Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/c5KTqi8Nppw4iBusDEEIOmLUG-E.roa
File: c5KTqi8Nppw4iBusDEEIOmLUG-E.roa (raw, json)
Hash identifier: P9QcxEVErHbCPZK93Fj+ercSMy5NY3qU2Mt1bLXX3+0=
Subject key identifier: 73:92:93:AA:2F:0D:A6:9C:38:88:1B:AC:0C:41:08:3A:62:D4:1B:E1
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 0199393764BBF42D9940BF5B8740B2FB10CC
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/c5KTqi8Nppw4iBusDEEIOmLUG-E.roa
Signing time: Thu 11 Sep 2025 14:39:15 +0000
ROA not before: Thu 11 Sep 2025 14:39:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206392
IP address blocks: 2a14:eb80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:37:64:bb:f4:2d:99:40:bf:5b:87:40:b2:fb:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Sep 11 14:39:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=739293aa2f0da69c38881bac0c41083a62d41be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:16:d7:16:7b:3f:34:33:67:cc:c1:23:b2:
ba:3b:5f:ca:fa:32:64:ea:1c:2f:8d:34:fd:c2:eb:
28:dd:07:e2:4f:84:4a:5b:99:96:cc:47:54:ff:07:
11:68:74:5e:c4:06:ce:fd:83:49:15:20:f1:98:ab:
63:8f:3d:1b:14:a5:9f:fe:ad:5b:6c:19:d9:ac:75:
93:28:dc:2c:10:04:31:03:7c:8e:26:08:fc:a7:2c:
a5:4e:65:24:6c:6d:ca:5e:aa:ae:24:1b:ae:26:b2:
84:a4:b5:34:41:4b:42:7b:db:d7:88:b5:3c:da:64:
33:dd:45:64:90:6a:59:f8:4a:95:21:bc:55:57:13:
f3:da:33:9e:19:0f:82:54:b2:30:8f:ac:f0:97:87:
3d:57:7d:10:00:e7:70:d0:31:3f:ff:a8:20:f6:fa:
ca:ba:74:05:80:2b:ab:4c:91:25:47:75:8b:13:b4:
eb:bf:cf:00:94:c7:ea:f8:f2:c2:cb:17:15:4a:43:
cf:9d:a5:32:63:df:f6:55:16:ff:28:f0:e2:64:62:
84:81:a2:c2:c8:26:1b:af:7c:75:cc:b3:ec:83:c2:
a4:2a:a2:7b:29:01:c4:ac:c3:13:d1:66:9e:f5:d7:
10:4c:eb:9e:ef:02:61:b9:db:13:f4:c7:d9:b7:e2:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:92:93:AA:2F:0D:A6:9C:38:88:1B:AC:0C:41:08:3A:62:D4:1B:E1
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/c5KTqi8Nppw4iBusDEEIOmLUG-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
79:6c:7f:ae:b5:00:f2:08:1c:e4:04:73:40:b3:db:46:ff:b3:
d7:fc:3f:4d:4e:c6:fe:86:22:56:a2:29:e3:c3:66:e1:39:ce:
11:a0:07:19:7b:e7:00:4f:fb:d0:69:77:8f:5f:15:4c:72:5f:
fe:92:c9:0c:53:ca:ef:6e:d9:54:9f:ef:ea:6d:0c:f6:48:34:
42:f9:4e:f6:1d:45:20:11:5e:19:af:ac:9a:b4:99:1f:54:fe:
66:58:92:68:b2:f8:8b:cd:b0:d1:41:f7:bb:2e:9f:17:19:55:
aa:a2:c6:84:a6:a9:bd:34:0f:82:a7:34:48:d1:dd:79:58:0f:
6a:e5:52:8d:e6:b1:95:92:5d:3c:ea:1d:26:d3:6b:6f:d8:31:
6a:91:ac:e9:34:89:ed:21:49:1b:08:cd:4a:b0:eb:c3:d9:34:
be:e0:65:1b:9d:fb:3e:ea:e8:96:cf:71:8f:16:c7:52:f2:2b:
6e:41:61:f2:55:a2:d6:dd:8d:78:1b:25:c6:ac:a8:c9:ca:31:
57:d1:95:09:05:c8:20:d9:f0:45:a6:87:6e:93:98:4a:8f:0a:
01:11:3a:b8:ab:aa:57:f1:ed:42:7f:6c:2c:c1:5e:78:08:6b:
c5:b3:31:b9:bf:b6:05:2b:e7:01:8e:b9:95:6d:7a:51:8d:6b:
d7:3b:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:30 2025 by rpki-client