Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/uF6s_hWqOyMm0beoSVdz1ofj_2U.roa
File: uF6s_hWqOyMm0beoSVdz1ofj_2U.roa (raw, json)
Hash identifier: sqABMRSLhInMQI+0EZuydVNxHulBTRCcnZGrhwhVSWA=
Subject key identifier: B8:5E:AC:FE:15:AA:3B:23:26:D1:B7:A8:49:57:73:D6:87:E3:FF:65
Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial: 01995DDB18C9D025A8A0F05B621FA44D323F
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/uF6s_hWqOyMm0beoSVdz1ofj_2U.roa
Signing time: Thu 18 Sep 2025 17:24:23 +0000
ROA not before: Thu 18 Sep 2025 17:24:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a00:42e0:1000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:db:18:c9:d0:25:a8:a0:f0:5b:62:1f:a4:4d:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Validity
Not Before: Sep 18 17:24:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b85eacfe15aa3b2326d1b7a8495773d687e3ff65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:d8:b3:0f:07:29:2b:b6:58:31:3f:75:10:
c8:13:11:28:33:3f:4b:8d:0c:63:53:ab:65:66:9f:
75:3f:0d:5a:f6:2d:ae:e6:a1:41:7c:cf:86:ce:bb:
9e:c4:a2:6b:be:99:37:9b:78:13:29:af:02:c0:9a:
6b:74:fd:45:cb:cd:db:fb:20:75:cf:9a:68:50:68:
bf:76:4e:ba:d3:3f:10:45:4a:26:51:a5:23:59:e9:
92:94:8d:71:65:6e:49:12:ba:a2:46:63:f7:43:f4:
9b:05:bf:6a:32:0c:c8:12:01:60:a3:5f:ab:05:bb:
70:d9:38:98:04:62:08:4f:e9:00:33:37:cc:d4:44:
07:14:ce:7a:38:38:2a:a4:88:a0:4b:4f:dc:8f:5b:
9c:f8:e1:c5:98:59:7c:c2:90:b2:11:0b:99:0d:9a:
da:b1:dd:80:97:e1:3c:31:82:0d:7d:d6:f0:a8:75:
4e:da:6a:76:35:84:6f:a7:5e:9f:9d:43:7c:fe:fd:
6b:75:7c:92:18:a6:8b:3e:03:20:b0:0d:a9:e4:79:
50:aa:70:0b:97:83:0d:b7:e4:c9:c1:c8:b1:13:f7:
2a:d9:63:7d:16:9d:f1:8b:9c:19:0c:42:5d:bd:43:
62:ab:91:84:3b:59:52:6b:f3:32:03:2e:d5:3f:17:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:AC:FE:15:AA:3B:23:26:D1:B7:A8:49:57:73:D6:87:E3:FF:65
X509v3 Authority Key Identifier:
keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/uF6s_hWqOyMm0beoSVdz1ofj_2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:42e0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8d:83:83:1e:b5:b5:e2:bc:28:00:47:07:25:59:8b:a6:9b:78:
a1:fd:10:a9:60:bf:63:60:b1:de:3c:b6:69:4a:91:2b:8b:a0:
b0:c0:07:33:b9:9b:da:41:b2:cc:e6:d8:bb:88:36:49:65:d0:
ef:85:60:9b:36:13:d8:50:12:49:f8:03:4c:a7:95:e1:7d:53:
74:09:39:1b:f1:be:c3:34:b2:ba:ce:45:57:13:af:96:ca:b9:
9b:59:b7:08:89:02:b2:a8:0b:e0:f1:64:a3:a1:a4:41:e5:7c:
df:d2:ad:e7:5c:ed:e4:3f:03:bc:dd:18:42:19:f4:8b:b1:ad:
b6:c6:02:73:04:19:71:74:ee:d9:29:c1:dd:17:dd:3f:21:06:
bf:01:94:34:0a:c8:7d:22:86:58:b0:2c:cf:2b:83:85:75:e4:
ef:e9:57:c3:b5:39:b4:76:3c:ec:fd:45:e1:85:93:37:f4:ad:
b1:af:96:ac:16:48:36:cb:2d:23:fb:f8:9d:22:0d:13:ac:fa:
91:dd:7f:69:3b:14:0a:23:64:b4:e4:47:1e:b6:24:b7:5e:96:
f0:18:f0:b8:8d:fc:e7:31:40:b3:fb:3f:dc:78:a9:80:8a:b8:
47:1e:80:13:f9:94:c1:b5:14:70:96:07:b6:b4:14:45:d1:1d:
23:b1:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:46 2025 by rpki-client