Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/quhpiprIuMs5OhBO-sNK23CzMCc.roa
File: quhpiprIuMs5OhBO-sNK23CzMCc.roa (raw, json)
Hash identifier: TG4w5ZwEwjzdAjr0Laqy6oiXPqMemOPyfIQhvXwh5w8=
Subject key identifier: AA:E8:69:8A:9A:C8:B8:CB:39:3A:10:4E:FA:C3:4A:DB:70:B3:30:27
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019841981FE3BDA858D80A182218A7D195B7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/quhpiprIuMs5OhBO-sNK23CzMCc.roa
Signing time: Fri 25 Jul 2025 12:39:05 +0000
ROA not before: Fri 25 Jul 2025 12:39:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:1522::/48 maxlen: 48
2a12:bec4:152f::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
2a12:bec4:1654::/48 maxlen: 48
2a12:bec4:1655::/48 maxlen: 48
2a12:bec4:1656::/48 maxlen: 48
2a12:bec4:1657::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:98:1f:e3:bd:a8:58:d8:0a:18:22:18:a7:d1:95:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 25 12:39:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aae8698a9ac8b8cb393a104efac34adb70b33027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:37:11:8c:e5:2a:e9:d1:6c:d1:00:73:99:
14:ec:e8:66:9f:38:cd:f8:9b:6d:ae:e3:37:0e:c1:
a0:7c:f5:04:24:40:1b:88:5a:81:e0:e0:6d:a8:5f:
21:a8:c8:77:c9:b7:9d:0f:f4:14:4a:68:bb:15:91:
b9:41:fc:9d:69:4b:f4:e3:89:f3:76:c0:d4:2d:ec:
99:db:ce:7d:c8:44:d5:8c:42:df:f6:d0:f3:a3:68:
bf:c5:bc:31:9f:0d:3e:dc:b4:5b:f5:e8:d3:d7:6b:
11:21:40:e4:ca:af:70:4a:1c:3f:d4:19:e3:43:06:
1a:d5:59:ca:59:3e:db:e8:e2:ec:cd:c4:6f:41:ac:
5e:29:95:74:e2:24:29:7d:cd:34:80:41:fc:77:d2:
8e:c1:4f:e5:30:6c:c7:83:e5:b1:5b:ac:d9:b6:91:
83:d3:c2:d7:5a:36:9f:48:b3:ce:1c:ea:56:5d:ae:
ab:00:c1:2d:28:38:ba:11:33:79:7f:dc:40:21:e5:
ed:5f:f7:b9:dc:af:0b:8f:db:7d:31:67:31:b8:11:
a0:44:78:d6:2d:3a:9f:ca:3a:8e:4e:f2:82:41:08:
ae:22:2f:e6:c0:28:6c:26:79:cf:08:c1:22:56:8b:
aa:70:f9:96:84:86:13:89:15:3a:26:7f:99:fa:58:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:69:8A:9A:C8:B8:CB:39:3A:10:4E:FA:C3:4A:DB:70:B3:30:27
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/quhpiprIuMs5OhBO-sNK23CzMCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::-2a12:bec4:1522:ffff:ffff:ffff:ffff:ffff
2a12:bec4:152f::/48
2a12:bec4:1651::-2a12:bec4:1657:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:25:4c:e6:95:2f:ef:b1:ff:c3:c9:05:a1:e2:ae:36:ba:0d:
8a:3a:56:06:f8:67:f0:87:8c:e7:f5:2b:42:ed:30:69:aa:e9:
3a:c5:92:0f:2e:b3:12:64:f2:33:3f:58:37:35:70:54:63:f0:
d7:48:09:6f:ed:53:dc:5f:a0:51:da:19:ad:94:44:d8:e4:38:
da:c2:19:80:8c:60:cb:40:70:4f:7b:37:50:58:07:eb:fe:03:
fe:b7:a1:63:99:82:5e:b2:64:81:01:d8:06:a8:2a:59:d4:36:
93:4e:11:a6:50:3b:a0:cb:69:b8:62:98:da:33:b9:1c:69:d8:
df:9f:56:a9:d8:54:35:0a:44:f3:66:a8:aa:5a:71:fb:2a:43:
cf:a0:95:36:bf:c9:88:42:6b:ed:bf:f8:64:28:bb:8b:22:bd:
12:cc:9c:75:10:ba:01:77:5f:cb:88:af:30:44:5c:2a:8f:b0:
a2:9f:06:12:6a:53:15:66:98:0e:26:10:a8:06:c9:6d:af:a4:
04:a5:6b:6d:83:5c:9a:11:9e:ce:8b:a7:7c:cb:58:e3:1e:3c:
c2:ce:77:f9:8f:52:73:31:8b:e9:46:a1:06:03:b5:cf:4c:bb:
6f:a1:de:9c:d0:c4:0d:3b:85:b6:98:3a:90:5b:37:a0:9e:ed:
ff:ba:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:10 2025 by rpki-client