Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa
File: 3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa (raw, json)
Hash identifier: vAEGRwBdpnrHv/YkIQBOy6F594hqpTCRBhtvpnyCndE=
Subject key identifier: DD:EC:EF:91:B3:58:94:00:0F:4D:3B:62:32:93:1F:01:78:B5:31:97
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019947D17DF43189EBA0DBACC3C63CE912AB
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa
Signing time: Sun 14 Sep 2025 10:42:15 +0000
ROA not before: Sun 14 Sep 2025 10:42:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211970
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
2a04:2dc0::/48 maxlen: 48
2a04:2dc0:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:d1:7d:f4:31:89:eb:a0:db:ac:c3:c6:3c:e9:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Sep 14 10:42:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddecef91b35894000f4d3b6232931f0178b53197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:2c:7e:b5:db:4a:59:b7:a2:8a:d6:23:3d:
a4:07:ac:2b:7c:c9:21:8d:f4:00:f7:9d:ba:29:8a:
dd:65:c8:45:eb:98:cc:58:c4:d4:78:c0:1b:15:c1:
9d:70:78:eb:6a:ff:33:21:d0:5b:b7:93:9e:40:ed:
0c:e4:99:a4:49:4e:67:83:44:5c:f1:fe:a0:74:50:
0e:2e:0d:15:8d:8d:fd:90:f8:9e:c3:4d:c3:20:29:
ec:17:ad:8a:58:ef:e8:01:ca:91:b2:f3:5c:d3:3d:
28:f2:bb:34:a3:ed:a7:90:c1:a0:ad:49:46:b9:3a:
0e:ab:c3:8f:12:e8:39:b3:9c:6d:78:b0:cf:ec:0a:
69:5f:ab:a8:be:8f:dd:60:4c:3f:dd:bc:19:55:9b:
da:f1:0b:c0:88:44:bd:f0:0b:ee:c8:b4:aa:13:36:
3a:5e:37:62:6e:57:b3:96:99:3a:4e:96:4a:4a:2b:
1d:3f:8e:da:e1:ee:15:7c:73:0a:0a:4e:74:dd:2e:
0e:6f:16:95:e6:7c:ad:d7:fa:74:9e:e7:e6:cf:a1:
1e:ee:e8:7b:0e:29:59:53:d8:84:44:5d:67:4b:a0:
6f:22:e6:e1:eb:ad:41:33:f2:e9:a4:67:e9:b2:0a:
67:6c:6d:c6:62:b4:15:23:58:26:26:06:0b:e4:0d:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EC:EF:91:B3:58:94:00:0F:4D:3B:62:32:93:1F:01:78:B5:31:97
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/3ezvkbNYlAAPTTtiMpMfAXi1MZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0/24
212.126.115.0/24
IPv6:
2a04:2dc0::/48
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
8b:47:d0:50:c8:fd:20:66:c9:4e:02:27:3d:2f:23:b8:a3:1e:
46:3e:ec:1e:b9:4b:fb:6e:b1:ec:49:b0:b5:c3:07:09:82:58:
a1:29:96:a2:35:43:f7:94:44:d5:29:95:18:0e:18:49:ec:24:
4a:47:7f:6c:4a:de:88:0f:5c:21:ad:a4:67:ad:34:f9:9c:80:
87:db:d6:2b:0e:f9:51:b8:70:d9:0e:cf:57:8e:79:45:2b:bb:
a9:aa:0a:7b:ba:16:71:a8:14:4a:5e:aa:d7:b7:30:50:49:ad:
23:ea:ca:d1:db:35:49:6b:8c:42:20:4a:2b:bf:7c:86:8d:27:
23:6c:fa:bd:fd:8f:ff:27:dd:b7:0c:4d:29:cd:fb:e2:63:3f:
ab:33:ff:1c:03:2b:39:ab:37:c4:f2:85:0e:70:c7:61:96:79:
3f:1b:18:11:e7:d6:76:0f:3d:a4:69:d9:f5:85:f5:68:92:2d:
10:14:7a:b0:d7:4a:7b:8f:40:f8:33:77:53:c7:b0:ac:96:56:
5e:f5:ef:f7:5d:55:9a:93:0c:ac:9e:31:42:ef:19:26:86:78:
e7:42:12:4e:e9:7c:0a:85:68:5e:ca:cd:d1:47:07:e3:e3:43:
b2:51:2c:11:df:c0:01:54:da:af:05:16:3e:1e:08:c5:bb:ed:
b2:be:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:00 2025 by rpki-client