Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/u78uWSrgAzCPEqQ1a6qiORHkdCM.roa
File: u78uWSrgAzCPEqQ1a6qiORHkdCM.roa (raw, json)
Hash identifier: 9W05Suh8wT4kbf/1UCTyebvUaEuJKmhSKAxlbGzmQ6c=
Subject key identifier: BB:BF:2E:59:2A:E0:03:30:8F:12:A4:35:6B:AA:A2:39:11:E4:74:23
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 01976883CD94004FB5872F0FC83DD7C4DFA4
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/u78uWSrgAzCPEqQ1a6qiORHkdCM.roa
Signing time: Fri 13 Jun 2025 08:59:17 +0000
ROA not before: Fri 13 Jun 2025 08:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44194
IP address blocks: 2001:bf7::/32 maxlen: 48
2001:bf7:750::/44 maxlen: 48
2001:bf7:760::/43 maxlen: 48
2001:bf7:760::/44 maxlen: 44
2001:bf7:770::/44 maxlen: 44
2001:bf7:780::/43 maxlen: 48
2001:bf7:780::/44 maxlen: 44
2001:bf7:790::/44 maxlen: 44
2001:bf7:800::/42 maxlen: 48
2001:bf7:800::/44 maxlen: 44
2001:bf7:810::/44 maxlen: 44
2001:bf7:820::/44 maxlen: 44
2001:bf7:830::/44 maxlen: 44
2001:bf7:840::/43 maxlen: 48
2001:bf7:840::/44 maxlen: 44
2001:bf7:850::/44 maxlen: 44
2001:bf7:860::/44 maxlen: 48
2001:bf7:b201::/48 maxlen: 48
2001:bf7:fc00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:83:cd:94:00:4f:b5:87:2f:0f:c8:3d:d7:c4:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jun 13 08:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbbf2e592ae003308f12a4356baaa23911e47423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:29:c9:ae:42:9d:73:e3:00:67:e5:31:a2:
b8:2a:f3:8e:c6:67:73:9e:37:12:2a:99:7d:a0:b3:
52:18:73:fa:1e:64:61:2b:1c:69:a8:c6:f6:68:41:
d6:6e:a2:0f:92:16:69:a1:c6:da:20:ea:7d:0d:e5:
95:4a:00:d9:69:47:3b:96:49:89:10:62:28:12:02:
1d:1c:ee:19:43:b2:0c:87:0a:8b:04:ac:a4:5d:8b:
33:43:65:76:ab:70:01:37:57:08:2c:90:67:ff:a1:
11:8e:93:fa:ed:6a:25:34:be:4e:08:ad:70:f0:39:
eb:80:5c:f2:6b:55:16:95:d5:70:cc:53:ed:d0:c3:
a1:7e:c3:77:f6:db:5a:b0:5c:50:fd:b4:b3:dd:cc:
3c:78:16:cc:87:49:89:52:63:fe:ce:7c:83:a8:f6:
82:2c:0e:ac:24:1e:c2:7d:f3:c4:c7:be:9a:12:9b:
19:90:22:69:a3:28:2e:76:fc:06:80:b3:4e:f9:00:
6e:23:80:ab:16:69:b7:c8:97:ec:28:df:27:97:71:
36:d9:2f:07:f1:90:c1:55:df:96:1b:4d:d4:76:3c:
c9:47:f8:bd:97:12:bb:8b:b6:eb:04:2f:fa:b1:1c:
68:f2:b5:70:4b:32:3b:59:ed:32:b8:a7:3c:e9:28:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:2E:59:2A:E0:03:30:8F:12:A4:35:6B:AA:A2:39:11:E4:74:23
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/u78uWSrgAzCPEqQ1a6qiORHkdCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7::/32
Signature Algorithm: sha256WithRSAEncryption
73:dc:24:d7:7a:11:14:96:f4:35:37:4d:db:b0:3e:73:5d:a3:
6d:33:94:4b:39:ca:35:98:1a:70:8d:3f:c2:60:9b:f4:e6:d6:
f9:0c:d5:59:65:69:e2:31:25:bc:a9:13:30:86:de:ce:f7:03:
70:25:77:e2:da:a5:a9:7c:52:37:7a:f6:38:b0:7d:f5:a2:af:
49:19:31:74:75:99:1f:98:e2:79:53:08:e0:80:2b:71:27:ad:
79:a5:05:49:8b:66:bc:9d:51:eb:70:3d:91:b5:33:f6:00:12:
4f:a6:1d:8d:d2:ef:93:f6:a9:3c:00:7d:12:bc:a4:a2:a0:2b:
93:2f:3a:79:19:3c:21:d6:f9:3d:aa:42:25:9c:4e:f8:d0:e9:
29:56:6b:af:b0:0a:30:88:b9:33:60:01:e9:fa:07:05:db:07:
87:3f:a5:1a:d0:52:54:5d:6d:d0:73:23:42:79:a9:ad:87:05:
e8:25:22:d0:63:56:19:da:cf:88:10:b7:24:3f:ce:00:71:a5:
c9:80:97:98:9c:0f:15:cb:1c:0f:5c:70:14:5b:36:ef:b6:bd:
e3:69:8a:3a:79:ae:c6:ac:4c:a8:34:01:cc:11:d4:ea:bb:42:
49:b5:9a:0e:56:5a:af:af:3a:15:ca:fc:52:2d:b2:69:c8:0b:
37:03:4e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:46:09 2025 by rpki-client