Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4T59GZ4yCo2tbH5JHBbBokUiMho.roa
File: 4T59GZ4yCo2tbH5JHBbBokUiMho.roa (raw, json)
Hash identifier: jbBM55OkOszr4Sa06KmwyAvBu/1xO/WNxDJX+BLmfU4=
Subject key identifier: E1:3E:7D:19:9E:32:0A:8D:AD:6C:7E:49:1C:16:C1:A2:45:22:32:1A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01982E0C29504D069655D725E661AF8BDB86
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4T59GZ4yCo2tbH5JHBbBokUiMho.roa
Signing time: Mon 21 Jul 2025 17:33:25 +0000
ROA not before: Mon 21 Jul 2025 17:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49111
IP address blocks: 2a0e:9c0::/29 maxlen: 29
2a0e:91c0::/29 maxlen: 29
2a0e:98c0::/29 maxlen: 29
2a11:6700::/29 maxlen: 29
2a11:8c80::/29 maxlen: 29
2a11:8cc0::/29 maxlen: 29
2a12:1ec0::/29 maxlen: 29
2a12:1f40::/29 maxlen: 29
2a12:3240::/29 maxlen: 29
2a12:4680::/29 maxlen: 29
2a12:4980::/29 maxlen: 29
2a12:6980::/29 maxlen: 29
2a12:7d00::/29 maxlen: 29
2a12:9180::/29 maxlen: 29
2a12:be00::/29 maxlen: 29
2a12:da00::/29 maxlen: 29
2a12:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:0c:29:50:4d:06:96:55:d7:25:e6:61:af:8b:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 21 17:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e13e7d199e320a8dad6c7e491c16c1a24522321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:b7:12:cc:9b:95:4c:3c:18:a8:21:b1:95:
87:f5:f0:a2:8b:4b:90:e5:c0:29:25:af:ab:de:67:
be:26:be:4e:76:7c:3c:78:4e:95:1f:dc:db:fd:f3:
93:94:be:28:0a:d0:41:5b:98:75:0a:76:77:e8:73:
3e:99:24:27:57:f9:76:31:10:26:f2:20:c0:47:b0:
d8:16:67:db:ce:5a:4f:02:f8:67:5b:9b:ac:a6:1b:
99:f7:66:08:fe:79:5d:06:bc:ef:36:60:9f:62:0b:
e9:90:b0:d0:53:07:7c:60:e0:76:bf:94:ab:17:28:
8c:1b:cd:03:be:b9:08:64:80:e1:38:cb:c2:8e:26:
75:91:bd:de:df:97:62:45:d0:ba:5d:d0:94:56:60:
5b:51:ca:bb:9f:df:1b:31:c0:f4:c9:1c:2b:1b:61:
20:f1:2f:36:73:4e:42:f9:ce:50:7e:7f:a3:0c:f0:
97:8b:3f:db:7f:84:af:1c:ce:36:2a:bd:67:12:2f:
f3:41:78:20:7a:36:0e:89:9b:37:d3:e4:98:e5:9a:
c9:dd:fe:57:6d:0a:0c:44:43:a2:53:f9:b5:8c:9f:
62:88:c5:e7:db:d2:b7:2a:80:d2:b9:fa:ac:bd:99:
fc:5b:86:35:76:34:e6:55:e2:d6:45:ec:60:9d:36:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:7D:19:9E:32:0A:8D:AD:6C:7E:49:1C:16:C1:A2:45:22:32:1A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4T59GZ4yCo2tbH5JHBbBokUiMho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9c0::/29
2a0e:91c0::/29
2a0e:98c0::/29
2a11:6700::/29
2a11:8c80::/29
2a11:8cc0::/29
2a12:1ec0::/29
2a12:1f40::/29
