Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ebyfwzcMSi9k1m3V-k70Z3wksp0.roa
File: ebyfwzcMSi9k1m3V-k70Z3wksp0.roa (raw, json)
Hash identifier: CP5qMIAebdrUDk81F0EMk3MoVm93kCtf6JCQFNZscMo=
Subject key identifier: 79:BC:9F:C3:37:0C:4A:2F:64:D6:6D:D5:FA:4E:F4:67:7C:24:B2:9D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0199283BB20C9EA10D0FC26A57E15F09128D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ebyfwzcMSi9k1m3V-k70Z3wksp0.roa
Signing time: Mon 08 Sep 2025 07:30:24 +0000
ROA not before: Mon 08 Sep 2025 07:30:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212316
IP address blocks: 2a0c:9a40:8690::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:3b:b2:0c:9e:a1:0d:0f:c2:6a:57:e1:5f:09:12:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 8 07:30:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bc9fc3370c4a2f64d66dd5fa4ef4677c24b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:13:7a:d3:59:a3:8e:9c:b1:40:ba:45:c0:
32:02:a6:07:e2:f5:9b:a7:9e:7a:97:8a:d4:12:f5:
6c:b1:74:ed:60:b5:99:2f:a8:42:cc:7e:4d:53:f1:
f0:ba:5c:66:69:4f:a4:89:c3:6f:6b:1c:68:94:65:
38:50:99:0d:ce:4d:15:2d:9e:9f:5e:95:12:ea:da:
d8:a0:5b:e9:26:54:16:2d:8d:35:53:1e:93:75:28:
85:92:26:53:7b:ae:a9:fa:a1:78:3c:ed:a1:c6:70:
4a:19:a5:18:d2:11:c1:f5:d7:27:24:61:da:58:d4:
1f:e3:ee:73:50:26:27:ba:3a:cf:fe:00:51:42:47:
8c:94:0e:f3:99:94:35:7a:5a:cf:6d:c1:82:63:79:
7d:f7:e9:58:66:7c:ec:d1:ab:a3:b6:75:ed:57:79:
6a:3e:cf:90:c3:a6:de:93:16:5a:af:17:90:74:be:
04:e0:e3:85:24:f6:13:d5:c7:cf:05:03:d4:61:c6:
f3:79:a9:cc:c4:26:96:5c:4e:40:83:0c:8a:38:b6:
a4:43:d0:4e:96:4a:97:72:20:2d:c2:98:e9:2e:da:
bd:12:2a:4e:24:f9:6b:30:29:05:0c:34:55:f8:2b:
12:57:0a:23:94:91:6d:d4:6e:e2:50:3e:f0:2d:09:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:9F:C3:37:0C:4A:2F:64:D6:6D:D5:FA:4E:F4:67:7C:24:B2:9D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ebyfwzcMSi9k1m3V-k70Z3wksp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8690::/48
Signature Algorithm: sha256WithRSAEncryption
7d:f2:61:f8:39:8e:7f:e4:1f:e4:67:71:e9:f9:b9:2c:e4:76:
58:1d:c7:f4:d0:59:04:86:c7:75:96:7c:d7:fa:c6:33:67:24:
9b:ee:42:8b:3f:a9:0e:5f:84:6e:6a:bf:98:c3:ff:91:57:87:
50:14:45:56:24:9a:d1:2f:73:27:68:9d:13:e4:c0:74:73:89:
86:e2:31:32:27:ef:c4:e5:ef:83:da:2c:41:4f:c2:b3:e3:db:
99:70:21:71:6c:74:4d:92:fe:a8:af:bf:e0:66:99:45:0a:6c:
84:82:42:04:4b:f6:71:dd:8a:33:a1:ea:89:a9:c5:02:b6:1c:
fe:3e:c8:9e:de:75:01:34:76:9a:6a:70:ad:e1:f4:d1:32:f4:
f1:81:d7:b6:e5:c8:2a:46:c9:8e:15:a6:f3:32:38:87:59:29:
4a:4a:6e:46:db:dc:6a:cc:54:a0:21:1c:67:f5:2c:96:9a:bb:
42:eb:32:31:08:70:ef:11:0f:53:c0:34:15:12:28:be:dd:19:
e8:59:25:1d:b0:23:dc:cd:b8:e6:36:db:36:09:8b:2e:43:fb:
17:7e:bb:c8:07:45:82:6a:e2:62:91:35:e4:1e:cf:68:a3:ee:
92:4a:21:1a:0e:76:15:f4:e4:54:b6:c2:b8:ee:e9:cb:55:54:
52:b6:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:44 2025 by rpki-client