Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jFlFjdwSU3nui1m0jHxMw5Awh8k.roa
File: jFlFjdwSU3nui1m0jHxMw5Awh8k.roa (raw, json)
Hash identifier: 6zf0MBIKSpB09XxLZupcmiVRoJefrih/vulJUSfLzt8=
Subject key identifier: 8C:59:45:8D:DC:12:53:79:EE:8B:59:B4:8C:7C:4C:C3:90:30:87:C9
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0199E1CDB24C92AAD9743D8797BF15601853
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jFlFjdwSU3nui1m0jHxMw5Awh8k.roa
Signing time: Tue 14 Oct 2025 08:19:38 +0000
ROA not before: Tue 14 Oct 2025 08:19:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214026
IP address blocks: 2a0f:7803:f4e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:cd:b2:4c:92:aa:d9:74:3d:87:97:bf:15:60:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Oct 14 08:19:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c59458ddc125379ee8b59b48c7c4cc3903087c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d8:9b:fc:90:53:cd:6c:ad:b8:c5:c6:03:02:
41:6c:de:e1:77:ec:9f:98:48:a0:1e:51:0a:d5:da:
7f:75:6f:bd:49:a2:8b:1f:1f:81:58:5b:84:36:28:
bf:1b:58:3d:40:c7:af:c2:49:e4:b9:e4:52:0a:38:
04:79:43:99:5d:dc:3a:d8:ab:df:65:4e:03:e9:f3:
6e:be:28:9f:ef:a3:d8:1b:45:c5:f2:6b:23:67:cc:
ef:ed:23:0b:80:e8:b7:ae:6b:bd:23:c9:ca:ff:86:
36:0a:56:31:c0:b6:99:ab:df:22:af:a7:0a:c9:03:
e8:ee:cd:cb:5d:ba:a6:6d:b4:cb:98:11:08:10:1e:
8b:54:98:db:9b:f4:19:e9:05:08:4a:ac:6f:f9:51:
f3:c9:b6:16:bc:b2:d6:c3:70:41:d8:8e:a1:43:5c:
c6:59:72:67:d5:39:8f:ec:2c:de:60:21:84:82:dd:
fb:38:c0:a3:53:52:96:a4:97:d4:88:e5:2d:5a:99:
af:db:30:1a:70:12:cf:a9:0d:79:55:c2:23:af:bd:
a9:20:a7:0c:71:aa:e2:71:29:30:31:43:06:82:c1:
90:f0:4d:5e:12:a2:aa:b3:4b:3a:7c:6f:4e:69:f2:
40:f2:f0:35:fe:2a:63:18:12:a4:7a:12:00:4c:f2:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:59:45:8D:DC:12:53:79:EE:8B:59:B4:8C:7C:4C:C3:90:30:87:C9
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jFlFjdwSU3nui1m0jHxMw5Awh8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f4e0::/44
Signature Algorithm: sha256WithRSAEncryption
ba:71:54:86:02:d8:56:eb:df:00:82:1e:87:44:2c:b9:29:0e:
97:c4:c4:32:cc:ee:0a:93:eb:c3:00:83:9d:ec:19:cc:96:0e:
b1:6c:aa:a5:88:1f:5e:e0:b9:80:23:3f:c6:f0:c9:18:65:a4:
68:8f:1f:52:da:b1:1d:af:95:e0:45:ee:36:89:dd:e5:db:bb:
55:45:f4:5e:36:84:7a:c7:dc:d2:93:2b:d3:32:94:b0:0a:6b:
05:15:c2:bb:7e:ed:54:ff:d5:5a:f1:d5:14:0f:81:71:de:5b:
f7:a8:bc:c7:68:1e:51:19:bc:30:a7:23:14:5a:1d:50:e8:d2:
b7:81:99:46:0a:ca:93:e5:71:81:0d:05:7a:68:b3:2e:1f:af:
ed:12:81:cd:e7:38:12:03:a4:5c:a7:6c:9e:2b:d3:9d:d7:05:
79:4e:71:df:c7:18:3b:41:8b:9d:1e:64:3f:dd:e5:cf:18:15:
28:11:f5:17:4d:56:f1:db:27:47:ab:12:49:e2:36:a8:a1:96:
3a:74:e5:22:15:be:a4:a3:dd:bb:5d:89:69:17:63:09:49:1f:
08:91:0d:2d:0f:d6:fa:c1:40:4a:de:94:34:f9:81:7c:59:82:
93:7f:8b:82:d8:2a:0a:7b:60:d7:d4:8e:1c:fc:98:4b:06:34:
ab:d2:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:35 2025 by rpki-client