Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/FsvHHK3N340PdZxTOfknSUlyE_g.roa
File: FsvHHK3N340PdZxTOfknSUlyE_g.roa (raw, json)
Hash identifier: klYlyFGTA9+a9+gPyW/NlmMuXbJ8Eoai3ZAQsGVy0yo=
Subject key identifier: 16:CB:C7:1C:AD:CD:DF:8D:0F:75:9C:53:39:F9:27:49:49:72:13:F8
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019759F59B5FFA19ACAE9D2B4DE87BD474A6
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/FsvHHK3N340PdZxTOfknSUlyE_g.roa
Signing time: Tue 10 Jun 2025 13:09:17 +0000
ROA not before: Tue 10 Jun 2025 13:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 2a05:8e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:f5:9b:5f:fa:19:ac:ae:9d:2b:4d:e8:7b:d4:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Jun 10 13:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16cbc71cadcddf8d0f759c5339f92749497213f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:52:94:ae:b5:85:36:62:92:64:84:bc:fa:
98:16:a7:30:d6:12:8d:17:28:38:63:03:0d:07:e5:
e5:72:6e:39:93:60:56:0d:15:f7:9b:eb:b1:e0:53:
c0:7a:49:bc:db:45:dc:bd:05:64:3d:cb:90:71:89:
b7:5b:8e:67:13:a8:98:c5:c9:e5:2c:95:40:27:d9:
7b:e3:d2:60:62:ff:4d:9d:14:66:25:b0:10:da:7f:
f0:7b:6c:f4:34:55:01:ff:a0:3d:8f:45:7b:1b:18:
61:7d:5d:26:46:00:60:c7:05:26:7a:79:e4:ce:d1:
ac:b3:57:64:ac:a6:98:6d:d7:0e:c9:2b:16:d4:37:
ce:6f:be:5a:f0:f0:af:0a:d2:c6:6c:bd:15:fa:bb:
bf:4d:b6:6f:d4:ac:34:b4:85:7c:d0:4f:6c:52:7c:
f3:a4:db:95:da:c0:fd:9c:d5:37:7a:18:e9:c0:75:
24:29:17:fe:09:33:71:94:8a:45:a1:2c:f3:d6:29:
93:38:e1:ca:f5:a7:ae:f4:62:36:a0:9f:ba:55:99:
4f:09:0b:25:91:d1:8d:17:59:53:73:31:56:de:81:
c7:16:34:65:fc:a5:2c:23:90:0f:e5:ee:c2:fc:bc:
0e:3c:ef:50:0c:a9:e1:1d:75:ee:da:81:d1:41:18:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:C7:1C:AD:CD:DF:8D:0F:75:9C:53:39:F9:27:49:49:72:13:F8
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/FsvHHK3N340PdZxTOfknSUlyE_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
94:b7:44:50:cf:de:ee:f9:23:d5:81:e7:c5:c4:6a:b2:11:86:
e6:10:70:73:c8:45:be:03:94:51:72:0f:53:4e:2a:a5:60:30:
23:fd:d0:f5:53:5f:2a:02:57:40:ae:9e:d5:fe:03:82:6b:97:
da:40:23:f8:ec:2e:49:90:46:f3:55:f4:c7:5d:2e:9c:93:f8:
ee:49:e1:a9:84:34:d6:fb:c1:58:01:a3:7e:76:2e:7c:86:b6:
83:ea:a7:a0:a1:08:22:05:41:47:1a:07:75:63:43:b1:5e:d8:
07:d5:15:fc:e4:d4:9c:cb:cc:7e:99:49:86:06:df:d7:3a:37:
f3:02:c6:72:42:09:1f:ab:70:48:5f:61:1a:f3:96:d0:43:6f:
9f:fa:6f:14:11:c6:30:1c:3c:3b:b9:e1:c4:4e:9e:45:9a:ae:
9e:e4:7f:96:6d:7f:6a:e2:2b:cd:b1:b5:6e:62:85:65:fe:ae:
fb:55:74:84:91:a0:c0:9c:88:66:09:d7:c6:69:4c:0d:d7:08:
f8:e5:d3:d1:b1:4f:9c:c1:87:86:6c:1e:02:d9:8c:07:8b:a5:
21:d7:38:c2:27:e5:b9:78:e0:72:e9:ae:62:2f:bd:b7:3e:bc:
54:cf:c4:d8:e9:3d:c4:66:99:35:b8:1c:9c:26:2f:1d:2c:62:
41:26:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:52:32 2025 by rpki-client