Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/eiCYc7LGel4A0s7nCbJtNFosupQ.roa
File: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (raw, json)
Hash identifier: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=
Subject key identifier: 7A:20:98:73:B2:C6:7A:5E:00:D2:CE:E7:09:B2:6D:34:5A:2C:BA:94
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 0199C3121F0CC21A0D9B775EED3B020CD141
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/eiCYc7LGel4A0s7nCbJtNFosupQ.roa
Signing time: Wed 08 Oct 2025 09:06:08 +0000
ROA not before: Wed 08 Oct 2025 09:06:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205399
IP address blocks: 2a0a:e080::/29 maxlen: 29
2a0b:e8c0::/29 maxlen: 29
2a0d:ae00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:12:1f:0c:c2:1a:0d:9b:77:5e:ed:3b:02:0c:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Oct 8 09:06:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a209873b2c67a5e00d2cee709b26d345a2cba94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:c5:a0:4d:52:11:35:ee:05:b9:2c:8f:ca:
a8:65:2f:f3:7d:af:8a:0a:77:4b:1b:a5:34:0a:68:
63:a1:ed:ff:b4:52:6f:8f:bc:a3:ed:f9:9a:a8:9f:
d1:1a:5e:14:4d:1d:82:a9:84:8e:b5:5a:67:61:02:
7f:4c:09:5e:fc:eb:e5:b7:8c:5c:84:88:f6:ee:09:
a9:34:16:08:2e:a4:99:1f:3d:09:4b:d4:9f:18:cc:
d7:1c:9c:04:79:32:97:9a:ba:01:97:d2:19:52:41:
fe:73:da:37:45:f5:a3:49:ac:a9:4a:21:75:19:89:
8a:72:d9:9b:70:12:ed:e7:25:ca:3f:8a:97:af:b5:
57:15:2c:d0:67:58:16:38:47:b3:fc:1c:e1:07:0e:
fe:be:84:20:3e:00:59:42:b8:01:94:a8:84:84:d4:
db:e2:d0:97:96:de:98:a8:5c:6d:bf:1f:3f:01:bd:
56:20:70:07:42:d9:a2:2e:ac:c5:03:81:c0:36:e9:
4d:57:0b:a0:ff:f0:e4:10:45:4c:cf:4c:1f:1e:aa:
68:24:61:9c:26:ec:25:da:33:58:8f:b0:9e:78:bb:
58:49:5a:65:15:73:ef:95:49:fb:aa:51:11:a1:4f:
09:37:5f:24:dc:9f:11:1d:cf:45:ce:77:d6:4a:11:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:98:73:B2:C6:7A:5E:00:D2:CE:E7:09:B2:6D:34:5A:2C:BA:94
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/eiCYc7LGel4A0s7nCbJtNFosupQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e080::/29
2a0b:e8c0::/29
2a0d:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
76:39:b9:75:cf:60:22:ee:23:b0:f5:b9:2d:dd:5f:0b:98:96:
25:74:43:87:f7:20:32:bc:31:f3:53:c3:a0:66:e7:ed:67:72:
06:11:87:67:e8:65:8b:0f:12:74:a7:0c:7d:60:6a:4a:4a:f4:
29:b3:ed:20:d1:7f:f1:25:3b:2a:d4:e3:e7:93:fd:fd:e2:ca:
3a:02:cf:8b:16:75:9b:0f:7c:a5:19:cf:17:a9:08:d4:cf:e7:
8e:99:a9:ec:62:ed:12:03:40:ff:45:2b:74:67:d2:5c:68:30:
b0:6d:01:a9:18:59:f8:d0:bb:fb:33:88:de:9b:9d:8a:6f:3c:
05:e7:7f:a5:0f:f5:2d:b1:e3:ff:73:46:81:de:6e:f5:49:3f:
0b:0a:77:9f:cd:c2:ef:81:da:df:21:f5:3a:d1:f7:65:01:ed:
d4:80:f7:5f:f7:e0:7e:cc:61:56:75:4d:ed:69:f0:b3:a2:f0:
31:f8:90:6e:03:2a:43:76:fe:55:42:a8:b9:1a:ba:6f:1f:54:
8d:32:6a:4c:ea:42:0a:a8:7c:0d:4a:bd:dd:86:81:55:a8:b0:
40:5c:9a:96:a6:7c:de:4b:89:d7:81:3b:17:e4:00:81:23:33:
ea:48:1b:a3:18:8e:c4:0e:f7:c5:e1:a4:f7:bb:b2:80:55:f7:
31:37:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:06 2025 by rpki-client