Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa
File: hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa (raw, json)
Hash identifier: wnrweN82zW3L/i2kjShP1DGJ6lX6f745nj23KDLcERg=
Subject key identifier: 86:FA:9F:3A:28:EB:E9:D0:EE:67:96:C7:E4:39:93:2C:90:52:34:2D
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 01971FD530FAB71179517EB68A3B2B2AD795
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa
Signing time: Fri 30 May 2025 06:15:54 +0000
ROA not before: Fri 30 May 2025 06:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49602
IP address blocks: 2a0d:1580:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:d5:30:fa:b7:11:79:51:7e:b6:8a:3b:2b:2a:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: May 30 06:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86fa9f3a28ebe9d0ee6796c7e439932c9052342d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:f3:82:db:df:ac:25:55:34:d8:6f:85:94:
8f:e8:5c:e0:08:ba:a9:5e:a4:33:8c:f6:8b:6d:3b:
53:41:1c:bd:a1:7d:b2:07:08:80:c0:5a:87:8a:d5:
66:ba:d6:6f:0d:d4:90:24:7d:0e:9d:5c:47:3a:43:
1e:45:8b:99:9a:f1:aa:66:80:ce:ec:04:73:78:83:
4b:18:0c:58:2e:d2:e9:2e:11:4e:7c:d4:3b:7f:9f:
f7:1e:0c:4b:eb:da:41:7d:9c:90:65:9a:50:ea:51:
f4:1f:40:da:3e:ae:80:05:ec:dd:77:5b:6d:c7:d8:
85:8e:cd:01:63:c8:cf:22:cb:e4:80:b4:14:f9:14:
66:e5:e2:e1:2a:ea:19:2d:5e:79:8c:cd:e4:f2:30:
56:c3:37:41:0e:63:6e:d3:b8:9e:9a:40:05:4f:94:
da:96:10:b2:00:df:4e:25:d7:43:12:e8:01:c9:b1:
57:66:8c:78:6c:81:9e:93:3f:2f:6b:11:4d:97:09:
f3:e2:9d:68:95:e9:c1:c4:88:3a:13:7a:67:42:80:
b3:ae:2a:5e:d4:c3:85:19:2b:c7:1d:a5:0b:7a:9b:
84:d0:80:de:30:18:48:30:d3:40:c8:65:7b:06:02:
3e:fa:2a:3f:a1:bc:e2:1c:aa:a2:59:1e:c9:d9:d4:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:9F:3A:28:EB:E9:D0:EE:67:96:C7:E4:39:93:2C:90:52:34:2D
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/hvqfOijr6dDuZ5bH5DmTLJBSNC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1580:20::/48
Signature Algorithm: sha256WithRSAEncryption
8a:81:b3:61:fe:a5:3a:f7:07:67:17:e7:86:61:45:50:28:62:
2b:0d:76:f1:4b:70:92:c1:58:37:fa:ab:70:fc:a1:10:6d:8e:
06:ca:73:31:a8:34:ac:32:c4:d1:dd:15:31:81:21:4e:45:a7:
47:58:21:94:f6:7f:1e:d8:ef:96:7e:99:b5:de:8d:ab:62:07:
08:83:df:78:b5:27:29:f4:78:c4:d6:85:84:c6:4f:3d:ae:ad:
bc:ee:49:d0:bd:9b:4a:ed:01:8b:36:98:9c:01:13:c3:cb:21:
67:34:1d:d4:db:9b:f2:91:b3:af:48:aa:e6:cc:d2:11:2b:52:
fa:9b:70:a2:0c:65:41:40:a0:be:a1:72:48:08:9e:31:57:a8:
c6:ad:6c:38:46:58:85:07:a4:d9:d6:f7:69:dc:82:79:59:08:
18:44:be:33:5a:03:f0:9b:5e:bf:57:54:4f:87:12:78:8b:fd:
5a:9d:5d:32:f7:df:56:a7:60:a7:4a:4e:4d:4b:89:62:ce:e4:
18:a5:bd:2d:5c:e5:54:e2:70:fd:b0:05:97:75:84:61:fe:47:
8c:25:00:84:a1:d3:fe:b9:88:c4:09:ff:ab:31:83:d3:f5:e5:
62:bf:cd:76:47:6f:e5:41:c4:20:3b:e9:35:b1:3a:79:1a:f5:
81:ed:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:12:24 2025 by rpki-client