Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EASv7Pwp5s7xHptHeT8bx1BMvh8.roa
File: EASv7Pwp5s7xHptHeT8bx1BMvh8.roa (raw, json)
Hash identifier: 9Bt8ezrIdKBPIOWXNUErgI/itzrTUKWVaVktAfZtf/0=
Subject key identifier: 10:04:AF:EC:FC:29:E6:CE:F1:1E:9B:47:79:3F:1B:C7:50:4C:BE:1F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01999975DF74201FA63488983C04CF993075
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EASv7Pwp5s7xHptHeT8bx1BMvh8.roa
Signing time: Tue 30 Sep 2025 07:11:02 +0000
ROA not before: Tue 30 Sep 2025 07:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149428
IP address blocks: 2a06:fe42::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:75:df:74:20:1f:a6:34:88:98:3c:04:cf:99:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 30 07:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1004afecfc29e6cef11e9b47793f1bc7504cbe1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:06:4c:44:d6:73:28:ef:43:0c:ec:46:b8:
b4:5c:4f:49:55:0b:08:0b:3e:69:55:8c:ef:3e:cb:
71:a7:c9:8c:a2:9a:38:0e:c9:9a:49:fd:dc:27:9b:
3a:0a:64:17:33:c0:dc:22:91:c6:c9:bc:2b:3e:b9:
7e:3d:93:50:c0:6f:15:59:56:b1:58:62:a7:95:47:
56:8d:30:02:2e:d6:ba:52:1d:fa:5e:a9:ff:85:7e:
3e:bd:19:8c:db:0f:8f:82:94:62:a7:24:15:33:ac:
4d:c0:61:f8:4c:0d:86:75:88:95:df:15:3b:9d:af:
be:4d:86:a6:c9:34:3c:d7:b6:1e:bd:37:2a:ae:7c:
95:c2:2c:f2:64:99:0e:72:f4:d2:a2:a1:8f:46:a4:
b1:7b:5e:47:6b:ec:e2:b7:63:d9:00:b2:d5:da:56:
25:bc:0b:b6:34:2d:18:b1:29:9d:85:07:45:8c:50:
ab:08:3a:83:e0:d5:fb:aa:17:f4:f8:51:4d:30:eb:
c2:7a:9f:5a:d1:1a:a5:31:5f:25:49:20:a9:29:cc:
08:19:af:8f:a4:e7:d9:53:07:38:be:98:48:a0:e0:
c0:1b:1f:f0:16:3c:9d:69:f7:1a:5a:34:da:c8:9f:
78:96:b8:55:3d:fd:90:3e:bd:b4:75:14:06:13:c1:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:04:AF:EC:FC:29:E6:CE:F1:1E:9B:47:79:3F:1B:C7:50:4C:BE:1F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EASv7Pwp5s7xHptHeT8bx1BMvh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fe42::/32
Signature Algorithm: sha256WithRSAEncryption
7b:7a:71:fb:36:04:6e:e5:b6:bb:5a:8b:c1:c9:bf:da:ed:a2:
6d:08:d3:6e:62:25:9b:fa:6a:58:a3:63:9c:f5:54:06:4d:bd:
91:2e:a4:d7:f7:5a:83:5a:b5:15:c0:44:34:47:39:b4:2a:e6:
fb:bf:ab:b1:41:27:03:43:f6:ec:39:20:e6:fb:cc:d6:a7:63:
a5:21:d1:f0:ba:4e:16:39:07:2b:6b:70:df:ba:c7:af:df:3e:
ba:40:e8:12:9e:6a:bc:4e:bf:02:86:eb:f5:33:b8:85:92:8b:
7e:23:06:97:3f:91:aa:82:f7:71:5c:39:8c:2c:38:a0:ec:b0:
92:cd:76:59:3a:24:38:1f:32:6d:3d:d8:3f:26:3a:30:f4:9a:
f2:10:d7:a1:36:5e:a0:55:2d:44:99:ae:b6:a6:d3:63:07:8c:
f2:81:43:0a:c5:62:dc:8a:44:5c:92:c4:dd:ed:95:47:53:b3:
d7:37:30:18:41:d6:b7:e6:18:73:3e:37:de:52:ac:78:b6:6f:
81:3c:3b:01:bf:a4:d8:b8:30:22:1a:5b:e8:00:3c:c0:2c:6e:
4a:29:8b:d4:ab:54:08:63:84:d5:1c:b4:d2:6b:5f:99:29:74:
8d:19:ab:f9:c1:51:0e:4a:c3:78:bb:3e:7b:26:6c:a6:8a:f9:
31:98:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:19 2025 by rpki-client