Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa
File: ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa (raw, json)
Hash identifier: R5pOTkBAAT7TRu9QQOKBqiaak7g3rRzRJ3OAgIJQHig=
Subject key identifier: 0A:56:82:77:67:B5:25:D6:4E:84:94:51:1B:45:76:83:3A:1F:A1:44
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01987A81325A38CDBA96A5E86B911BB2C616
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa
Signing time: Tue 05 Aug 2025 13:52:24 +0000
ROA not before: Tue 05 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 2a02:c6c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:81:32:5a:38:cd:ba:96:a5:e8:6b:91:1b:b2:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 5 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a56827767b525d64e8494511b4576833a1fa144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:21:90:d4:da:b8:13:4f:6d:7e:40:aa:35:
26:5b:b7:8b:0e:fe:fd:80:2b:91:31:13:0c:ee:3d:
91:b6:8a:d9:10:10:e7:57:b8:46:96:e0:c3:35:17:
22:ed:07:d9:af:68:28:30:74:0d:47:db:fc:1b:cb:
b3:5c:6a:9c:05:87:17:15:16:a8:07:5d:af:1c:7f:
44:8b:b5:b3:79:67:9c:0c:af:35:d0:c3:37:f1:c2:
f3:5f:2d:82:4d:1e:d0:cc:6a:f6:a4:74:67:4d:30:
e0:60:41:b1:bc:a0:be:99:a2:27:15:f4:e5:f7:22:
7e:f6:0c:c5:2c:e9:0c:b5:fe:d1:8d:6d:86:89:e3:
20:61:a3:a5:c7:27:ca:ca:53:a0:3f:27:ba:06:eb:
0e:af:58:bb:85:42:6b:f0:1d:e6:d5:1c:7c:96:77:
3e:46:ef:93:ef:43:62:94:2f:f1:bb:7e:2a:cc:ec:
cc:b3:e0:e4:15:fc:a1:78:ff:22:c0:6a:c1:c3:ee:
58:1f:27:e7:c3:9d:5a:c0:29:4a:64:83:1e:79:e1:
78:6f:60:ba:21:56:f7:3a:56:a3:29:39:5e:32:70:
19:8a:83:03:9b:5d:0a:ed:37:ac:57:df:99:82:02:
4a:55:2f:ac:81:35:25:d7:71:f0:63:0f:d0:45:88:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:82:77:67:B5:25:D6:4E:84:94:51:1B:45:76:83:3A:1F:A1:44
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/ClaCd2e1JdZOhJRRG0V2gzofoUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f9:9d:4a:02:16:a9:f8:dc:82:66:1a:e0:23:ea:77:65:04:
e6:e5:31:9a:52:89:d2:1d:ef:f1:dd:c6:08:85:f2:d7:b0:1d:
f2:41:ca:26:98:07:79:1b:8c:03:5e:e9:7c:25:75:08:9f:5b:
b3:2f:a6:18:72:12:d7:20:18:cd:d8:1a:0a:66:08:b5:7e:85:
67:16:2f:cb:8d:85:23:4c:63:c4:51:0b:4a:cf:9c:dd:b5:fa:
b7:cf:f6:ad:97:65:1b:04:09:95:a2:ba:d4:19:ec:c4:91:64:
d7:bd:36:54:80:11:df:fc:12:7f:bb:ac:0e:d3:20:3c:bd:d9:
b6:a5:0e:4d:f4:04:85:49:ee:a7:1c:d7:d0:48:56:f4:1a:aa:
08:0a:e8:ad:55:a4:e7:47:a0:51:e5:a9:84:04:e0:5e:3d:e0:
36:ca:fa:9d:39:d9:58:a2:a3:82:6d:f1:c7:b5:b2:8e:4d:2e:
b5:3b:89:1f:43:2a:6c:27:ac:f8:69:d8:4c:e7:64:3d:c1:30:
2c:cc:3c:60:a5:66:65:c5:f8:09:fd:bd:33:9f:70:bd:84:73:
b8:bf:86:60:3b:2a:fd:0e:82:25:c6:3e:db:01:7e:82:f4:a3:
b1:2f:07:24:79:95:9d:f4:26:be:1c:3c:48:cc:2c:4c:22:cb:
ce:e1:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:50:09 2025 by rpki-client