Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa
File: Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa (raw, json)
Hash identifier: hYhipTaQ14gbpmM2CsGVDCplldw8XWpgCwk8ecMo+1k=
Subject key identifier: 5B:3E:EE:BF:14:49:8E:63:5B:A4:C1:D7:AB:27:39:5C:83:E3:1D:88
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01987917A3870224C874BAC0B12528ACF5F3
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa
Signing time: Tue 05 Aug 2025 07:17:28 +0000
ROA not before: Tue 05 Aug 2025 07:17:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 2a0f:b240:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 18:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:17:a3:87:02:24:c8:74:ba:c0:b1:25:28:ac:f5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 5 07:17:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3eeebf14498e635ba4c1d7ab27395c83e31d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:f7:d0:2e:3f:83:03:11:65:28:25:87:42:
45:6b:09:e1:35:72:b5:08:50:d2:a8:c0:a4:7c:a7:
1d:82:77:d4:68:be:4b:6e:1d:9f:da:8b:2e:f7:c2:
96:a0:5f:18:78:6f:ff:28:7b:d4:f9:7d:cd:98:16:
aa:ab:7b:b7:78:f2:66:c9:9d:9b:bd:3c:1f:94:2f:
cc:19:fa:11:09:a7:94:15:67:5b:5d:7a:1a:2c:e4:
bb:18:bd:05:76:6f:6b:ac:4f:00:d0:03:02:ce:02:
fb:c1:90:7c:a3:22:53:d6:a1:0f:3b:8f:22:06:99:
7e:0f:26:bb:ab:95:90:5d:e7:27:5a:43:83:66:bf:
f7:59:b9:58:18:af:92:6a:63:a7:5f:c5:f3:8f:96:
e4:8e:1c:2f:3e:41:7c:51:42:17:9b:69:32:8c:94:
12:34:41:0e:c1:52:b1:da:cd:58:14:11:0c:56:9f:
90:6f:08:62:f2:cd:38:63:9d:fc:8b:7b:22:d4:a9:
7d:0d:f0:3b:a2:8f:4a:a7:65:24:78:18:ec:a3:0e:
60:5b:61:26:b2:06:58:d2:1e:08:59:10:8f:a6:63:
11:59:0b:37:20:7a:55:34:e9:41:f3:2f:6f:fc:69:
c7:81:a8:1f:41:ba:24:7d:d7:cf:c2:d5:86:51:ff:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:EE:BF:14:49:8E:63:5B:A4:C1:D7:AB:27:39:5C:83:E3:1D:88
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:c::/48
Signature Algorithm: sha256WithRSAEncryption
42:9b:37:b9:29:a5:39:75:3a:b5:10:31:af:0b:5c:fe:08:0a:
1c:34:f1:3e:c8:b2:a8:4a:5f:8b:f6:f8:21:48:1c:60:ac:aa:
aa:b6:8e:14:1a:73:e5:4a:b6:cf:66:95:f7:60:84:5f:04:4c:
5e:61:ed:b3:02:c6:76:1d:3e:9b:fc:00:66:1e:1b:c1:ce:d8:
dd:92:3e:4e:32:80:04:fe:ef:35:07:fa:23:61:cd:46:c6:af:
54:5d:35:7b:5a:43:d3:d1:df:dc:bb:f2:26:c4:3a:b5:1b:da:
8c:03:ac:54:4e:ea:65:2d:b6:6d:f8:02:d7:fa:3d:dd:90:a5:
c0:55:d9:e5:a6:9f:f9:fb:d0:a1:a4:93:7d:25:98:de:38:52:
b4:72:d8:5c:6c:64:3d:3e:3d:4e:d9:96:e8:1d:56:6c:0e:28:
64:5c:16:a7:7d:89:c5:76:f5:7e:44:e0:1d:bb:ac:4e:62:3c:
40:d2:ba:59:83:c2:8c:c5:90:f0:0e:7e:99:11:24:92:6b:23:
2d:a5:42:0e:8e:04:43:a4:b6:db:71:0f:11:18:d2:d9:f3:5c:
4e:c0:29:95:76:0d:24:83:a3:8a:39:c7:81:89:d2:b7:f8:3e:
be:25:89:ee:6c:8e:e7:cc:ec:88:43:52:6b:6a:5b:f0:b9:e4:
45:0d:1d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:06 2025 by rpki-client