2a12:3240::/29
2a12:4680::/29
2a12:4980::/29
2a12:6980::/29
2a12:7d00::/29
2a12:9180::/29
2a12:be00::/29
2a12:da00::/29
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
97:a8:b7:42:66:04:46:3e:7d:87:1e:97:19:b4:f1:09:da:2f:
7a:fd:2e:7a:73:28:8c:49:07:12:26:e1:2e:e0:b4:7c:b4:9a:
63:f6:b7:d6:78:5e:bb:2e:e2:ed:be:58:98:02:b7:ad:11:bc:
0c:20:e2:46:f6:78:0c:b9:51:c9:49:68:69:be:40:a4:11:f0:
9b:0b:3a:10:9d:78:69:6b:88:c2:ee:de:88:0e:73:5d:15:03:
02:37:73:88:37:79:fb:ec:cc:66:63:0d:20:bc:9f:5d:51:4a:
7f:2a:aa:c5:bc:9e:9a:01:48:d7:7f:9c:fa:94:5a:da:3e:77:
b9:b9:9e:94:7f:99:25:2f:88:c2:ac:05:45:42:41:61:13:2b:
70:88:3d:f6:8d:ab:75:59:f4:a6:6a:a6:ee:e2:4d:25:4f:9d:
52:59:ca:74:fe:ca:a7:bf:b1:ac:b9:c9:f8:03:49:72:a6:d3:
c7:cb:78:51:0a:bd:e3:95:1f:a6:1e:35:8d:f3:a1:52:d3:d1:
33:c3:4b:2f:c4:36:e2:81:62:99:1a:dc:88:a0:b9:48:3a:e1:
6d:cb:d8:99:5c:10:f7:78:a6:b0:20:2b:9c:e5:5e:30:4c:64:
1e:5f:5f:f8:11:08:86:24:f6:cf:dc:24:51:80:24:5c:16:89:
89:1f:2f:6e
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZguDClQTQaWVdcl5mGvi9uGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwNzIxMTczMzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTNlN2QxOTllMzIwYThkYWQ2YzdlNDkxYzE2YzFhMjQ1MjIzMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOK3EsyblUw8GKghsZWH9fCii0uQ
5cApJa+r3me+Jr5Odnw8eE6VH9zb/fOTlL4oCtBBW5h1CnZ36HM+mSQnV/l2MRAm
8iDAR7DYFmfbzlpPAvhnW5usphuZ92YI/nldBrzvNmCfYgvpkLDQUwd8YOB2v5Sr
FyiMG80DvrkIZIDhOMvCjiZ1kb3e35diRdC6XdCUVmBbUcq7n98bMcD0yRwrG2Eg
8S82c05C+c5Qfn+jDPCXiz/bf4SvHM42Kr1nEi/zQXggejYOiZs30+SY5ZrJ3f5X
bQoMREOiU/m1jJ9iiMXn29K3KoDSufqsvZn8W4Y1djTmVeLWRexgnTaaPwIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFOE+fRmeMgqNrWx+SRwWwaJFIjIaMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvNFQ1OUdaNHlDbzJ0Ykg1SkhCYkJva1VpTWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MH0EAgACMHcDBQMqDgnA
AwUDKg6RwAMFAyoOmMADBQMqEWcAAwUDKhGMgAMFAyoRjMADBQMqEh7AAwUDKhIf
QAMFAyoSMkADBQMqEkaAAwUDKhJJgAMFAyoSaYADBQMqEn0AAwUDKhKRgAMFAyoS
vgADBQMqEtoAAwUDKhLpADANBgkqhkiG9w0BAQsFAAOCAQEAl6i3QmYERj59hx6X
GbTxCdovev0uenMojEkHEibhLuC0fLSaY/a31nheuy7i7b5YmAK3rRG8DCDiRvZ4
DLlRyUloab5ApBHwmws6EJ14aWuIwu7eiA5zXRUDAjdziDd5++zMZmMNILyfXVFK
fyqqxbyemgFI13+c+pRa2j53ubmelH+ZJS+IwqwFRUJBYRMrcIg99o2rdVn0pmqm
7uJNJU+dUlnKdP7Kp7+xrLnJ+ANJcqbTx8t4UQq945Ufph41jfOhUtPRM8NLL8Q2
4oFimRrciKC5SDrhbcvYmVwQ93imsCArnOVeMExkHl9f+BEIhiT2z9wkUYAkXBaJ
iR8vbg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:52:11 2025 by rpki-client