Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/0u4sqokZjOQf7KaPCR38X232zpY.roa
File: 0u4sqokZjOQf7KaPCR38X232zpY.roa (raw, json)
Hash identifier: SoYNQnYaRwUS276ubIyzvGXTMikrkiTgadJnej2pwhs=
Subject key identifier: D2:EE:2C:AA:89:19:8C:E4:1F:EC:A6:8F:09:1D:FC:5F:6D:F6:CE:96
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0199CFB6B9227DE8F190C13EDC874919D22E
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/0u4sqokZjOQf7KaPCR38X232zpY.roa
Signing time: Fri 10 Oct 2025 20:01:22 +0000
ROA not before: Fri 10 Oct 2025 20:01:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215330
IP address blocks: 2a0e:4786::/32 maxlen: 32
2a0e:5cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:b6:b9:22:7d:e8:f1:90:c1:3e:dc:87:49:19:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Oct 10 20:01:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ee2caa89198ce41feca68f091dfc5f6df6ce96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:6c:0e:9f:77:02:25:86:3e:40:db:f9:cb:
15:34:f3:d7:43:44:8b:fa:79:3f:6f:7f:fc:87:be:
f2:39:97:18:4c:6c:0d:00:0f:47:80:ff:80:1e:9f:
03:e2:d8:77:d5:31:08:e8:5d:f1:99:8f:51:06:9f:
fb:33:90:bd:67:6f:79:da:4e:13:df:47:ec:31:ac:
eb:28:a2:86:6f:9f:f0:a3:3e:21:2d:ad:c8:ec:cd:
79:4d:48:6c:cd:de:ff:63:f3:c3:03:c4:da:b5:22:
32:b1:d5:db:d3:ef:a9:c2:96:5d:e7:f9:97:93:25:
ac:50:65:06:c1:c6:40:63:59:2d:22:e6:40:b3:36:
20:4c:03:15:90:f3:ba:72:fb:df:5c:ee:b1:a6:91:
14:28:bc:5c:1d:15:50:b6:e8:87:0a:3b:3f:44:05:
1b:8f:fd:18:02:89:02:28:3a:11:c2:01:ad:a5:ff:
53:70:3a:5f:56:9e:9d:62:25:c4:a0:b6:81:f0:ec:
1a:3e:51:cb:e9:48:ed:94:7d:78:5c:8c:af:e5:80:
84:9b:1a:b3:c0:49:66:f7:a2:fd:16:ce:bd:f4:73:
3e:8c:e2:bc:c1:e8:cd:a3:e3:86:e6:ad:15:51:7e:
7e:8e:78:a4:0c:27:42:5b:b0:9b:c4:bf:61:30:a3:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:2C:AA:89:19:8C:E4:1F:EC:A6:8F:09:1D:FC:5F:6D:F6:CE:96
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/0u4sqokZjOQf7KaPCR38X232zpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4786::/32
2a0e:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
56:16:c9:68:50:de:8a:20:a0:01:b9:c5:51:05:13:0e:6e:0a:
f2:5b:ab:8a:16:71:8d:96:dc:d3:5e:94:53:0c:80:a2:93:ab:
27:8c:03:23:9c:0b:e9:fa:e3:ae:43:37:03:8d:86:65:ef:7d:
06:d3:2c:4a:39:22:2e:f7:da:47:de:64:d3:04:0f:3e:f1:f9:
40:9e:cb:15:0d:35:cd:83:4a:8a:7c:b6:ff:6d:36:28:99:a2:
a3:1b:69:23:bc:76:92:48:71:9e:1b:d3:ac:2d:30:74:95:39:
96:fb:5c:99:a3:b6:e1:7d:11:4b:b5:9a:bf:0f:e9:ff:4c:fb:
03:64:82:0d:a8:77:73:e8:fb:24:01:07:9a:5b:ac:bf:37:96:
b6:52:54:1b:3f:f5:cd:4c:88:2c:4e:03:99:a6:9e:bb:c2:63:
5c:65:84:9f:fe:5b:29:49:16:ad:ce:5f:50:31:ec:8e:9e:2b:
26:41:e3:9d:83:c0:33:60:8d:65:02:6f:9f:44:4e:b1:c3:b5:
80:7d:01:69:e2:52:21:fc:75:de:65:2c:b0:07:05:22:3c:02:
7e:b0:c7:a6:ae:2e:8b:6c:36:d1:d5:e9:17:ea:12:96:dc:75:
d3:00:a9:8f:e8:26:1e:7b:3b:c0:26:0f:63:33:37:f6:01:6e:
a2:fb:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:31:23 2025 by rpki-client