Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i2965lH3kudzFJ_D-tn_Pbrlvvw.roa
File: i2965lH3kudzFJ_D-tn_Pbrlvvw.roa (raw, json)
Hash identifier: QPWdEA5X+fEsL6iA0S0GfoVwOTvachz8pMvapMkISrA=
Subject key identifier: 8B:6F:7A:E6:51:F7:92:E7:73:14:9F:C3:FA:D9:FF:3D:BA:E5:BE:FC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0199FC6D33459017124F3085A4F060C0F9FE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i2965lH3kudzFJ_D-tn_Pbrlvvw.roa
Signing time: Sun 19 Oct 2025 12:23:58 +0000
ROA not before: Sun 19 Oct 2025 12:23:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:6d:33:45:90:17:12:4f:30:85:a4:f0:60:c0:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 19 12:23:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b6f7ae651f792e773149fc3fad9ff3dbae5befc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:00:79:71:24:17:dc:e4:78:29:5f:bb:47:
1e:96:31:b7:b1:0d:31:9e:23:38:c5:9c:4a:79:8a:
6c:81:e0:0c:fe:98:a4:f7:38:fd:93:ad:4c:ea:22:
1c:58:a3:fd:93:1b:96:63:96:c7:af:30:2a:e9:d3:
b0:ca:3a:64:f9:34:42:42:d9:aa:80:23:95:d9:94:
78:09:e0:c0:4a:6f:f7:c3:07:de:00:88:72:22:e5:
cb:fe:9f:31:c1:67:16:17:c7:a8:2b:0d:b1:3a:bf:
69:9b:9f:78:c3:da:36:f4:9f:68:86:7b:e9:03:56:
9a:00:17:d1:a0:6b:c8:a3:9f:2d:27:ea:12:ec:ea:
8d:13:44:06:f0:7a:20:cb:a4:eb:5d:f0:cb:ed:b5:
b3:21:2f:59:1b:bd:78:18:0f:21:f8:db:ed:df:ab:
d3:0f:a3:b6:d4:ba:e7:e0:06:0d:7c:23:70:0f:72:
2f:16:60:93:09:4c:9f:1d:4b:02:77:3c:04:2c:43:
a7:e5:52:9f:4c:77:cb:6c:27:d8:22:a5:f0:34:d2:
8a:4e:5a:a5:e9:f7:17:1e:3c:f2:70:8e:a4:25:b9:
3b:13:4e:e4:be:1f:59:d5:d8:61:45:51:95:55:c3:
72:f9:15:6c:b1:ad:7d:7c:67:cd:bb:92:59:46:16:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6F:7A:E6:51:F7:92:E7:73:14:9F:C3:FA:D9:FF:3D:BA:E5:BE:FC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/i2965lH3kudzFJ_D-tn_Pbrlvvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
17:41:60:3e:43:44:ba:27:6b:37:74:de:9a:57:b4:90:90:96:
00:e5:0a:6c:4e:bd:29:7f:c3:b8:37:f9:d8:ff:c1:10:76:50:
cc:39:4b:29:77:7d:95:29:6f:1a:04:34:36:2d:d6:31:99:54:
15:32:60:ec:5b:cb:99:d4:ed:af:35:4e:07:7c:d7:77:7f:98:
e6:08:3b:c4:5e:93:a1:06:ce:3a:45:e0:76:69:34:31:9a:45:
a4:d6:0c:3f:24:6e:8a:6b:e6:f3:08:3c:1e:97:3e:38:fc:4f:
fd:42:f4:45:05:7f:58:13:6d:4b:e2:9c:ad:c1:b6:c6:f5:be:
54:c0:93:89:fd:1c:ad:99:3e:f4:bd:cb:1e:ea:54:94:93:5f:
57:a5:45:60:eb:3e:39:06:57:60:c0:fb:9a:77:6f:a1:c4:50:
ce:c7:c3:3e:e0:cd:82:d0:50:a6:1a:8c:1c:13:bf:fb:7b:70:
3a:46:fe:04:07:73:f8:5b:15:d1:89:3f:da:cd:93:93:6d:8b:
11:90:c9:5d:11:41:88:aa:a5:2a:cb:25:0d:40:5d:96:74:70:
84:08:d9:5e:89:42:ac:f9:d8:53:d7:2b:48:cf:a1:51:38:00:
0f:a4:bd:a1:7a:af:4f:f2:83:27:76:3a:5a:81:8a:df:54:70:
53:c2:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:12:46 2025 by rpki-client