Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa
File: l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa (raw, json)
Hash identifier: fwZNajA2NrVuCxC49gzHtXDb0A0DV7JtszLe3wSG/eE=
Subject key identifier: 97:F6:75:6A:1E:19:E8:25:24:8B:F7:07:C7:FE:41:68:45:A2:3B:11
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 01975B9800B1E02D48B1495CE99BE1E46E56
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa
Signing time: Tue 10 Jun 2025 20:46:17 +0000
ROA not before: Tue 10 Jun 2025 20:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 2a04:2500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:98:00:b1:e0:2d:48:b1:49:5c:e9:9b:e1:e4:6e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Jun 10 20:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f6756a1e19e825248bf707c7fe416845a23b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:82:e5:01:82:0c:e2:9f:15:23:51:8a:c3:
3f:63:62:07:ed:50:44:70:34:6b:95:5a:95:6f:d7:
22:70:cf:5c:87:ae:f4:67:6d:89:45:b2:b0:06:45:
2a:cd:2f:f5:14:12:51:60:1f:f4:60:19:14:b3:b4:
63:75:9d:d8:f3:3d:66:ee:47:ca:a1:fd:cf:a1:ca:
de:58:e1:e9:a3:f4:b5:6f:f2:73:99:2f:c8:d8:ad:
26:94:88:4e:a5:5e:d4:1f:8a:a6:66:59:71:c2:ee:
d6:de:20:72:0c:63:c9:4e:7e:4a:99:e6:be:52:6a:
79:5a:06:ca:35:a7:75:b6:7f:59:e8:ea:ed:3b:12:
57:5a:52:3e:b7:f7:49:35:0a:b8:45:b2:16:39:6a:
a6:b3:60:d1:8d:90:eb:c7:07:71:30:dd:c8:38:8e:
d4:4e:86:9b:08:7f:e2:7d:b2:89:bf:ea:60:c4:65:
c8:bf:12:01:13:ca:89:60:f1:24:fd:d3:f5:19:57:
7a:25:be:8e:a4:ef:3d:84:dc:be:39:56:3f:9d:a8:
38:00:00:cb:80:ff:12:e6:91:26:c5:e8:76:20:f0:
9b:26:e3:16:dd:a9:0b:1e:2d:1e:4f:50:e8:ff:14:
d6:87:a7:43:98:85:31:91:e2:3e:5e:90:e0:78:9c:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:75:6A:1E:19:E8:25:24:8B:F7:07:C7:FE:41:68:45:A2:3B:11
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2500::/29
Signature Algorithm: sha256WithRSAEncryption
2a:39:97:9d:d1:41:13:2c:04:7d:43:03:40:80:f2:13:09:94:
08:53:09:63:e2:87:f4:68:57:53:bc:dc:f3:ae:19:a3:9b:bc:
a6:41:8d:4b:da:75:18:d7:58:00:07:84:e3:60:93:4b:6f:d2:
41:6a:a8:9b:bf:a1:fd:1e:2b:ed:97:70:88:e3:69:1b:de:e5:
ae:12:27:c1:75:04:12:af:a2:d2:24:15:9e:42:62:a5:ce:ed:
70:78:57:b9:0b:17:91:d2:cf:13:cd:53:67:3f:d8:7e:39:68:
f1:d5:b4:18:d2:9a:28:b1:44:96:d9:5b:54:da:b2:68:75:a2:
8a:88:55:bf:a0:00:ef:ba:1d:c7:49:ba:89:f9:dc:1b:19:3c:
bc:01:a8:aa:20:d0:61:bb:19:83:d1:47:0a:86:9f:a0:57:b8:
02:9d:21:e3:05:17:79:95:af:26:34:0f:66:6c:aa:4c:8e:c9:
02:cd:e9:f9:00:3c:ae:99:81:0a:3f:bc:c0:27:c2:f0:d8:bd:
29:79:5a:6f:f6:de:7f:e2:c4:89:5a:a8:1b:72:69:f0:68:1b:
15:a0:08:78:ed:c2:38:51:b4:ec:d8:60:5a:22:4f:42:22:3c:
24:06:7e:0a:b0:a3:a1:56:41:d1:7b:31:68:61:2e:9a:29:32:
b4:28:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:16 2025 by rpki-client