Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C27Aa8uKLfnpIaKJoLcn4I2IZ_E.roa
File: C27Aa8uKLfnpIaKJoLcn4I2IZ_E.roa (raw, json)
Hash identifier: y4tHszT+P0kIpST/z/SHj5Ztu4ohgrU6Uc7zfXVps98=
Subject key identifier: 0B:6E:C0:6B:CB:8A:2D:F9:E9:21:A2:89:A0:B7:27:E0:8D:88:67:F1
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0199E7E529C664B654EB88A722C809D7D5E6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C27Aa8uKLfnpIaKJoLcn4I2IZ_E.roa
Signing time: Wed 15 Oct 2025 12:42:59 +0000
ROA not before: Wed 15 Oct 2025 12:42:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 95.81.92.0/24 maxlen: 24
95.81.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:e5:29:c6:64:b6:54:eb:88:a7:22:c8:09:d7:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 15 12:42:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6ec06bcb8a2df9e921a289a0b727e08d8867f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:13:25:bb:2f:d4:e9:11:cf:66:cc:99:ea:
04:38:32:90:4a:a3:e6:22:8a:21:c8:73:56:c8:40:
d4:6a:b2:a2:ae:83:52:c0:e2:d1:75:ad:ca:ce:2e:
84:10:28:5c:d8:db:ff:18:fc:5d:4d:5f:d9:f8:bf:
d1:21:0d:68:4e:d8:6c:92:f3:52:3b:53:fe:d5:c2:
ca:e9:39:fc:1c:fa:75:a7:80:38:df:a7:ec:ce:95:
e8:a0:fb:23:cc:37:6c:c5:9e:1e:6e:f7:e3:70:6a:
49:91:d2:c5:56:e9:b3:ce:cf:64:56:5b:98:0b:df:
eb:68:23:68:39:c5:bf:f2:9f:43:d4:fb:a7:6e:a8:
3b:82:0a:b7:00:45:d9:a0:28:d0:7f:a1:4a:1c:c4:
b2:5a:89:70:d3:c2:26:4f:97:8a:1a:54:8e:95:70:
7b:cd:f5:63:9f:9c:31:3e:55:1e:42:92:e7:3f:0a:
7d:0a:05:e4:28:90:4a:1b:43:70:84:12:58:a5:77:
2f:31:39:47:40:a4:e3:68:ab:16:3b:cd:6a:94:a8:
6a:62:47:24:6f:f3:2c:27:89:f9:25:b6:8e:a5:79:
0d:a2:a3:c5:b2:b5:85:b5:67:88:de:3e:d1:e0:42:
98:c7:cf:b6:38:50:19:be:6f:4a:e7:9a:02:68:a5:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6E:C0:6B:CB:8A:2D:F9:E9:21:A2:89:A0:B7:27:E0:8D:88:67:F1
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C27Aa8uKLfnpIaKJoLcn4I2IZ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.92.0/24
95.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
72:01:a8:8e:68:84:ab:59:09:ed:80:a0:34:cf:e4:77:6f:04:
4c:21:bd:bc:fe:2d:6f:3d:a8:9a:d0:e1:a4:d7:e3:9b:1b:8a:
15:92:bc:17:d3:41:f9:01:1e:19:27:39:39:a3:a4:55:b4:51:
d0:e8:59:ee:82:b6:44:f9:4b:59:68:05:6e:81:e5:d4:9e:1e:
9e:c8:92:ce:b5:44:ae:8d:9c:e6:59:5d:3f:a6:39:21:06:29:
c0:49:a0:55:dd:cd:95:6a:be:fe:40:52:01:e4:7d:22:29:30:
71:fc:b8:90:4e:a1:cd:9d:36:04:a2:7b:9a:c8:a4:f6:db:c1:
8f:11:18:04:30:f8:64:ba:36:fa:f7:9f:58:25:60:17:77:17:
ea:cc:d3:00:b9:e6:ac:8d:a2:64:af:6e:df:e4:37:bc:c2:8c:
4a:66:c9:a2:6b:af:39:fb:3b:23:ad:5c:75:4b:24:d1:82:3d:
cf:e3:b9:f1:72:d1:a7:4e:98:12:01:1b:66:f8:90:47:94:44:
b6:38:a9:b7:bb:ae:ff:dd:f0:77:39:1f:72:64:91:74:cf:a4:
47:29:47:2b:d6:53:12:12:e2:5e:02:8a:97:eb:99:c1:02:64:
74:d6:36:31:97:4b:f0:5c:ac:6f:60:13:bc:9a:7b:65:0e:e6:
d1:d3:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:31 2025 by rpki-client