a5:bb:c8:5d:
7c:05:dd:11:d1:e2:48:11:1f:17:35:22:be:e1:fe:1b:18:cd:
72:d3:77:7f:28:16:09:4f:fe:a9:b9:2e:5f:e0:28:af:ee:31:
17:e3:ec:a7:4e:37:55:de:55:26:09:6d:dc:ff:14:4d:c0:5a:
61:ef:b5:d4:98:2d:e3:cc:ae:92:30:86:5a:e2:df:75:5a:68:
a0:50:f5:dd:8c:75:ec:82:6a:30:c5:1f:c5:79:aa:3f:9e:4e:
6c:7f:d3:6e:46:5e:fa:5d:a0:26:55:b0:07:cf:18:8a:d6:6a:
e9:66:7e:c7:cb:3e:07:18:33:e1:18:d8:ff:b5:cc:9c:ab:e0:
5b:bf:0a:f6:4e:c8:e6:e9:72:8f:47:78:04:d7:2b:49:96:9e:
30:ac:72:25:b7:f9:84:a4:6d:a5:ff:31:35:83:56:33:4f:22:
c0:1b:57:2f:16:a4:59:5b:e4:e9:0e:ae:6e:4e:6e:a9:d1:d2:
cc:9b:16:5c:c4:3a:77:92:9f:90:1e:3e:74:bb:56:97:e7:74:
7e:87:95:af:13:19:f0:7b:a9:14:a6:1e:d9:1a:4f:00:fa:61:
e3:a3:73:bd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZcRJR8lX79kN8p0+5qhrhlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwNTI3MDk0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGYwNTYzODA4YzMzZDJjOWEyNjBkZWE1NWNhMDI5MjcwYTFkMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLwt+zW66nQqx/uIgTomsQXSoiBx
128/PQ/97Y5fY1wCQpUUMCDfBfFun+9SqHNSRiad+Oap0NbXSu5yHN6tAGipUaUf
H41h3pUdi5W99tk8nfjWJnnxLeCcaPOMh6jt8i+Lb8QGuDmhFjoyiwwXdRtA6w88
31DpzkpJtSkEIRLPfLbh1spOLTiwJjazuBTcl2Z7kGWLKZobOOmkXsFbo7LfXH54
owJ7TDr4XnyL9LkTaaFiM03hoxRRM2Ot3pSnrOY792/yuMQZN3Un0HUOBV97pkdE
zAg2jpeTDfyGwTUP58z+OtMvd81rnjHVisiygNq47uU7hT2rrJJXAz1lSwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHTwVjgIwz0smiYN6lXKApJwodAwMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZFBCV09BakRQU3lhSmczcVZjb0NrbkNoMERBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgWaQAMF
ACoTxEAwDQYJKoZIhvcNAQELBQADggEBADOxmA4Obj6FZqjciQvOc+MFn+wU/W62
hZQIuDGz6VNspbvIXXwF3RHR4kgRHxc1Ir7h/hsYzXLTd38oFglP/qm5Ll/gKK/u
MRfj7KdON1XeVSYJbdz/FE3AWmHvtdSYLePMrpIwhlri33VaaKBQ9d2MdeyCajDF
H8V5qj+eTmx/025GXvpdoCZVsAfPGIrWaulmfsfLPgcYM+EY2P+1zJyr4Fu/CvZO
yObpco9HeATXK0mWnjCsciW3+YSkbaX/MTWDVjNPIsAbVy8WpFlb5OkOrm5ObqnR
0sybFlzEOneSn5AePnS7VpfndH6Hla8TGfB7qRSmHtkaTwD6YeOjc70=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:02:01 2025 by rpki-client