Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa
File: xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa (raw, json)
Hash identifier: W3AHQ2GuMJRuqPrOv5nSrVbrayQVkMMCq5xQ40+kvG8=
Subject key identifier: C5:89:C5:CF:3B:03:EE:21:8B:64:51:B7:9B:B1:C5:08:13:2D:A7:61
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 01975E554C1ED9F2C6981E9A14445A254840
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa
Signing time: Wed 11 Jun 2025 09:32:17 +0000
ROA not before: Wed 11 Jun 2025 09:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8987
IP address blocks: 2a03:5d67::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:55:4c:1e:d9:f2:c6:98:1e:9a:14:44:5a:25:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jun 11 09:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c589c5cf3b03ee218b6451b79bb1c508132da761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:df:fa:db:c2:8c:4b:bd:40:26:93:c4:15:
3e:75:41:45:bd:9d:c3:b3:96:95:4f:1a:6c:24:10:
74:03:75:af:5b:9c:5c:5b:b0:80:cf:c2:c5:c5:c5:
44:cc:0e:27:0d:3c:40:70:9a:b4:bf:62:4e:91:d6:
ec:43:ae:d2:d1:73:dc:ea:78:a7:26:7c:d4:67:5c:
94:99:d2:48:29:0c:95:0a:84:3f:b7:df:9a:5a:47:
8c:a3:9c:1a:0f:7c:0d:25:1c:16:09:91:ff:3d:04:
1b:91:33:af:e8:0c:a4:6b:f8:83:f3:25:47:71:34:
08:fd:35:8b:bb:7f:fc:a4:77:2f:ea:54:51:5d:cf:
93:22:65:bb:cc:28:8e:0b:83:a6:6c:59:87:a5:05:
45:5c:dc:6c:4b:84:82:b1:7f:c1:31:87:6d:56:74:
5f:3d:b1:e9:a3:85:0a:ed:67:0b:6d:3d:83:4f:26:
44:f5:8d:4c:0d:15:75:a7:8d:1e:9c:23:51:60:f4:
bb:45:58:32:55:24:84:35:fc:58:5f:65:80:45:03:
7c:b9:cb:f3:56:f7:53:fa:51:d2:ab:0f:c2:0a:1e:
52:00:d8:73:17:f5:e1:fc:fd:9e:22:ed:45:4d:81:
d8:58:55:6d:5d:f7:e8:21:71:8c:51:ac:e5:0b:b4:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:C5:CF:3B:03:EE:21:8B:64:51:B7:9B:B1:C5:08:13:2D:A7:61
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5d67::/32
Signature Algorithm: sha256WithRSAEncryption
b6:6e:e4:66:69:07:07:25:f6:72:8e:d6:ed:e6:26:3e:56:d5:
d7:81:60:96:c0:85:e1:cf:93:0f:29:96:4f:c2:37:a3:71:c0:
e5:ef:97:ef:63:50:2f:28:b9:eb:b0:96:8a:9a:91:33:58:c9:
14:2d:7e:36:90:09:82:95:1b:94:bf:3b:d5:8f:67:da:d0:6e:
0d:23:97:92:da:96:af:50:26:e4:c7:95:e6:34:fb:4c:5c:0a:
fd:ad:0e:8b:62:99:57:34:c5:dc:7d:bd:6e:c3:4b:5b:5d:88:
7f:d3:23:5c:59:0c:de:dd:cf:e6:3c:ee:44:12:a1:ce:17:71:
f1:a5:ca:ba:c6:2f:31:1a:07:b6:7a:a0:25:0c:75:b4:70:37:
65:2f:55:14:df:db:f6:4c:8d:ca:7c:78:de:a1:77:74:a4:20:
70:e7:52:12:dd:a4:ba:36:bd:5b:e2:75:59:4d:11:35:d6:f4:
c5:33:9d:9f:ec:09:2e:2a:55:d8:be:a8:c4:a9:3a:2a:cf:c5:
2b:38:74:20:fd:60:77:a6:de:da:cf:1f:b6:b0:50:3a:da:30:
21:98:f7:8d:2e:74:64:8a:8c:f8:93:72:90:8a:28:7f:45:3c:
fc:2a:3c:c1:84:ff:53:06:87:fd:d5:69:c2:17:c0:13:65:fb:
e0:32:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:13:23 2025 by rpki-client