Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/36lKcUm7HdjQHj1GHrIhSxHFxdo.roa
File: 36lKcUm7HdjQHj1GHrIhSxHFxdo.roa (raw, json)
Hash identifier: I3yIgesda2/xJQrbwQ70bo1cKaQqKgAR6G6umuc2HTs=
Subject key identifier: DF:A9:4A:71:49:BB:1D:D8:D0:1E:3D:46:1E:B2:21:4B:11:C5:C5:DA
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01983A9B2EF08C722AB2396F5ABA41B24798
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/36lKcUm7HdjQHj1GHrIhSxHFxdo.roa
Signing time: Thu 24 Jul 2025 04:05:05 +0000
ROA not before: Thu 24 Jul 2025 04:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
2a0f:7802:e200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:9b:2e:f0:8c:72:2a:b2:39:6f:5a:ba:41:b2:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jul 24 04:05:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa94a7149bb1dd8d01e3d461eb2214b11c5c5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:b0:ce:79:3b:df:f6:b8:9f:65:3d:95:b4:
c4:14:17:bf:a6:f1:70:a1:b6:d3:b4:e8:38:3d:3f:
7e:b3:d2:98:db:4d:b2:e1:48:90:dc:74:5a:9b:f4:
20:1c:6f:d2:a4:b2:e5:0b:14:65:e3:3b:40:b9:80:
6a:52:fd:5a:e3:fb:65:a7:7d:0c:0e:29:dc:d3:dd:
3c:be:2f:d1:83:06:65:5c:f8:cb:b0:43:42:ca:7d:
0b:8d:0a:4d:39:9d:4c:40:95:57:56:c7:ad:f8:d9:
3c:3e:00:be:1f:28:a3:bb:66:39:40:41:ac:77:a8:
84:13:48:fa:2f:15:12:86:b5:9c:f0:6b:f5:c5:60:
de:6f:19:52:3f:0c:b3:7c:fb:bd:ea:c7:33:6d:43:
e6:fc:1d:b0:55:4b:da:62:cf:28:6b:51:87:33:9a:
ca:e3:4b:de:79:db:b1:be:dc:03:1c:ba:2e:d4:9b:
be:21:6d:91:f0:24:1e:cc:e6:b8:52:2a:c4:e1:3b:
06:19:e2:14:df:30:40:6c:9a:f5:5d:18:7a:74:72:
16:3c:ad:cb:4a:d0:fa:4a:ea:cc:b4:5f:1b:a9:0d:
ab:aa:3e:f0:05:3e:db:70:5e:b6:5a:12:3d:d9:59:
d9:ed:b7:0b:72:6b:9f:07:8a:f2:2c:99:ff:67:13:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:4A:71:49:BB:1D:D8:D0:1E:3D:46:1E:B2:21:4B:11:C5:C5:DA
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/36lKcUm7HdjQHj1GHrIhSxHFxdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::-2a0f:7802:e2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:d9:5c:1c:1d:10:6e:f4:3b:44:ec:c3:57:18:57:5c:c8:33:
6e:2b:38:22:22:0a:c3:68:dc:9f:c0:e4:bc:66:d8:d6:dc:77:
d2:fc:9c:7b:9f:6e:64:9d:2c:8e:4c:83:8a:f0:4e:3c:91:94:
9e:2f:db:31:52:ed:a3:77:f9:d4:32:8b:21:0b:dd:ea:cb:c9:
a5:11:54:7a:29:f8:88:97:44:b7:de:ca:8a:60:7e:a5:bb:df:
21:c2:28:1b:49:5f:4b:b0:85:f2:ff:8d:ab:e7:65:41:77:54:
69:a1:0c:f8:43:1d:6f:80:b8:e3:83:b1:47:d9:02:ee:98:7d:
e5:53:24:55:47:5a:7c:52:d4:14:83:b0:53:04:b8:7e:3f:32:
b3:d2:d1:b4:cd:70:9e:c9:61:fd:27:00:6f:21:80:15:38:1b:
e4:ac:4d:ba:12:22:b6:83:49:13:98:41:4a:f4:28:08:b0:71:
b8:70:42:a3:e9:e1:a8:f9:27:9f:4c:6f:a2:9e:9e:bc:f7:ec:
11:cf:37:e4:6c:cf:f8:d0:0a:69:b6:a5:34:82:52:ff:4b:60:
1f:c1:22:41:f8:71:0f:c7:29:8f:58:92:12:60:6e:62:a5:a1:
d9:eb:73:e3:22:7a:a4:12:74:e0:65:c0:45:b2:b0:46:c7:7c:
a4:ea:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:56 2025 by rpki-client