Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PP4mLiXKDgY3ujq2iO_uTCtyWEs.roa
File: PP4mLiXKDgY3ujq2iO_uTCtyWEs.roa (raw, json)
Hash identifier: HAeOxSLUQuuH22KviKi+SYLKvk2/hSKTCkQ+0NNsNMY=
Subject key identifier: 3C:FE:26:2E:25:CA:0E:06:37:BA:3A:B6:88:EF:EE:4C:2B:72:58:4B
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0197455798081B5C980C4ECCA10673965A18
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PP4mLiXKDgY3ujq2iO_uTCtyWEs.roa
Signing time: Fri 06 Jun 2025 13:04:17 +0000
ROA not before: Fri 06 Jun 2025 13:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:b480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:57:98:08:1b:5c:98:0c:4e:cc:a1:06:73:96:5a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 6 13:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cfe262e25ca0e0637ba3ab688efee4c2b72584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:f2:ab:ff:5a:59:8f:a6:ca:f6:b7:a7:59:
dc:c1:4d:a4:7a:94:90:80:82:6f:ff:77:03:92:d0:
78:81:65:78:ad:56:9f:52:db:fb:b4:32:9e:f5:a9:
1d:43:44:1e:e0:e0:26:c5:f7:7d:8d:c4:4f:53:4e:
89:0a:57:16:96:1f:14:5b:ed:0d:3a:c5:85:0a:c9:
44:45:48:18:cd:80:4e:28:d8:fe:ad:55:31:be:a3:
03:bd:24:e0:ea:59:64:9d:32:de:4b:97:cb:65:07:
84:0d:d9:3e:d1:f8:35:b7:f1:4e:19:8b:13:69:3f:
5a:06:48:52:61:ae:8f:61:b8:73:00:b9:55:f0:22:
da:32:28:7d:84:b1:6a:ad:5f:ac:c3:ea:1e:4a:4e:
b4:5d:20:85:d8:29:74:aa:63:ec:eb:1b:16:07:7d:
d9:9a:b0:1a:30:67:d8:0d:44:49:c1:66:df:e2:2c:
87:80:ee:99:ff:eb:71:84:d6:c8:56:41:b0:40:8c:
d6:18:74:45:31:2f:57:f2:d3:ba:4d:3e:51:cd:82:
d3:c8:5f:7f:ab:ff:26:64:bf:4e:ab:3b:33:89:c1:
36:35:1a:f7:13:c7:e5:d8:28:be:b2:bb:63:4f:74:
6d:9c:d4:23:0e:4c:16:a7:45:97:68:81:99:7c:51:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:26:2E:25:CA:0E:06:37:BA:3A:B6:88:EF:EE:4C:2B:72:58:4B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PP4mLiXKDgY3ujq2iO_uTCtyWEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b480::/29
Signature Algorithm: sha256WithRSAEncryption
11:c9:d8:d4:ee:90:1c:cf:04:83:06:98:3e:08:3b:3f:cd:d1:
e2:3b:5f:a3:ba:b8:e2:65:73:44:ed:4d:63:6c:6b:81:37:7c:
88:37:7b:ab:aa:5c:66:9d:28:2b:04:b9:16:4f:31:9d:3b:51:
60:2c:6b:8a:6d:cb:a6:ed:42:6e:d8:a1:f1:04:1d:1b:68:f7:
ff:18:b9:8e:89:9c:4c:90:30:45:93:a4:30:42:d3:4a:69:b1:
0a:cd:52:94:17:d7:81:1d:72:11:7a:9a:8c:ff:97:13:d8:a5:
30:94:99:ba:7c:9f:61:f2:87:3b:c2:53:8a:0b:49:68:63:22:
29:82:63:a2:5a:fb:48:83:f1:de:b2:9a:54:fe:72:9d:a2:5f:
f5:9a:4f:b3:93:63:26:18:7a:05:b0:e3:a5:d3:48:d7:ec:de:
d8:89:e9:71:1e:91:03:67:c2:e6:2c:75:79:14:fd:2f:74:d0:
d7:25:da:19:80:47:85:80:dc:cf:68:af:ac:32:b3:2c:c7:d2:
6a:48:55:86:6a:4a:33:b9:44:e3:5b:7c:31:da:0d:af:d2:e8:
d9:89:4e:d1:da:61:42:b2:02:ba:66:c3:28:eb:25:f5:7d:79:
a0:4b:7f:d2:72:f3:05:37:46:a3:8b:d9:3c:dc:43:26:f8:59:
c3:00:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:31:57 2025 by rpki-client