Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/5wnQts3aHCqK4LPQTc1TSV8LlF8.roa
File: 5wnQts3aHCqK4LPQTc1TSV8LlF8.roa (raw, json)
Hash identifier: k5nmC2X9nRpfsHKs8VUO+zQKfKvAMmG2gTrsovLYmdc=
Subject key identifier: E7:09:D0:B6:CD:DA:1C:2A:8A:E0:B3:D0:4D:CD:53:49:5F:0B:94:5F
Certificate issuer: /CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Certificate serial: 0199EC31C66E663B3C3DCED7F171ADCF97ED
Authority key identifier: 7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/5wnQts3aHCqK4LPQTc1TSV8LlF8.roa
Signing time: Thu 16 Oct 2025 08:45:08 +0000
ROA not before: Thu 16 Oct 2025 08:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213679
IP address blocks: 2001:678:364::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:31:c6:6e:66:3b:3c:3d:ce:d7:f1:71:ad:cf:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f312b09d1f690f25700bd5dcf07c9180c5e9663
Validity
Not Before: Oct 16 08:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e709d0b6cdda1c2a8ae0b3d04dcd53495f0b945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:b2:4b:d7:e4:fa:88:8c:b4:2f:f8:48:90:
6a:ea:3a:55:84:b6:94:f3:9c:d6:f2:06:55:90:13:
33:e8:96:6c:7a:18:6c:86:d3:5a:25:90:6c:f4:68:
7b:16:e1:f2:4f:e3:43:2d:2b:b2:96:71:f0:b8:36:
f8:2b:b8:d1:9a:35:51:50:85:e0:da:83:7a:77:d3:
84:a7:c6:f3:b0:07:41:4a:6d:31:f3:8c:27:3b:cf:
0b:72:47:c9:27:55:b7:0b:3b:87:b3:9f:e5:9a:78:
62:a6:e3:8a:aa:0f:e4:52:bc:95:84:86:8b:0e:5e:
c7:4f:c4:d7:80:22:98:bd:9b:11:0d:25:71:9b:3a:
25:bc:dc:48:f0:c4:75:cd:85:17:a8:a1:9f:68:18:
bd:05:2a:a7:14:0a:16:1d:57:8b:7d:34:b3:08:e4:
e9:67:96:2c:c3:20:5c:b4:b3:f9:9b:2b:f5:fd:81:
bc:a0:1a:f5:8e:a5:3f:d4:75:e6:89:e3:22:1f:f6:
de:be:0b:b5:de:2c:ca:9e:8f:c8:56:5d:cf:8c:2f:
af:00:ee:f0:be:54:4e:a4:1e:e5:90:ba:5c:50:5d:
0b:38:db:39:e3:a6:b8:f5:a2:71:df:e3:d7:ed:53:
86:40:45:39:2a:9c:ef:15:b1:c2:b8:3a:58:4e:3d:
51:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:09:D0:B6:CD:DA:1C:2A:8A:E0:B3:D0:4D:CD:53:49:5F:0B:94:5F
X509v3 Authority Key Identifier:
keyid:7F:31:2B:09:D1:F6:90:F2:57:00:BD:5D:CF:07:C9:18:0C:5E:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzErCdH2kPJXAL1dzwfJGAxelmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/5wnQts3aHCqK4LPQTc1TSV8LlF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/29dac9-9a15-4661-af78-1522e2964fce/1/fzErCdH2kPJXAL1dzwfJGAxelmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:364::/48
Signature Algorithm: sha256WithRSAEncryption
36:80:dc:15:90:0e:f9:9d:08:34:20:1d:14:4c:a5:4a:f3:6c:
4c:31:95:e8:7a:e0:3e:a4:26:24:52:96:93:d8:26:9f:ed:a9:
c3:bd:41:9c:85:a9:83:c2:55:c2:bc:55:84:ae:a8:ea:66:64:
b0:b8:ac:08:56:75:2b:ec:2e:1b:83:0d:ff:42:4f:5d:c4:e7:
11:d1:d8:6c:c4:21:1d:bd:7c:9e:7c:fc:bf:11:7a:cf:d4:b1:
04:b2:43:8c:2a:5e:03:01:6c:dd:17:35:59:a9:6a:c2:d8:a2:
3f:60:2f:39:19:ff:03:bf:69:d4:08:08:a7:2c:02:c8:31:b1:
d8:aa:b0:31:e3:57:49:de:8c:1b:89:39:48:90:fe:81:f7:45:
42:76:9b:e8:70:7c:2c:36:54:76:b7:20:07:64:6e:db:d0:58:
58:3b:93:d9:aa:16:2a:88:c6:ce:0b:3a:37:1d:ab:ea:cd:0a:
e3:af:22:77:70:63:73:cb:1e:69:98:92:09:c3:cd:85:e3:e6:
e9:7d:82:f9:f1:d9:63:4c:0c:67:4f:5f:34:d7:9c:d3:56:25:
7e:f3:a7:62:99:42:f9:d8:28:ca:25:83:3c:36:35:21:c0:cb:
fd:83:59:10:c2:6e:78:ca:ac:1c:12:08:34:86:0a:cf:2c:8a:
64:e5:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:00 2025 by rpki-client