Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VV3pVQmA3jL8s0bmbKamtZwlCt0.roa
File: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (raw, json)
Hash identifier: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=
Subject key identifier: 55:5D:E9:55:09:80:DE:32:FC:B3:46:E6:6C:A6:A6:B5:9C:25:0A:DD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01985A83E18FF329447B0ADC244CD9C31E3F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VV3pVQmA3jL8s0bmbKamtZwlCt0.roa
Signing time: Wed 30 Jul 2025 08:47:29 +0000
ROA not before: Wed 30 Jul 2025 08:47:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207807
IP address blocks: 2a00:7180:800c::/46 maxlen: 46
2a04:800:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:83:e1:8f:f3:29:44:7b:0a:dc:24:4c:d9:c3:1e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 30 08:47:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555de9550980de32fcb346e66ca6a6b59c250add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:f8:a4:fd:ca:0d:64:b2:37:7d:fb:6e:13:
85:00:3f:52:44:ad:f8:14:39:5d:31:f6:2b:8e:21:
67:68:97:2e:78:37:e5:11:16:49:e8:a0:49:31:9f:
83:30:28:8c:7d:23:83:ee:64:ba:59:c8:07:9e:26:
d9:3a:6b:70:72:e8:ea:ef:7c:46:29:f7:89:a5:e8:
bd:58:ca:f1:33:7d:40:ff:fe:71:34:ce:ee:80:a8:
98:94:1a:ac:1c:58:9a:1f:e6:19:5b:97:91:a7:28:
6f:30:97:9c:4e:d6:18:8d:7f:06:46:ed:9a:f7:ff:
20:02:91:64:53:07:2a:4e:b0:6d:62:32:26:e0:d2:
22:3c:cd:1d:58:91:63:ef:79:0b:2f:2f:bc:a7:6f:
35:ce:88:af:3a:c8:ef:0e:81:c3:8a:00:da:c0:cd:
bf:e6:b8:ee:db:8c:1b:11:f8:80:f9:00:19:42:49:
dc:5e:6c:43:2f:cc:6c:29:93:21:1d:6c:a4:b0:47:
be:44:80:ca:d0:a3:df:ab:a0:8d:5b:2e:b4:47:ea:
cd:0a:fd:6b:a3:8f:3f:c2:68:9b:47:a8:be:a6:bc:
41:6a:54:48:7a:c8:00:fb:94:a8:28:39:18:8c:74:
ab:f5:0d:d0:98:24:44:fd:ef:07:95:e6:bd:93:8c:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:E9:55:09:80:DE:32:FC:B3:46:E6:6C:A6:A6:B5:9C:25:0A:DD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VV3pVQmA3jL8s0bmbKamtZwlCt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:800c::/46
2a04:800:8000::/36
Signature Algorithm: sha256WithRSAEncryption
05:01:e3:15:0e:06:c5:97:37:35:70:12:27:45:36:ba:75:ee:
68:36:c8:eb:d3:4f:53:1c:0e:2d:1e:f3:e7:6f:04:89:15:04:
07:8e:f3:ca:91:a6:fa:66:c0:32:a6:0d:4f:79:bf:9f:60:64:
cc:39:0a:da:70:31:74:cb:af:b3:fb:5f:4e:19:02:b8:22:6a:
eb:2a:cd:c7:1b:6d:58:92:47:07:38:23:d2:93:a3:6f:d4:61:
1b:b1:7b:92:85:ea:27:d8:3b:07:aa:74:b4:b7:b8:9c:a3:9c:
6a:0a:46:f3:ca:bb:b3:39:ee:54:57:62:78:4f:b5:ae:a0:d8:
da:fc:2f:36:44:cc:6a:04:fb:52:9a:c6:aa:50:ec:67:60:bb:
28:09:ab:9b:89:ba:3a:d0:70:78:f2:f7:f5:5b:29:79:e3:33:
8b:2a:d8:c3:61:6b:47:be:9c:60:99:8f:f3:9c:5f:1a:fd:6f:
14:0c:df:b9:ad:de:17:21:9b:08:ab:7b:25:8f:48:ad:3b:41:
9c:47:77:37:de:92:4f:a5:86:60:da:5c:5e:df:41:69:8a:99:
c1:f0:66:dc:c9:44:44:a2:c4:b6:14:67:6a:2e:0c:3b:fd:fd:
a9:67:85:49:f2:19:e3:0c:70:91:77:1a:cd:4b:21:6b:7b:f9:
6b:d8:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:11 2025 by rpki-client