Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5ZzT9BOjXy6nuMI_yO5vMIPWAq8.roa
File: 5ZzT9BOjXy6nuMI_yO5vMIPWAq8.roa (raw, json)
Hash identifier: SfHBdK0Z7rD3sP3TAPnV5Als7GhMHgWk1/GZjTTB2c8=
Subject key identifier: E5:9C:D3:F4:13:A3:5F:2E:A7:B8:C2:3F:C8:EE:6F:30:83:D6:02:AF
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 0198CC876EB8C54898FAA3527D740DBC28A6
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5ZzT9BOjXy6nuMI_yO5vMIPWAq8.roa
Signing time: Thu 21 Aug 2025 12:08:04 +0000
ROA not before: Thu 21 Aug 2025 12:08:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 2a13:6304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:87:6e:b8:c5:48:98:fa:a3:52:7d:74:0d:bc:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Aug 21 12:08:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e59cd3f413a35f2ea7b8c23fc8ee6f3083d602af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:80:5a:b0:0e:4c:ee:3b:4a:44:2a:23:1e:
f3:0d:8b:95:e1:25:3f:8b:91:18:a0:48:c1:5e:07:
44:1b:a9:fc:81:e0:75:6a:5b:e5:b0:a4:31:38:65:
14:e3:ba:28:b2:5f:68:3e:88:ff:b3:8b:a8:ff:d4:
65:11:73:1e:f8:0f:57:1b:cf:a4:f3:d7:c5:09:ec:
d5:01:a6:b5:7e:e0:d2:3e:48:b2:72:60:d9:8c:d8:
26:0f:96:8d:38:4c:60:d3:de:41:e1:26:01:8e:56:
d5:0f:68:b7:6e:40:54:8a:e7:29:d4:80:ad:40:6a:
cc:b3:7f:fe:0e:26:4f:b0:ec:92:93:9d:80:7f:01:
c7:3e:f0:7c:53:b4:35:63:df:f3:8b:a0:9a:4e:7c:
c1:b8:b2:91:36:c9:80:0d:02:e7:e0:53:38:53:f4:
29:82:df:c0:73:7d:a0:50:b1:c5:1d:d7:46:2f:14:
da:bb:1f:02:31:ca:e5:03:91:ba:6a:8f:e3:3c:07:
53:d5:15:1b:43:46:cf:09:f0:be:43:87:ff:ab:50:
75:fc:e2:1f:db:72:a3:97:b8:c8:b6:5e:cc:4e:39:
e5:03:fc:f8:89:55:32:27:23:f0:30:bc:79:3f:61:
14:cc:33:2e:26:50:41:85:56:a3:aa:4e:d6:c9:26:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:D3:F4:13:A3:5F:2E:A7:B8:C2:3F:C8:EE:6F:30:83:D6:02:AF
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/5ZzT9BOjXy6nuMI_yO5vMIPWAq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6304::/32
Signature Algorithm: sha256WithRSAEncryption
b1:95:38:92:1c:a3:7c:13:7a:ba:1f:b6:67:ce:6d:43:13:eb:
fd:2f:62:da:0f:68:72:84:d5:be:3b:71:1a:d9:6f:eb:d3:7a:
e3:0b:4e:52:41:41:f6:03:ab:b6:b8:c2:d8:13:c7:2b:4e:a6:
10:a5:1e:21:51:cb:7a:79:dd:77:e8:9f:3a:64:07:21:11:1d:
9a:20:a0:d0:ba:c3:59:ee:ea:71:42:c5:ba:15:6e:b7:ad:be:
b7:dc:37:46:97:92:69:77:1e:bf:45:0b:ad:98:03:b8:8f:03:
ec:39:7d:ef:3c:83:f2:bd:0a:b4:aa:7c:6f:ab:e0:4e:2b:3f:
bc:5e:96:43:6f:c6:ba:f0:4b:af:93:fe:b4:c1:cf:3a:3a:09:
78:61:fd:01:44:9b:94:9d:4b:f9:66:3e:1a:c6:c0:6f:1c:b4:
92:9b:1f:3e:12:ce:be:ab:31:52:01:99:a0:d0:fa:10:eb:c6:
d8:88:27:a1:38:1c:65:1b:aa:de:65:d5:d5:a8:b9:a1:61:10:
27:14:34:cc:e2:5f:9d:c2:3f:21:64:06:d6:1a:29:49:8f:6d:
56:51:7a:59:86:de:1c:2c:39:58:75:d1:33:be:ce:01:a8:b1:
68:63:c8:bd:e7:52:1d:bd:7e:58:d9:fa:11:02:08:54:68:42:
9f:94:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:09 2025 by rpki-client