Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XGEHL6HU8hulxGdIG0fL9bMb8j4.roa
File: XGEHL6HU8hulxGdIG0fL9bMb8j4.roa (raw, json)
Hash identifier: s6Ol2CJ/i5WxB9ZPUIxy8YPvgaG761vKsVTt61/y2P8=
Subject key identifier: 5C:61:07:2F:A1:D4:F2:1B:A5:C4:67:48:1B:47:CB:F5:B3:1B:F2:3E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01998D729D65072F994071CF34F0DA4F775A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XGEHL6HU8hulxGdIG0fL9bMb8j4.roa
Signing time: Sat 27 Sep 2025 23:12:02 +0000
ROA not before: Sat 27 Sep 2025 23:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 2a12:bec4:1560::/44 maxlen: 44
2a12:bec4:16f0::/44 maxlen: 44
2a12:bec4:1910::/44 maxlen: 44
2a12:bec4:1ab0::/44 maxlen: 44
2a12:bec4:1b10::/44 maxlen: 44
2a12:bec4:1b70::/44 maxlen: 44
2a12:bec4:1be0::/48 maxlen: 48
2a12:bec4:1c00::/44 maxlen: 48
2a12:bec4:1cb0::/44 maxlen: 44
2a12:bec4:1d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8d:72:9d:65:07:2f:99:40:71:cf:34:f0:da:4f:77:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 27 23:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c61072fa1d4f21ba5c467481b47cbf5b31bf23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:1b:ee:0a:64:5d:14:18:23:a8:b3:6e:00:
b5:87:b5:1f:62:f9:39:a6:0b:c4:06:c0:cd:05:82:
ab:c1:28:d8:93:98:a0:18:fb:63:25:da:f9:f6:1f:
43:c8:01:7f:72:30:90:48:a6:24:38:2a:a1:6e:23:
0c:30:5f:d2:e2:d2:94:1a:30:7f:2f:e7:be:46:5c:
9d:a9:40:98:d1:0e:26:2e:5e:84:4b:d8:bf:78:ec:
f6:c4:ca:07:db:34:80:ec:f2:5e:ac:e0:41:83:0a:
15:6f:fe:0c:32:73:8b:7a:d4:07:cd:00:b8:72:85:
c6:b0:f7:58:2f:fe:ad:ab:17:69:54:c8:de:a0:af:
86:7b:83:8b:da:45:db:5f:76:d3:3b:5f:3e:96:5a:
99:ea:79:3c:c1:6e:19:57:74:0e:6d:8a:31:2e:2c:
08:0f:6f:25:da:61:03:82:6f:af:62:fc:90:50:57:
e5:16:be:c9:46:4c:c5:0a:1a:17:31:2c:dd:1a:d2:
b6:66:b8:90:5d:78:52:b8:9f:94:94:b7:5a:39:44:
a2:82:4a:02:0e:c8:44:fc:b0:b7:8f:17:07:0a:a3:
2b:63:a0:fd:e0:a3:b0:8d:19:fd:8a:a7:90:7d:4d:
f7:67:a6:74:43:65:ad:ec:98:7b:8c:67:af:23:49:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:61:07:2F:A1:D4:F2:1B:A5:C4:67:48:1B:47:CB:F5:B3:1B:F2:3E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XGEHL6HU8hulxGdIG0fL9bMb8j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1560::/44
2a12:bec4:16f0::/44
2a12:bec4:1910::/44
2a12:bec4:1ab0::/44
2a12:bec4:1b10::/44
2a12:bec4:1b70::/44
2a12:bec4:1be0::/48
2a12:bec4:1c00::/44
2a12:bec4:1cb0::/44
2a12:bec4:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
5d:be:f1:87:c3:a6:a4:cc:04:dc:ca:4f:fa:c8:7e:56:6f:92:
5d:fe:a8:90:c3:16:8b:42:00:d7:7d:ea:dd:f1:0a:e3:87:0b:
be:bd:62:4f:36:1f:1d:4f:a0:ab:1a:43:84:ce:a1:39:5d:b6:
2b:e9:a2:ef:ca:8a:c0:64:1a:e6:b6:d2:42:af:60:54:64:9a:
c6:0a:6b:b5:c0:57:82:99:e2:a0:0b:83:77:97:ce:d1:92:b8:
02:6f:8a:c9:06:ec:7e:34:b1:4c:ab:95:33:5f:77:b0:2e:17:
38:25:57:fd:78:9d:13:44:fc:68:28:85:61:c1:6b:4f:dd:74:
02:1b:0e:db:3d:11:81:05:89:27:50:1e:39:50:70:5d:98:b6:
2f:bc:28:9e:ab:f4:0d:4c:4e:19:08:55:f6:d9:18:aa:b5:01:
76:33:b6:53:1a:69:50:d5:32:30:11:da:71:c3:e2:f0:0d:d8:
b4:bf:71:bd:4b:df:73:74:72:4b:74:48:f3:d2:c1:43:bf:b4:
d2:ea:96:a3:64:b9:2e:8e:a4:48:ef:93:83:a9:71:9f:83:18:
a5:ad:1e:a0:eb:6d:ad:51:22:5f:ac:54:88:bd:ef:99:7d:4c:
82:09:2f:64:45:3e:0c:5f:a0:8e:16:9e:2a:b5:8c:27:70:6a:
9c:16:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:13 2025 by rpki-client