Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uQUwmqsLj0U3KwuONWjPJwlPoM0.roa
File: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (raw, json)
Hash identifier: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=
Subject key identifier: B9:05:30:9A:AB:0B:8F:45:37:2B:0B:8E:35:68:CF:27:09:4F:A0:CD
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 0199ED796231C96C55257EAD5139F60FEAB7
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uQUwmqsLj0U3KwuONWjPJwlPoM0.roa
Signing time: Thu 16 Oct 2025 14:42:59 +0000
ROA not before: Thu 16 Oct 2025 14:42:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 967
IP address blocks: 2a0e:df80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:79:62:31:c9:6c:55:25:7e:ad:51:39:f6:0f:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Oct 16 14:42:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b905309aab0b8f45372b0b8e3568cf27094fa0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:16:50:fa:f5:ca:76:3b:f5:46:b3:72:f5:
e0:a1:a6:d0:bf:12:cb:18:63:ea:47:94:dd:6b:47:
11:f6:81:62:11:a4:eb:f3:b6:8a:8e:ed:0a:8a:37:
e5:3b:9c:cd:28:db:c0:13:fb:2b:48:24:6f:b8:ae:
04:f4:88:cd:f4:01:fc:0b:53:cc:f9:31:11:e7:91:
aa:6b:18:d9:36:2e:ba:94:9a:c4:80:a5:b9:1b:bc:
1e:b8:53:ac:fe:d6:82:9e:cd:62:55:1d:d4:09:b3:
30:1c:a6:44:ef:97:65:7f:9c:81:60:f4:e0:99:05:
2c:75:f9:38:b7:4a:ab:38:30:99:93:5c:ac:1d:7d:
b4:98:ed:5f:d3:f1:06:6e:9d:58:f6:83:5e:8e:fa:
dd:f4:4a:d5:68:da:21:5f:8d:e1:38:99:a0:41:dd:
6a:93:c4:96:16:70:ad:46:3c:9e:49:b8:97:dc:5c:
cb:12:14:cb:9d:8d:2c:28:82:a7:f5:0a:ed:76:0e:
ed:45:a3:fa:30:2f:fe:93:65:f8:3a:87:e0:ab:96:
0e:40:26:42:9e:05:f3:d3:4b:e7:e4:e7:9e:7b:9f:
8d:f5:c9:30:af:0b:69:e0:e2:52:4b:82:0a:c1:64:
74:fc:5a:07:a1:a4:19:69:8f:26:f6:c1:98:f1:ff:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:30:9A:AB:0B:8F:45:37:2B:0B:8E:35:68:CF:27:09:4F:A0:CD
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/uQUwmqsLj0U3KwuONWjPJwlPoM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:df80:a::/48
Signature Algorithm: sha256WithRSAEncryption
6f:9f:eb:32:57:a1:06:a8:fa:e2:c4:ea:f3:6b:8f:aa:4f:85:
e2:57:1d:40:3b:f0:cc:78:9d:95:47:50:ce:c9:a9:bd:50:26:
c6:94:90:92:ea:ef:27:7b:93:bd:97:94:16:ea:f0:86:36:a0:
dd:45:b1:2a:e3:b2:e8:42:b4:31:2b:ba:20:74:da:bc:f9:e9:
18:58:9c:e0:5e:bf:51:2c:f1:eb:cd:c9:e5:3b:ac:d1:13:41:
11:21:9a:f3:0a:aa:e5:a2:4f:cd:05:59:10:55:fd:e8:de:74:
cb:38:c9:06:54:dd:4d:52:ce:f0:9b:f0:61:20:48:68:2d:f0:
cd:ed:a0:54:aa:e5:83:7b:0a:5f:e9:45:f1:c3:c8:81:53:8e:
a1:75:76:1f:f5:ad:3e:13:3f:50:65:e1:37:e1:40:05:17:ac:
49:55:0c:8a:9d:5c:c1:99:26:af:a7:c2:70:1b:81:a9:62:4b:
8b:73:45:b3:f7:a8:e8:9c:33:52:5a:0b:49:bf:b7:ad:db:c4:
32:61:e1:ac:ee:1c:02:9d:b9:db:93:fc:aa:ff:14:51:6d:18:
2f:f5:98:2d:c5:78:0e:35:91:1c:eb:00:89:f6:3f:2d:f0:46:
30:4f:42:bb:53:4a:16:17:ba:a8:d6:76:d6:01:7f:7f:a5:61:
59:b6:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:08 2025 by rpki-client