Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/L6E0N5We5qeZ-y9d2NJMforAByY.roa
File: L6E0N5We5qeZ-y9d2NJMforAByY.roa (raw, json)
Hash identifier: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=
Subject key identifier: 2F:A1:34:37:95:9E:E6:A7:99:FB:2F:5D:D8:D2:4C:7E:8A:C0:07:26
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 01988B880ADD4284C70E37FE961896659C1A
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/L6E0N5We5qeZ-y9d2NJMforAByY.roa
Signing time: Fri 08 Aug 2025 21:13:25 +0000
ROA not before: Fri 08 Aug 2025 21:13:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 158.94.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:88:0a:dd:42:84:c7:0e:37:fe:96:18:96:65:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Aug 8 21:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fa13437959ee6a799fb2f5dd8d24c7e8ac00726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:a9:78:3e:b1:f7:9d:7e:7f:c6:d2:ed:52:
fa:4f:61:da:31:98:41:2f:2e:15:0b:c9:80:c4:07:
32:62:ab:62:33:70:b2:b5:d3:1a:77:f8:10:60:db:
89:26:9c:39:76:cb:2d:6f:6c:1a:e8:25:ca:fb:39:
25:e9:28:7a:00:79:a5:ff:b6:e9:4d:20:82:5d:40:
63:bb:1c:36:c1:34:29:86:b2:19:d5:9d:23:1e:a8:
fd:ff:92:26:a3:99:ed:02:fe:87:bf:6d:79:94:48:
25:60:10:cf:26:38:a3:39:bc:a5:e9:52:75:c7:a2:
96:f6:a0:72:15:70:81:5c:e4:00:e7:ae:73:96:be:
25:c0:ec:41:b8:4c:da:23:55:9e:41:87:f4:bf:0e:
4d:04:0b:f0:b6:4e:4e:c5:68:5d:35:1b:c7:60:b8:
e2:eb:f5:50:f8:f7:d8:26:9f:cf:f8:f0:eb:a2:75:
e9:ae:81:23:6f:e8:b8:a2:f1:a5:e7:ca:b8:60:8e:
2a:4c:29:f4:15:ed:68:43:52:50:a4:15:3f:ba:ab:
23:e1:aa:8d:7f:34:c5:91:51:45:d1:0b:fc:b5:b5:
6f:08:17:48:c3:ae:e8:d4:73:e5:13:8e:34:f1:a5:
36:f6:74:f7:85:3c:b2:f9:a2:47:8a:9c:ba:ca:17:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:34:37:95:9E:E6:A7:99:FB:2F:5D:D8:D2:4C:7E:8A:C0:07:26
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/L6E0N5We5qeZ-y9d2NJMforAByY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:d9:a9:0a:d4:bf:cc:bf:8a:a5:5c:5f:15:59:a8:5b:69:af:
ac:4e:4f:62:de:c2:32:d7:8e:db:dd:a6:2c:da:20:dc:21:b1:
ec:90:87:82:a6:4c:32:8c:c5:3d:88:27:e7:b3:f2:1f:1b:03:
53:5b:77:dc:a5:98:30:24:57:dd:47:06:ec:f7:7e:c3:1e:d4:
f9:24:3a:f9:29:83:a0:c1:73:82:fa:ee:36:3d:e0:71:59:75:
de:e8:45:0d:11:56:4f:ca:74:7b:bb:10:a3:57:d8:bb:cc:e4:
63:8d:b7:99:cc:9f:b4:76:f4:a5:4f:d3:fb:40:e0:6c:bd:67:
4e:a7:a4:19:84:95:55:24:a4:e1:9d:68:23:36:3a:21:1e:4d:
14:94:2f:86:fa:57:37:09:0f:8c:67:72:b1:7a:22:63:94:7f:
25:e5:5b:88:5d:47:a9:c7:eb:b7:27:b0:86:ad:cb:20:fa:14:
da:4d:7c:f0:ef:ea:4e:6d:50:ad:a3:7d:7b:ab:01:a3:dd:c9:
8b:11:56:46:bc:1a:9f:94:28:33:a0:3e:e6:1a:76:44:1d:ee:
31:4b:cd:88:d0:b6:81:c0:49:59:1e:22:26:6b:7f:4d:3e:34:
7e:aa:a2:9d:98:56:58:82:9e:e1:89:51:9a:90:2c:76:98:95:
19:86:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:32:20 2025 by rpki-client