Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/_xZGSYeoZPiZm7mgnuw9tHP_mKI.roa
File: _xZGSYeoZPiZm7mgnuw9tHP_mKI.roa (raw, json)
Hash identifier: uB1FVuxaKohE/X+ir1/pelecF7ew6K8ZJNCpRq5oAHw=
Subject key identifier: FF:16:46:49:87:A8:64:F8:99:9B:B9:A0:9E:EC:3D:B4:73:FF:98:A2
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0199BA0D09D953E65A875CA19C8C129ED4C7
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/_xZGSYeoZPiZm7mgnuw9tHP_mKI.roa
Signing time: Mon 06 Oct 2025 15:04:00 +0000
ROA not before: Mon 06 Oct 2025 15:04:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a0e:7340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ba:0d:09:d9:53:e6:5a:87:5c:a1:9c:8c:12:9e:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Oct 6 15:04:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff16464987a864f8999bb9a09eec3db473ff98a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:3a:0f:43:5c:98:03:54:d1:fb:fc:bf:e7:
b3:54:28:e0:5f:b9:1d:25:fa:ba:ae:ae:a0:c3:10:
c9:48:18:b7:09:b0:9f:a7:ae:16:74:88:9e:33:44:
09:21:68:dc:07:e5:f9:73:88:7c:5a:39:9b:03:1d:
41:1d:8d:39:fa:a4:67:32:9a:0b:88:43:c4:26:65:
70:c1:3d:a1:d9:17:e5:65:d7:83:fa:fe:53:5d:e7:
9b:b2:40:b9:af:9f:01:14:80:ed:d9:71:5c:2f:ce:
a5:48:99:a4:b5:d0:4a:a1:1a:2c:c9:5e:a5:b2:cc:
24:6e:93:e8:6e:08:cb:90:d8:8c:85:ef:c6:90:e9:
a9:4b:19:d7:11:57:26:09:14:6c:f2:19:c6:07:4d:
10:bd:44:1f:3a:89:1d:f7:92:e0:d1:00:ed:88:12:
1c:f1:e5:76:07:c4:31:d4:d0:9c:2c:f4:36:51:aa:
bd:8a:c2:74:9c:47:b5:93:23:b7:e3:09:c0:5e:50:
e7:93:a2:72:f5:0b:dc:3c:06:5f:5e:4b:ad:60:ed:
b3:6f:ea:a2:9b:ba:21:24:0a:4f:f6:d7:fa:8e:d5:
b5:5d:7a:3e:1c:ca:b9:7b:21:d9:fc:84:42:a9:6d:
3b:c2:28:7f:35:bd:13:0a:a3:3d:2f:69:c1:37:bf:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:16:46:49:87:A8:64:F8:99:9B:B9:A0:9E:EC:3D:B4:73:FF:98:A2
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/_xZGSYeoZPiZm7mgnuw9tHP_mKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7340::/32
Signature Algorithm: sha256WithRSAEncryption
23:6b:ab:fb:de:3e:a0:50:bc:76:05:ae:1d:59:37:2b:4a:30:
a5:64:fe:d1:6d:e9:3d:60:b3:50:d2:35:2d:32:c3:ce:a9:4d:
7d:21:49:19:06:35:5e:21:a5:e0:45:71:5b:ec:12:30:8d:02:
1a:ed:88:7f:a2:71:70:ca:58:e4:57:97:32:5f:f4:3d:42:23:
62:41:6c:f0:4e:fb:69:b0:e6:10:8f:97:16:2a:02:06:a5:d9:
f9:cf:e4:76:b1:eb:22:c1:14:ad:3c:42:72:b1:cb:4f:f2:e5:
11:8f:26:bc:de:9b:0b:b7:8b:60:ce:7c:bf:6c:28:51:39:ba:
ae:6e:94:b2:07:e9:30:9c:3e:69:7c:00:26:01:21:af:ff:75:
17:44:72:f7:c0:ff:64:a0:54:2b:ca:5b:df:09:c3:df:9a:1b:
97:e8:3a:25:b9:a2:22:93:66:e9:2a:c4:a9:18:b3:25:51:11:
3b:79:fc:91:f0:04:51:a5:63:95:7c:f8:f4:00:9c:a4:db:9c:
f5:8d:f6:22:78:ed:37:e8:93:f9:95:6f:be:0b:27:20:f9:79:
29:90:ed:f7:2f:29:a6:27:8b:a6:f3:a5:92:64:cc:a5:d1:50:
7e:2d:54:96:24:04:03:e9:8a:e2:99:78:89:3f:4d:d8:1f:2e:
7a:c9:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:29 2025 by rpki-client