Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/gHW5tPxE-lIEUimHj9qBz3_MhZ8.roa
File: gHW5tPxE-lIEUimHj9qBz3_MhZ8.roa (raw, json)
Hash identifier: XnbNcAJ1rbX9PryG7T67Z1+8xQS2Dvry35WjQBKZEY8=
Subject key identifier: 80:75:B9:B4:FC:44:FA:52:04:52:29:87:8F:DA:81:CF:7F:CC:85:9F
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 0199CFBA9E9C0799978A1208BBB28D1752BF
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/gHW5tPxE-lIEUimHj9qBz3_MhZ8.roa
Signing time: Fri 10 Oct 2025 20:05:38 +0000
ROA not before: Fri 10 Oct 2025 20:05:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205828
IP address blocks: 2a09:bc00::/32 maxlen: 32
2a11:6541::/32 maxlen: 32
2a11:6d06::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:ba:9e:9c:07:99:97:8a:12:08:bb:b2:8d:17:52:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 10 20:05:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8075b9b4fc44fa52045229878fda81cf7fcc859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:21:4e:ec:1e:f6:41:17:cb:5a:71:3f:2b:
2b:83:87:c6:db:e3:cf:a4:1b:b3:49:66:87:e7:6b:
96:c6:c0:99:f6:4f:b3:3a:58:45:ad:34:56:47:3b:
9a:ef:1e:8f:83:0d:ee:ff:0f:c6:d5:9d:9c:10:59:
68:bb:7a:0b:17:fe:41:4c:f8:1d:49:f3:4b:18:96:
9e:4b:c1:62:de:ff:c5:e7:a0:33:fe:9c:18:b5:e7:
79:71:61:93:3e:90:f5:f2:e9:06:1b:24:b6:27:5a:
d7:e1:2a:34:27:ba:48:13:e2:d9:3e:48:9e:bb:4a:
48:0a:dd:a9:e5:74:6e:44:29:3e:02:0f:4c:7e:fc:
25:d2:69:a3:18:0d:9b:79:55:ab:27:62:5d:c1:ca:
3b:fa:d9:fd:c3:8b:e9:4d:d7:4b:f7:75:0d:55:d9:
d7:34:75:3e:b2:ba:c3:db:ca:45:50:de:3f:a8:c1:
5a:59:cc:5d:c5:d3:c7:88:af:79:5f:19:61:17:c6:
0b:81:05:2e:cd:70:4a:65:8d:7f:5f:e7:f6:ab:c4:
fa:d5:ad:24:51:42:4b:09:7d:3f:e2:ad:86:27:84:
b4:89:ad:3e:20:d2:72:c0:59:46:33:43:6c:44:65:
c1:a9:02:f7:4e:2d:e0:3b:3f:d5:53:67:21:5d:00:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:B9:B4:FC:44:FA:52:04:52:29:87:8F:DA:81:CF:7F:CC:85:9F
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/gHW5tPxE-lIEUimHj9qBz3_MhZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bc00::/32
2a11:6541::/32
2a11:6d06::/32
Signature Algorithm: sha256WithRSAEncryption
26:4e:62:51:e1:e8:9b:51:7f:cf:6d:5f:42:18:6d:06:7c:92:
63:4c:79:f2:dc:b0:67:4e:b9:47:b4:3a:82:4e:a2:36:30:ea:
ff:cb:db:24:4f:ff:7f:b5:a3:78:94:9e:51:5b:ca:9c:b4:f3:
04:59:90:fb:9b:d8:13:28:9f:9f:37:8f:1e:c3:34:09:dd:2f:
82:65:ea:60:66:18:e2:9e:60:bb:95:5a:41:0b:85:b9:dc:ee:
ae:a8:22:7a:6d:89:86:8d:2f:09:66:e4:90:8a:1c:bd:ea:ed:
28:82:4f:fe:ba:7a:59:e9:aa:17:f4:4d:32:7b:49:b5:99:29:
e9:16:a4:7c:b2:bd:d5:af:c1:b7:e0:af:e3:86:8c:5f:46:5f:
ab:54:e7:c6:e3:c8:64:00:97:47:01:92:06:d1:4b:27:ea:58:
3f:bf:bc:5c:8a:c3:43:c8:73:bb:a2:71:3a:65:8f:77:05:99:
e1:9f:67:47:9d:1d:35:6e:38:eb:a6:19:af:c6:4a:7c:8b:5f:
2e:87:73:f2:2e:9d:34:b8:02:d7:e6:da:be:73:ec:48:41:15:
81:ac:31:fd:c4:da:70:8d:a3:b9:b7:62:da:ed:3f:b8:3c:5f:
ea:9c:e1:d6:82:cb:66:3a:5c:3c:0c:bc:12:4f:dd:60:9b:5d:
39:f9:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:58 2025 by rpki-client