Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5D2C_C9VX0bvs11Dnu_IqP20KuU.roa
File: 5D2C_C9VX0bvs11Dnu_IqP20KuU.roa (raw, json)
Hash identifier: 3DiYBeS4AVGbFNODurdHzfFO3d/+HJnAVwPmzAZdMoI=
Subject key identifier: E4:3D:82:FC:2F:55:5F:46:EF:B3:5D:43:9E:EF:C8:A8:FD:B4:2A:E5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0199F6F55DA02520017073977D69C1E077BA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5D2C_C9VX0bvs11Dnu_IqP20KuU.roa
Signing time: Sat 18 Oct 2025 10:54:59 +0000
ROA not before: Sat 18 Oct 2025 10:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 2a12:bec4:1db0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:f5:5d:a0:25:20:01:70:73:97:7d:69:c1:e0:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 18 10:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e43d82fc2f555f46efb35d439eefc8a8fdb42ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:16:a6:64:d3:86:83:54:52:e3:aa:70:58:
34:a6:bb:c2:fa:43:df:c3:49:85:aa:c7:ef:ff:34:
6f:3b:33:39:39:fa:f2:d1:ac:30:f2:2b:b2:00:f2:
95:5a:c6:a4:84:28:5e:6f:51:de:24:b5:3a:9c:61:
7e:17:77:22:28:d1:27:9a:69:1e:3e:a1:af:6d:56:
ef:34:6f:6e:cf:7c:38:a1:25:b9:49:38:a7:95:dd:
31:ab:78:6c:ba:d4:57:68:67:11:b9:c4:2a:5d:40:
03:69:fe:1c:38:c4:ef:c9:93:0c:40:0e:31:6c:56:
5e:d4:24:dd:4a:4b:e7:14:ec:50:e8:21:24:30:f7:
98:23:a1:2f:78:ee:70:3d:b0:44:73:b9:bd:1a:52:
4d:3c:35:ab:63:e0:bc:0b:a3:67:d1:74:dc:84:1b:
74:a9:19:73:6a:68:a5:c0:49:54:b3:db:51:95:35:
8b:2b:3a:62:c0:71:72:32:9b:ee:68:5d:94:53:43:
72:25:15:35:8d:b8:70:49:a0:8b:62:f5:0c:80:41:
13:7e:a2:e4:c0:77:f2:39:47:a4:94:e8:00:68:ef:
ce:37:22:93:e3:a6:82:28:65:3f:fb:32:cb:bb:c1:
39:cf:19:30:37:1f:e6:4d:5c:c9:c3:37:fc:b9:2d:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:82:FC:2F:55:5F:46:EF:B3:5D:43:9E:EF:C8:A8:FD:B4:2A:E5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5D2C_C9VX0bvs11Dnu_IqP20KuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1db0::/44
Signature Algorithm: sha256WithRSAEncryption
5a:75:59:5e:a2:77:47:59:19:01:0f:72:00:24:36:5f:96:8a:
5d:5e:1a:79:ba:0e:ac:94:3d:42:ad:05:b8:2b:92:b7:bc:a8:
2c:c6:cb:f4:15:28:d0:61:48:d5:bd:59:0d:f2:2d:ad:4a:49:
2b:34:72:bd:4a:5c:cf:1b:e6:e2:ba:3f:7b:91:05:a7:b8:19:
3b:a1:0c:b5:7b:5f:09:26:9b:af:30:71:90:9c:50:ee:28:d9:
b2:da:64:6c:fe:12:85:82:1a:15:08:e5:1e:35:a0:5d:ba:b0:
6a:76:a9:2b:c9:7b:aa:1d:6c:6d:a5:bc:d9:06:0f:f4:f3:60:
20:4e:60:2e:4c:24:29:9c:38:0d:6e:76:2e:6f:32:cf:63:ea:
2a:b8:8e:10:b3:7f:c0:1c:84:72:fc:e0:5e:43:b6:f9:10:a1:
7e:b3:87:09:fd:a6:ca:f1:cd:85:bd:cf:20:3f:3e:c6:6d:f0:
cc:52:1e:d8:7f:96:a3:87:e6:93:b1:bf:3e:ed:1c:6d:dc:76:
a9:cb:c9:09:50:a7:6b:eb:73:ee:5c:d0:c1:6c:42:ea:45:77:
21:c4:21:6d:19:c2:dd:65:45:73:64:93:01:a6:07:bb:02:37:
90:11:ca:5c:36:27:a3:12:d3:71:ca:4a:9e:ff:22:d6:8d:a2:
73:c3:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:08 2025 by rpki-client