
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/X2Ue9BiJRpGQwFUYXhIqlj7hvS4.roa
File: X2Ue9BiJRpGQwFUYXhIqlj7hvS4.roa (raw, json)
Hash identifier: qRbAcxIbrHVx6s0CuB/vd4dBEHEd2cFKqYXK6NGKEfc=
Subject key identifier: 5F:65:1E:F4:18:89:46:91:90:C0:55:18:5E:12:2A:96:3E:E1:BD:2E
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019960B783CD854B9F607B3E57A40C82CE85
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/X2Ue9BiJRpGQwFUYXhIqlj7hvS4.roa
Signing time: Fri 19 Sep 2025 06:44:23 +0000
ROA not before: Fri 19 Sep 2025 06:44:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202803
IP address blocks: 80.64.212.0/22 maxlen: 24
80.64.212.0/23 maxlen: 23
80.64.214.0/23 maxlen: 23
193.138.4.0/23 maxlen: 24
193.138.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:b7:83:cd:85:4b:9f:60:7b:3e:57:a4:0c:82:ce:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Sep 19 06:44:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f651ef41889469190c055185e122a963ee1bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:ec:ee:f5:35:51:72:48:ce:2e:a2:3f:7c:
76:01:14:bd:41:17:ea:c0:49:62:7b:fb:93:eb:27:
4e:06:90:aa:ac:02:73:6b:d4:43:d6:c4:d9:1c:74:
ff:a6:46:08:d0:dd:7f:c7:6f:14:3e:00:8a:a0:8b:
e6:bf:e8:07:47:a3:d8:0b:f5:94:46:54:7f:a3:fc:
d3:35:00:e8:03:66:63:32:92:74:96:4f:b5:35:6f:
85:30:c3:9d:51:1e:fd:aa:7f:dd:a5:3b:e8:22:39:
e7:43:51:3b:e0:59:2c:1a:cb:2d:86:7b:0e:cb:cf:
a3:69:08:63:dd:bc:50:95:9e:a1:0a:38:45:ac:91:
b3:d4:4e:01:c6:d1:46:82:df:ce:d6:a3:5c:44:6d:
99:ae:e9:63:86:80:86:5f:16:df:b2:4d:51:e1:0a:
0c:9a:df:88:77:e2:fe:63:f6:8c:28:cb:ad:ac:03:
61:d0:f3:c8:c4:8b:b3:7b:ed:44:70:5e:18:a2:16:
0d:89:12:ce:8f:f6:70:65:98:d1:67:97:3c:6d:06:
c0:77:6d:f7:75:04:c7:fa:23:56:54:c7:b4:67:95:
b6:6e:27:12:a1:07:f4:16:43:ef:45:df:51:b2:34:
70:48:34:f8:89:a5:11:0c:a0:7c:cd:2d:13:94:48:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:1E:F4:18:89:46:91:90:C0:55:18:5E:12:2A:96:3E:E1:BD:2E
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/X2Ue9BiJRpGQwFUYXhIqlj7hvS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.212.0/22
193.138.4.0/23
Signature Algorithm: sha256WithRSAEncryption
41:60:9d:9a:3e:4b:df:0f:17:f8:ea:db:de:06:18:f4:7c:d3:
e9:cb:93:62:b1:13:cc:aa:c0:c5:f9:b0:f0:de:9e:f5:35:a5:
0e:fc:cb:bd:3a:83:35:87:08:46:aa:c5:c8:0e:e2:ba:f7:0f:
db:1b:38:6d:64:f6:18:47:96:7d:4a:93:1b:27:19:98:07:7d:
7b:72:26:22:8a:f3:5e:1d:eb:16:81:e5:42:d0:68:b0:8d:b5:
2c:13:a2:be:04:64:5d:56:f8:d5:c2:6c:22:34:84:6b:2d:98:
77:1f:23:a4:4d:06:58:60:c0:04:ac:f6:0c:ba:9a:90:f0:cd:
98:17:2a:99:ae:5e:04:84:98:83:27:37:2f:f1:22:0b:5e:0d:
c8:ea:7b:ee:cf:f7:ad:06:00:b7:7c:7b:3d:91:e3:f7:f8:52:
f8:2c:e0:a4:45:7c:02:68:7a:dd:5b:77:ea:4b:91:7b:cf:b7:
ca:d6:50:ef:bc:77:2c:09:f5:ce:76:fb:e3:54:21:c9:fd:46:
94:a4:6c:4a:aa:5e:ee:04:44:21:3c:fb:7c:80:e7:c8:a2:11:
07:9e:d6:23:c9:cd:e7:0a:0a:fc:c5:f2:1f:63:5b:94:ac:89:
e4:ca:8d:4c:60:4f:b5:20:4f:ce:89:fc:9d:88:70:25:34:b5:
90:e3:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:26 2025 by rpki-client