Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/TEE7UWTU78bi6kM2ljfzySZ38Fs.roa
File: TEE7UWTU78bi6kM2ljfzySZ38Fs.roa (raw, json)
Hash identifier: DHKL0RNq36qbVbpfFyw21pdixDUZOv3Gqo2nBfFHI84=
Subject key identifier: 4C:41:3B:51:64:D4:EF:C6:E2:EA:43:36:96:37:F3:C9:26:77:F0:5B
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 01984FE8B3194FEE23F354293E1943902AC6
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/TEE7UWTU78bi6kM2ljfzySZ38Fs.roa
Signing time: Mon 28 Jul 2025 07:21:47 +0000
ROA not before: Mon 28 Jul 2025 07:21:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44794
IP address blocks: 2a0d:4d00::/48 maxlen: 48
2a0d:4d00:1::/48 maxlen: 48
2a0d:4d00:2::/48 maxlen: 48
2a0d:4d00:3::/48 maxlen: 48
2a0d:4d00:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:e8:b3:19:4f:ee:23:f3:54:29:3e:19:43:90:2a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jul 28 07:21:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c413b5164d4efc6e2ea43369637f3c92677f05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:86:1a:83:97:88:cb:55:06:cc:24:dc:30:
b9:8f:ca:32:8e:46:84:9b:5b:57:38:d4:16:43:de:
30:fa:d5:9a:cb:4d:59:e3:ff:8e:24:50:6e:2c:ac:
4b:e4:c9:90:7a:56:9e:98:a7:c0:06:aa:54:6f:d5:
7c:54:29:c3:aa:38:d4:30:d0:96:0c:be:08:9b:dc:
1d:38:68:c2:3e:0d:33:7a:3b:b9:9e:6c:72:58:3f:
2e:59:93:94:23:7e:50:80:a9:34:0e:36:92:a8:84:
36:8c:2d:7a:c1:1c:33:d1:0c:57:1d:85:14:c1:62:
e4:5e:fb:38:20:e0:b1:ea:d4:33:5f:a7:a9:ad:f3:
8c:9d:7b:35:74:38:43:93:3c:f7:81:a3:c9:bc:ac:
bf:2d:31:37:a8:ef:f4:78:84:09:9c:4f:c4:cc:5f:
92:aa:6f:05:97:fd:1c:95:d7:3b:86:c6:48:b6:12:
52:01:b5:51:86:5a:93:18:f9:f5:22:53:62:9c:2c:
95:b4:eb:09:10:a1:66:43:89:8f:67:61:96:d7:e0:
40:c6:1b:8c:33:52:4e:2f:0d:4e:f2:b1:bd:38:61:
26:2a:6b:30:42:3f:23:24:22:a9:17:aa:2a:60:f3:
bc:7f:1b:92:b9:dd:01:52:f9:c6:54:7a:38:fc:9b:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:3B:51:64:D4:EF:C6:E2:EA:43:36:96:37:F3:C9:26:77:F0:5B
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/TEE7UWTU78bi6kM2ljfzySZ38Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:4d00::/46
2a0d:4d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
62:6f:97:d7:68:5b:16:95:6a:e0:9a:bf:8c:56:7f:cd:89:d6:
70:d3:bd:2b:16:32:1c:c0:b6:eb:8b:f6:f1:1c:04:ad:61:1e:
db:8e:22:ed:aa:ad:d0:c0:7d:a5:f9:fc:69:8e:db:6f:0f:d2:
a1:67:50:7c:98:f1:ef:20:0d:6c:8d:2c:1b:74:05:a5:5d:3a:
fd:3c:43:99:3a:e1:4b:25:a6:87:e2:b1:bc:c4:e5:05:72:bf:
b4:69:94:7b:cd:2f:23:30:da:86:47:ea:22:0b:7b:0c:dd:50:
bc:21:61:c9:ff:81:d0:c5:b9:99:76:b2:1d:fd:af:76:cc:e6:
de:cf:b4:0e:5b:03:f7:e3:58:4d:06:18:17:62:90:1e:61:94:
a8:b0:aa:07:4a:3b:80:1c:2e:7d:06:9e:2f:34:13:78:59:dc:
92:d8:d1:b5:be:bb:52:7d:d2:62:89:ff:82:b3:59:57:11:7c:
ea:e8:5f:00:25:64:ca:e9:7a:76:a2:fb:6e:50:ce:e4:f8:b0:
23:67:f9:81:3a:d5:7b:45:73:05:7f:63:ee:64:37:68:07:fc:
fa:6f:e9:b8:be:89:4f:e2:03:b8:6e:04:6d:3c:b6:7b:bd:86:
3c:19:19:33:a5:8d:14:d9:ba:8e:b9:2a:c1:1b:05:d2:af:64:
c2:21:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:58 2025 by rpki-client