Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gRSUAeGZmoq0uxogH9vgjoBqg5U.roa
File: gRSUAeGZmoq0uxogH9vgjoBqg5U.roa (raw, json)
Hash identifier: ZEwY9dNRJzoA31bf3Tl7KfrkElIYmP+CNn1vT2+KFJQ=
Subject key identifier: 81:14:94:01:E1:99:9A:8A:B4:BB:1A:20:1F:DB:E0:8E:80:6A:83:95
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019728CAECF05405327E26DD28E2528FF5C4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gRSUAeGZmoq0uxogH9vgjoBqg5U.roa
Signing time: Sun 01 Jun 2025 00:01:16 +0000
ROA not before: Sun 01 Jun 2025 00:01:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 835
IP address blocks: 2a0f:b244:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:28:ca:ec:f0:54:05:32:7e:26:dd:28:e2:52:8f:f5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 1 00:01:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81149401e1999a8ab4bb1a201fdbe08e806a8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:93:c6:4a:eb:10:6c:07:ba:a5:d0:6f:6b:
36:a1:2a:5d:32:f5:e5:2e:4e:c0:3c:92:2a:80:6d:
38:1c:35:d9:1a:25:53:e9:8d:dc:b7:0c:53:6b:76:
da:2b:60:b4:61:56:79:b7:a7:3c:f6:9d:a1:1a:17:
8e:12:5d:be:02:e4:03:46:07:2e:dc:8d:be:1e:38:
87:9c:ca:f0:1e:19:83:19:75:c5:3f:fa:1a:9a:a7:
5a:48:42:8e:76:5a:ae:5e:68:69:ab:77:3b:7c:98:
62:ba:09:30:34:a6:9f:b5:bc:6f:d3:4d:6d:a0:ae:
dd:16:60:de:b4:ef:06:e9:15:da:16:04:70:ab:f2:
26:a9:91:a3:99:14:e5:e6:b9:4d:47:0b:9b:f5:f2:
30:81:f1:76:25:c5:f1:8a:8b:98:af:3d:03:e1:61:
2b:c9:d8:ec:3a:f8:ce:f1:bd:72:ef:b4:9d:6c:dc:
c6:70:fb:b7:95:0e:70:6e:98:9b:61:03:20:09:55:
2a:4b:ad:f6:57:e6:63:6b:95:20:d6:16:03:85:cf:
d5:69:f5:ba:4b:bc:9b:a0:e8:10:c3:54:bf:33:d8:
af:bc:b5:db:02:29:ee:04:8d:66:80:21:41:e9:f6:
e1:a2:7e:f3:bd:86:1d:35:93:68:8c:ff:81:df:13:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:14:94:01:E1:99:9A:8A:B4:BB:1A:20:1F:DB:E0:8E:80:6A:83:95
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/gRSUAeGZmoq0uxogH9vgjoBqg5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:100::/48
Signature Algorithm: sha256WithRSAEncryption
8a:0a:57:55:b4:af:54:99:6c:23:c0:c2:2d:5f:a2:1b:78:a3:
09:cd:c9:38:e2:60:d9:bc:8e:ee:4c:03:5a:e1:7c:09:9b:d9:
4a:74:29:a8:50:ca:af:ce:dc:ec:c1:6c:f6:b7:eb:09:a5:e1:
e2:d8:7e:d1:31:83:07:c5:13:a4:00:f2:97:b4:7d:04:26:80:
87:a7:4e:45:16:06:ee:62:30:fb:7d:c4:d3:86:a1:b9:78:81:
3f:f6:00:aa:c4:f0:34:1e:09:f6:58:0d:58:e1:70:02:31:cb:
b1:cb:b9:ec:33:ac:4a:ec:32:11:06:9a:f5:44:9e:14:5a:c2:
f2:aa:ac:30:cf:6f:6d:31:a9:5c:39:f7:a1:34:09:0d:16:11:
3a:68:3b:e6:1a:db:92:ec:83:3b:2d:92:d3:86:88:23:e1:03:
d1:b8:59:d3:88:e8:6f:57:52:6a:17:bb:99:5e:d3:6e:c6:cb:
df:ef:a3:81:d3:6d:93:e1:60:87:1b:24:b6:c6:cc:06:86:1f:
ce:97:f4:2d:97:32:2f:ee:4e:09:c2:8f:d0:c3:66:22:6d:ba:
d6:5b:b1:75:28:7a:dc:1a:f9:02:09:8b:d6:5e:fd:ac:02:99:
57:e1:3f:c9:9a:bb:f7:52:ac:20:55:cc:07:c6:7e:0f:56:ce:
56:bb:84:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZcoyuzwVAUyfibdKOJSj/XEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwNjAxMDAwMTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTE0OTQwMWUxOTk5YThhYjRiYjFhMjAxZmRiZTA4ZTgwNmE4Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOKTxkrrEGwHuqXQb2s2oSpdMvXl
Lk7APJIqgG04HDXZGiVT6Y3ctwxTa3baK2C0YVZ5t6c89p2hGheOEl2+AuQDRgcu
3I2+HjiHnMrwHhmDGXXFP/oamqdaSEKOdlquXmhpq3c7fJhiugkwNKaftbxv001t
oK7dFmDetO8G6RXaFgRwq/ImqZGjmRTl5rlNRwub9fIwgfF2JcXxiouYrz0D4WEr
ydjsOvjO8b1y77SdbNzGcPu3lQ5wbpibYQMgCVUqS632V+Zja5Ug1hYDhc/VafW6
S7yboOgQw1S/M9ivvLXbAinuBI1mgCFB6fbhon7zvYYdNZNojP+B3xMxwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIEUlAHhmZqKtLsaIB/b4I6AaoOVMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvZ1JTVUFlR1ptb3EwdXhvZ0g5dmdqb0JxZzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yRAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCKCldVtK9UmWwjwMItX6IbeKMJzck44mDZvI7u
TANa4XwJm9lKdCmoUMqvztzswWz2t+sJpeHi2H7RMYMHxROkAPKXtH0EJoCHp05F
FgbuYjD7fcTThqG5eIE/9gCqxPA0Hgn2WA1Y4XACMcuxy7nsM6xK7DIRBpr1RJ4U
WsLyqqwwz29tMalcOfehNAkNFhE6aDvmGtuS7IM7LZLThogj4QPRuFnTiOhvV1Jq
F7uZXtNuxsvf76OB022T4WCHGyS2xswGhh/Ol/QtlzIv7k4Jwo/Qw2YibbrWW7F1
KHrcGvkCCYvWXv2sAplX4T/Jmrv3UqwgVcwHxn4PVs5Wu4TI
-----END CERTIFICATE-----
Generated at Tue Jun 17 00:51:34 2025 by rpki-client