
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/dpMRXq6ywyTgHrIH5zbYgzRL198.roa
File: dpMRXq6ywyTgHrIH5zbYgzRL198.roa (raw, json)
Hash identifier: aTBcNVIvwowBJeKwi3Yf02sPJ620zjhuLByuimPY8vQ=
Subject key identifier: 76:93:11:5E:AE:B2:C3:24:E0:1E:B2:07:E7:36:D8:83:34:4B:D7:DF
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 01985078B80C817261C7C40531277F491A93
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/dpMRXq6ywyTgHrIH5zbYgzRL198.roa
Signing time: Mon 28 Jul 2025 09:59:05 +0000
ROA not before: Mon 28 Jul 2025 09:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42372
IP address blocks: 2a01:d0:7fff::/48 maxlen: 48
2a01:d0:8000::/33 maxlen: 33
2a01:d0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:78:b8:0c:81:72:61:c7:c4:05:31:27:7f:49:1a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Jul 28 09:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7693115eaeb2c324e01eb207e736d883344bd7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:a2:78:ed:06:a1:de:7a:7a:3a:cc:93:2f:
b6:04:f4:6b:c4:48:7f:a7:1d:df:0e:55:c5:86:10:
5a:14:21:30:c2:a7:cb:f5:c0:67:ab:83:cf:1e:5a:
6a:be:b1:24:9f:1e:a7:e6:43:85:98:ad:31:b1:11:
6e:94:34:ea:6e:cc:24:47:2e:62:df:f7:72:fe:11:
af:de:9f:0a:32:97:1c:59:77:13:26:65:a7:db:3f:
f7:64:4c:a4:6c:22:c9:18:84:f6:86:76:96:2a:ae:
45:19:a6:62:8f:82:7a:05:f4:49:ef:d4:92:36:48:
7f:10:3d:69:4f:ae:30:c5:b7:a0:99:d3:cb:8a:e0:
04:ea:3e:d7:ac:06:0c:68:a4:48:ca:7a:89:5b:b5:
59:d6:44:ce:08:f8:43:44:c8:a5:69:17:f8:1d:a5:
5f:97:bd:8b:cc:a7:da:ec:6d:34:f3:bf:64:15:7c:
dc:3f:fb:35:99:a1:9c:f4:f5:43:17:1d:22:3f:4f:
c1:dc:96:8e:f7:48:f6:10:55:8c:53:92:32:58:92:
8d:5f:05:ef:15:0e:b1:58:dd:ad:bd:c1:60:82:fb:
53:11:9c:88:a4:e5:c1:c2:3a:46:7b:0e:63:d2:c8:
81:6f:be:74:ab:b6:af:32:38:5e:e3:49:39:74:d6:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:11:5E:AE:B2:C3:24:E0:1E:B2:07:E7:36:D8:83:34:4B:D7:DF
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/dpMRXq6ywyTgHrIH5zbYgzRL198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:d0:7fff::-2a01:d0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:58:d9:25:6e:99:9d:37:11:64:b1:28:f7:09:6a:98:a3:95:
b3:f4:0b:f3:2a:68:6f:ec:0b:20:6c:45:df:3a:f6:e8:f5:8b:
5a:c1:49:dc:aa:fd:0c:4f:7c:1e:a6:da:cf:e1:f6:c2:56:43:
0b:af:bf:b8:ec:f8:9f:1e:a3:b7:5f:99:93:5b:3a:de:21:58:
23:1c:09:2d:83:51:8b:2f:2e:11:f0:72:8f:ac:f7:5d:15:7e:
8c:12:1b:c0:fe:21:89:55:80:b1:76:70:e2:75:0e:4b:82:b3:
08:c7:35:1a:97:7f:6d:b7:6b:c2:b4:67:43:c4:55:c8:b4:3b:
5a:c3:6b:37:d3:ff:84:25:0c:4c:50:71:78:0d:c3:7a:18:56:
e2:68:a8:9a:79:42:82:5a:6e:c1:27:b8:34:94:60:08:c5:fc:
45:7e:d9:78:f7:d3:d8:36:41:06:5d:1e:09:61:79:dd:90:09:
4a:8c:b7:ee:c8:50:03:c4:74:d3:14:6b:fc:89:e4:23:c8:f1:
03:9c:b1:f2:39:80:d5:ca:56:cf:4c:ce:96:12:f9:8c:fd:16:
1a:c7:0c:a6:21:a3:fe:0f:f4:9a:8e:a8:8e:3e:d6:34:8e:50:
c3:a0:50:1b:7f:97:92:7a:90:d2:1b:8c:da:3b:c5:c2:1d:e4:
5b:51:96:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhQeLgMgXJhx8QFMSd/SRqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0
ZGIwMzQwHhcNMjUwNzI4MDk1OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjkzMTE1ZWFlYjJjMzI0ZTAxZWIyMDdlNzM2ZDg4MzM0NGJkN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+ieO0God56ejrMky+2BPRrxEh/
px3fDlXFhhBaFCEwwqfL9cBnq4PPHlpqvrEknx6n5kOFmK0xsRFulDTqbswkRy5i
3/dy/hGv3p8KMpccWXcTJmWn2z/3ZEykbCLJGIT2hnaWKq5FGaZij4J6BfRJ79SS
Nkh/ED1pT64wxbegmdPLiuAE6j7XrAYMaKRIynqJW7VZ1kTOCPhDRMilaRf4HaVf
l72LzKfa7G00879kFXzcP/s1maGc9PVDFx0iP0/B3JaO90j2EFWMU5IyWJKNXwXv
FQ6xWN2tvcFggvtTEZyIpOXBwjpGew5j0siBb750q7avMjhe40k5dNabOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHaTEV6ussMk4B6yB+c22IM0S9ffMB8GA1UdIwQY
MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt
NDJiYmYxYTZhNjViLzEvZHBNUlhxNnl3eVRnSHJJSDV6YllnelJMMTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi
LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBwAqAQDQ
f/8DBQAqAQDQMA0GCSqGSIb3DQEBCwUAA4IBAQBcWNklbpmdNxFksSj3CWqYo5Wz
9AvzKmhv7AsgbEXfOvbo9YtawUncqv0MT3weptrP4fbCVkMLr7+47PifHqO3X5mT
WzreIVgjHAktg1GLLy4R8HKPrPddFX6MEhvA/iGJVYCxdnDidQ5LgrMIxzUal39t
t2vCtGdDxFXItDtaw2s30/+EJQxMUHF4DcN6GFbiaKiaeUKCWm7BJ7g0lGAIxfxF
ftl499PYNkEGXR4JYXndkAlKjLfuyFADxHTTFGv8ieQjyPEDnLHyOYDVylbPTM6W
EvmM/RYaxwymIaP+D/SajqiOPtY0jlDDoFAbf5eSepDSG4zaO8XCHeRbUZYz
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:16 2025 by rpki-client