Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5CGtQL973hWxoYKAtsumc3xK1H0.roa
File: 5CGtQL973hWxoYKAtsumc3xK1H0.roa (raw, json)
Hash identifier: u+FeM/nZ8eqi2mq7mgFp2YjnmqFn6I2Pmq6KJhDMHvg=
Subject key identifier: E4:21:AD:40:BF:7B:DE:15:B1:A1:82:80:B6:CB:A6:73:7C:4A:D4:7D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01994F2569F30353815550745D747F755872
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5CGtQL973hWxoYKAtsumc3xK1H0.roa
Signing time: Mon 15 Sep 2025 20:51:15 +0000
ROA not before: Mon 15 Sep 2025 20:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205539
IP address blocks: 2a12:bec4:1ce0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:25:69:f3:03:53:81:55:50:74:5d:74:7f:75:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 15 20:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e421ad40bf7bde15b1a18280b6cba6737c4ad47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:73:21:f7:50:7c:be:5e:5b:4c:83:3e:74:
43:cf:fe:42:2f:6c:7d:f6:9b:ae:d2:4d:a6:f0:97:
e2:06:00:55:fe:20:80:58:38:b8:21:bb:28:a8:71:
6f:cf:10:6b:83:32:64:d9:09:09:0d:3f:ba:76:d3:
75:27:ac:0b:b9:f0:d1:38:75:62:3f:a9:51:b5:13:
95:3f:c6:7a:00:eb:56:8d:d9:bd:47:dd:4c:03:3e:
56:8f:7c:75:9f:f3:26:5f:5f:24:e1:b2:47:0a:9d:
99:36:f4:a2:e0:0c:3e:41:a7:f0:89:74:7c:36:16:
23:21:6d:0d:2f:a4:b1:d7:5b:af:8d:9c:d9:0c:75:
91:9e:86:d8:68:71:2c:eb:4b:45:25:b8:ab:3e:6c:
59:80:19:a1:30:a6:b0:0b:29:75:c5:d2:22:19:c1:
d6:76:65:91:fd:eb:6f:47:22:e3:c8:85:64:cd:6c:
a7:59:26:b8:5d:d2:8c:d5:1d:d6:71:df:3a:dd:c4:
b0:3d:ee:2b:5a:ff:71:fe:7f:69:76:74:c6:d3:89:
c2:6b:44:32:f7:35:3c:90:2b:31:0c:87:46:0b:57:
e1:3f:08:d0:5d:37:93:4f:7e:be:d6:da:8b:cc:34:
3c:5e:05:7a:58:bb:9a:ae:5e:46:c6:d2:2f:b2:e8:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:21:AD:40:BF:7B:DE:15:B1:A1:82:80:B6:CB:A6:73:7C:4A:D4:7D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5CGtQL973hWxoYKAtsumc3xK1H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1ce0::/48
Signature Algorithm: sha256WithRSAEncryption
b2:b5:35:2d:d1:f0:9c:dc:3d:36:c1:dc:71:04:f5:7b:6f:dc:
5a:05:b9:f8:d2:0a:29:80:b3:81:5d:80:24:8b:c2:82:3e:2b:
59:f2:fa:c5:f5:d2:43:e6:e0:a2:54:5b:f6:26:b7:82:f2:54:
45:99:ca:5c:ab:b8:aa:91:50:51:47:a6:ce:03:7e:77:9d:d1:
08:70:0e:8f:14:64:75:33:cb:92:84:94:2b:be:e9:37:e8:4b:
80:aa:50:14:c0:7a:a4:a5:4b:2a:f2:dc:09:63:ab:40:68:26:
54:cd:56:e8:51:35:2c:9a:49:e2:e7:16:a7:8b:6d:48:13:5b:
d6:66:dd:c0:c0:29:b8:be:50:74:9f:f9:b5:b7:5c:0d:0b:60:
d2:20:a5:57:ba:59:6e:9b:8f:53:2b:2b:5a:fc:99:a7:ea:ee:
f7:40:6d:9b:d9:9e:49:c4:88:f4:da:74:ff:ae:6f:5e:c9:e7:
b3:54:a2:6b:54:83:8b:4c:f9:cd:90:fc:b7:19:21:ae:81:13:
92:17:ab:8a:36:92:27:44:cf:e2:51:06:b7:aa:8a:94:9f:c2:
82:da:97:82:23:2b:db:75:18:5b:ee:b6:52:f5:e9:10:94:c8:
76:cb:e6:be:08:54:d7:b1:a4:15:ed:7e:b0:7b:67:f5:4e:02:
64:b8:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:08 2025 by rpki-client