Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Vy2T9OipgMe2fMp4nyE6bS5J8E.roa
File: 5Vy2T9OipgMe2fMp4nyE6bS5J8E.roa (raw, json)
Hash identifier: ZOxTu+zgsLHcs7cNMzXBxMA9uca262Y8wehbNr5w01Y=
Subject key identifier: E5:5C:B6:4F:D3:A2:A6:03:1E:D9:F3:29:E2:7C:84:E9:B4:B9:27:C1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0199C35F7A3A2E79AC41EC17C0894F1188C0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Vy2T9OipgMe2fMp4nyE6bS5J8E.roa
Signing time: Wed 08 Oct 2025 10:30:38 +0000
ROA not before: Wed 08 Oct 2025 10:30:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210912
IP address blocks: 2a0c:9a40:8fd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:5f:7a:3a:2e:79:ac:41:ec:17:c0:89:4f:11:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 8 10:30:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55cb64fd3a2a6031ed9f329e27c84e9b4b927c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:71:9e:a7:8a:bf:ae:ae:72:19:e0:73:4a:
51:33:04:4b:97:d6:7c:b0:2a:68:6f:b9:b3:1c:ff:
f1:9c:8b:99:24:9d:fd:da:94:db:6b:e2:f9:7f:b0:
87:a4:d2:6e:57:37:d8:3b:43:32:fc:be:d7:6b:1c:
f8:65:3e:93:4d:d8:3e:3f:84:5b:c6:1b:05:44:a3:
b8:86:9e:09:f2:ff:ec:9e:ff:6a:3c:36:1a:4d:5e:
3b:78:56:55:99:cd:19:15:f7:d1:58:fb:74:6d:0d:
fc:6b:6a:5d:a4:cf:64:56:55:6b:72:ec:16:b2:8d:
7f:08:1e:62:11:10:e0:9d:e5:03:76:0d:0a:18:0d:
17:06:aa:50:13:de:47:10:44:5e:81:90:bf:b0:a4:
75:ed:59:3d:63:7f:4b:97:72:53:5c:28:3e:a4:7e:
18:0d:f3:eb:11:5d:c3:5f:1c:ac:bb:4b:cc:ee:6b:
ad:36:01:09:ab:6b:9f:09:4a:3d:df:05:8d:79:e8:
e3:d4:79:a1:d1:89:36:15:d5:af:33:29:14:16:77:
4d:7a:d6:f3:fc:9a:af:3e:59:bb:71:a4:f4:44:56:
cb:88:4f:a2:59:9f:42:6a:5e:b6:5e:fa:aa:80:cb:
b5:52:17:a0:52:cd:ec:fc:df:54:41:9b:5f:3e:bd:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:B6:4F:D3:A2:A6:03:1E:D9:F3:29:E2:7C:84:E9:B4:B9:27:C1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5Vy2T9OipgMe2fMp4nyE6bS5J8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8fd0::/48
Signature Algorithm: sha256WithRSAEncryption
bf:57:dc:74:25:80:75:02:15:b2:40:9d:a3:5c:84:04:1f:90:
7d:95:b2:b2:c6:0e:da:0d:d6:e9:44:63:f3:a0:44:c7:fe:94:
f3:1a:52:00:03:2f:27:75:f7:f5:ba:f4:26:07:79:43:c9:9f:
b5:0c:8f:c4:80:30:97:ee:0b:b0:07:d8:d0:bd:f6:64:6a:71:
5f:7c:22:2a:e0:31:86:36:ce:fb:68:ef:3d:cf:d7:32:50:23:
bf:78:49:bb:1d:b3:cb:24:60:a9:3d:7a:64:0d:53:9c:02:d2:
f8:5d:d6:48:d7:46:80:71:1c:48:4c:69:fa:bf:44:61:2d:aa:
8e:b4:1b:89:6c:d1:cb:05:c1:55:2a:a7:a0:a5:1a:1c:7c:ff:
82:f4:8d:e2:cc:65:27:3d:fe:2c:9a:62:9c:8b:9b:a0:30:4f:
fd:a2:ce:2b:59:21:7d:d4:2c:f6:7c:fa:26:8e:ba:fb:5a:3c:
24:4b:50:b4:25:c1:98:0d:14:0e:47:de:e3:78:2b:cf:db:ca:
9d:bb:55:e7:23:4f:f1:2d:2d:39:8d:55:8f:60:7e:57:ed:61:
b9:1a:ad:ca:8a:c6:a6:c9:ef:d9:23:4f:4f:b0:58:44:6c:b0:
7c:49:92:3d:a6:86:da:5b:9a:95:85:99:01:e3:5b:ed:ad:c8:
a9:18:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:45 2025 by rpki-client