Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ELfjwcjiv_rMo5foY11wPJE520Y.roa
File: ELfjwcjiv_rMo5foY11wPJE520Y.roa (raw, json)
Hash identifier: VjJT1anAv0yVZWSK531KVBZK3QY2yIaGw1ErBPziTO0=
Subject key identifier: 10:B7:E3:C1:C8:E2:BF:FA:CC:A3:97:E8:63:5D:70:3C:91:39:DB:46
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01999C5C5E78DD21806A245C4A5011316346
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ELfjwcjiv_rMo5foY11wPJE520Y.roa
Signing time: Tue 30 Sep 2025 20:42:03 +0000
ROA not before: Tue 30 Sep 2025 20:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a0e:c785:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9c:5c:5e:78:dd:21:80:6a:24:5c:4a:50:11:31:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 20:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b7e3c1c8e2bffacca397e8635d703c9139db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b6:5d:31:b1:26:73:e9:b4:70:98:a3:a7:41:
9a:95:62:f6:b4:df:6d:91:6c:04:c1:f6:e4:32:58:
74:09:2e:4e:ea:de:9d:fb:25:22:ff:a1:f3:16:12:
97:c8:94:f2:e3:44:90:23:19:49:d2:71:03:e7:75:
9b:bb:6e:b9:c4:81:9a:90:86:cd:9b:96:af:0e:45:
c5:92:15:6d:9c:f5:63:0d:f6:8d:ca:d6:30:8f:74:
90:81:9a:64:b1:c4:66:d2:be:d8:36:04:c6:a0:b1:
95:19:df:01:16:d7:07:4e:64:70:a4:20:85:df:ef:
d8:6b:ba:98:2d:b7:9b:7d:7b:9b:e3:e5:87:c3:32:
9c:68:0d:de:26:49:1f:7d:88:e9:f2:be:72:51:f6:
09:46:92:0e:4b:0a:1f:0b:9e:4c:fe:ac:99:ff:39:
fe:7f:1c:f0:35:76:32:38:03:d7:06:ed:4e:67:74:
21:6c:dd:65:70:b5:e1:a5:96:74:81:93:29:2a:da:
a0:66:e6:ad:c0:ef:57:63:81:67:03:bf:7b:e0:f9:
36:d4:5c:2d:b2:0f:d6:95:92:76:df:48:b3:bd:f5:
30:af:20:78:54:bb:c9:07:b5:49:f3:cd:87:af:26:
da:23:37:94:6e:41:74:d3:e2:a3:00:8e:69:ac:4a:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:E3:C1:C8:E2:BF:FA:CC:A3:97:E8:63:5D:70:3C:91:39:DB:46
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ELfjwcjiv_rMo5foY11wPJE520Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c785:2::/48
Signature Algorithm: sha256WithRSAEncryption
87:69:da:40:07:c8:9a:cd:e2:ae:ee:2d:c8:ef:2b:90:b8:bd:
2a:1c:7c:8d:f3:34:7f:3f:20:31:fc:88:1b:3b:30:9f:6d:8b:
9f:e3:a3:e9:47:74:4d:67:5d:59:47:5e:ad:a0:df:d1:93:e6:
13:37:9c:33:12:96:47:fd:b1:29:09:35:a7:ae:c0:db:b3:86:
dc:88:2f:5c:7a:27:c1:82:03:6d:6a:55:fa:b0:bb:41:d8:63:
da:bf:ff:04:bc:51:00:d6:39:65:f6:20:ce:a9:23:0a:73:9e:
39:84:06:14:5e:c3:04:70:5d:1b:ba:ce:c3:70:bd:05:20:4a:
85:f9:cf:a1:bc:77:72:5e:cd:fb:a0:aa:02:f9:a3:a9:fe:a1:
e9:2e:ff:9a:01:8b:a2:7b:48:56:53:42:28:39:ba:9d:68:f3:
d3:55:dd:89:86:52:19:a5:37:2d:86:80:b5:e1:d1:d3:96:88:
3f:68:13:e4:2e:98:cd:e6:69:6e:d6:03:c6:55:67:ef:2c:13:
2c:85:21:a6:3e:95:11:b1:60:d1:1d:7c:6e:a6:21:8d:d7:b8:
d5:ff:2d:db:50:42:2d:65:c6:e1:66:f2:fc:12:06:f5:95:1f:
77:2a:38:35:1e:3b:bf:b7:0b:6b:95:b0:f6:87:9a:e8:e6:92:
bd:e9:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:04 2025 by rpki-client