Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U8Lz-woBuayQCxonI-hxDcK01_Y.roa
File: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (raw, json)
Hash identifier: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=
Subject key identifier: 53:C2:F3:FB:0A:01:B9:AC:90:0B:1A:27:23:E8:71:0D:C2:B4:D7:F6
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01993D1E3BD97A7675E1215585C7EACDBFE5
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U8Lz-woBuayQCxonI-hxDcK01_Y.roa
Signing time: Fri 12 Sep 2025 08:50:15 +0000
ROA not before: Fri 12 Sep 2025 08:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205901
IP address blocks: 2a0d:d940:2001::/48 maxlen: 48
2a0d:d940:9002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:1e:3b:d9:7a:76:75:e1:21:55:85:c7:ea:cd:bf:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Sep 12 08:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c2f3fb0a01b9ac900b1a2723e8710dc2b4d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:d1:00:b5:70:c7:33:da:f7:f8:44:40:b8:
0a:81:a3:cd:1a:02:6a:cc:fb:16:06:48:ee:4f:9f:
ec:84:d4:5c:a4:59:92:26:c6:ae:e6:e5:7a:3e:34:
e8:aa:f7:d2:08:b4:4d:eb:be:86:d5:7e:b0:ce:a2:
16:5b:79:08:78:4d:22:1e:db:75:d4:15:77:0c:ec:
ac:61:88:cf:38:eb:49:3d:52:40:7c:55:a0:7d:7f:
03:01:5f:26:58:35:b3:8a:f3:92:de:6f:7d:9b:7b:
23:ed:99:66:c0:28:5e:8e:cd:09:71:19:3b:99:90:
68:57:9b:f5:de:5a:3d:01:7a:ad:22:c5:64:72:d3:
88:c7:33:85:97:22:12:3d:a2:40:8a:69:7c:76:46:
39:28:60:93:e0:f6:5e:9f:eb:a7:85:48:c6:bb:02:
a5:8a:df:0c:d1:74:8c:20:b9:e1:52:1f:4e:b3:7a:
e5:1f:96:94:ae:24:7d:2a:98:a6:70:01:57:82:f4:
de:04:fc:15:59:24:27:17:c9:37:c8:75:ab:05:0f:
28:fc:92:1c:39:e8:79:e7:ff:ae:9b:ad:a6:6c:d8:
41:9d:c0:f8:ce:5d:0d:4f:a8:8f:10:86:0d:6d:57:
a4:9c:74:28:91:95:e4:0b:89:5d:48:d1:74:a9:f3:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:F3:FB:0A:01:B9:AC:90:0B:1A:27:23:E8:71:0D:C2:B4:D7:F6
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/U8Lz-woBuayQCxonI-hxDcK01_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:2001::/48
2a0d:d940:9002::/48
Signature Algorithm: sha256WithRSAEncryption
87:88:46:8f:78:e6:f7:4d:98:bb:16:2b:c6:1a:ba:79:aa:5d:
48:8e:f0:8a:d6:9d:a6:3a:65:3f:69:72:e3:b6:69:d1:b8:86:
d2:b4:ea:05:e7:81:14:5d:7b:b9:bf:40:f8:ea:2e:ab:02:e0:
c4:c4:37:b4:e1:80:ef:5b:88:48:fa:49:c0:64:8c:19:31:58:
39:bd:ee:c2:10:3a:fe:53:fd:c4:0e:61:5f:83:f4:20:80:6b:
8b:00:ef:e3:aa:dc:49:d5:23:83:3f:c6:c9:ba:f3:e6:50:e2:
c1:0c:f5:36:62:44:e1:a7:69:9d:1b:26:7c:ef:7f:91:c5:60:
7b:17:cb:70:28:39:5e:41:3f:2c:49:67:a9:2f:c2:b5:82:60:
83:07:4d:da:d0:c7:86:74:5d:09:18:a1:54:0b:1c:b4:5e:51:
5d:15:7b:98:12:e2:f5:25:3d:45:0e:34:c0:95:8b:d1:2d:ba:
13:f5:2d:aa:7b:86:82:3e:d3:b3:5b:8c:31:eb:0a:5f:a2:cd:
7d:c5:68:19:69:c7:b5:21:7e:26:de:50:fe:e6:44:b6:a9:95:
7c:dd:e6:18:51:28:94:21:cd:ff:22:61:5a:12:ab:a1:38:ed:
d8:35:07:85:b3:ce:52:c4:60:96:cc:05:f6:36:c7:fe:15:bc:
22:b1:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:58 2025 by rpki-client