Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/yu0x4cI7QYMuV2lvpjsdhZIVjyw.roa
File: yu0x4cI7QYMuV2lvpjsdhZIVjyw.roa (raw, json)
Hash identifier: r8iy7jtbgFUvGg0IDU5rUcIHxo3t6t6Pldzb39lXL7g=
Subject key identifier: CA:ED:31:E1:C2:3B:41:83:2E:57:69:6F:A6:3B:1D:85:92:15:8F:2C
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 0197187F71F5DAFEF3859977BD125BAD75EC
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/yu0x4cI7QYMuV2lvpjsdhZIVjyw.roa
Signing time: Wed 28 May 2025 20:04:54 +0000
ROA not before: Wed 28 May 2025 20:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a01:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:7f:71:f5:da:fe:f3:85:99:77:bd:12:5b:ad:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: May 28 20:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caed31e1c23b41832e57696fa63b1d8592158f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:08:70:f8:9f:45:36:e3:4e:45:fd:0c:f2:
1a:ed:27:0d:c2:f6:6a:8f:5d:5c:53:3b:4e:05:9e:
a4:15:62:7b:93:60:ce:f0:66:bd:60:1d:19:38:53:
37:20:22:7f:02:a5:e2:b7:6f:d5:3e:14:5d:89:46:
5f:03:5a:71:41:b5:28:21:f7:b7:05:5d:62:e1:de:
08:0c:dc:5b:d7:bc:6f:35:d8:d8:da:0a:5a:14:4f:
cf:f5:fc:26:67:ea:84:bd:2c:fa:54:6b:82:ee:96:
9f:be:71:94:ea:d8:a8:ad:4c:41:e7:13:04:3c:a4:
a3:e7:86:c2:2a:9f:21:51:96:ba:bb:22:fa:3e:0d:
8a:79:10:a5:03:28:20:b2:20:6d:d9:d8:8a:be:ae:
5a:a9:ef:10:14:62:56:03:04:c0:be:f3:49:ea:20:
cc:98:f4:17:69:a5:a6:6b:56:6d:64:09:95:1b:c8:
f3:0c:f8:43:5d:8c:48:d1:e3:b9:94:b4:c6:d6:61:
bc:96:ac:72:94:f9:ee:89:45:3f:83:0e:6a:3d:c0:
b3:69:2b:fd:ac:4a:39:af:ea:37:d2:dc:87:0c:63:
91:85:9d:a8:b9:67:92:20:ba:d0:1e:82:be:b9:06:
0d:f9:4a:82:6d:f1:83:d7:a2:aa:7e:39:3d:da:a5:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:ED:31:E1:C2:3B:41:83:2E:57:69:6F:A6:3B:1D:85:92:15:8F:2C
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/yu0x4cI7QYMuV2lvpjsdhZIVjyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f440::/29
Signature Algorithm: sha256WithRSAEncryption
02:41:19:af:07:12:ae:cd:4a:31:5e:ae:15:5a:5c:a1:ce:49:
73:9c:2f:ea:a9:81:d1:fc:9f:27:f0:a3:a1:f3:64:d7:f2:d4:
e6:0f:04:3b:ea:a8:3c:16:c0:c3:8b:7d:ec:d8:7c:39:99:78:
10:2d:08:be:4a:61:05:0f:a6:eb:64:bf:aa:43:cc:26:5d:e3:
66:ae:aa:84:65:e3:fa:b4:e6:0e:38:06:9f:b0:40:d6:62:50:
78:e0:25:67:64:62:77:d2:24:b9:02:9f:e1:f5:18:76:9b:64:
79:63:1e:79:cd:4d:30:b4:91:33:31:9e:ec:d1:2b:22:3f:b3:
b1:ca:73:dc:a8:db:11:dc:f1:8d:08:e5:b9:21:ca:93:43:a2:
5c:12:7e:5f:e0:91:c9:4d:93:e8:a7:2d:c2:ac:94:38:f9:aa:
07:5f:a8:10:8b:e6:e3:95:b6:f4:23:32:26:50:0a:21:4d:90:
cf:9b:b6:7d:8a:44:d6:d8:8a:d6:70:5b:f5:6b:41:59:49:59:
8f:b9:89:fa:f9:c5:f5:d6:74:2f:f7:e1:c5:44:f1:f5:7d:d5:
4e:eb:d0:b6:2f:04:4e:27:7f:ff:0b:0b:a3:ee:ee:e1:fb:99:
9f:e9:58:ee:aa:dd:5a:de:a7:9b:75:5c:10:23:58:d1:84:d3:
23:06:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:04:20 2025 by rpki-client