Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/5rGgrqdPoueZL9n49lewJLQalrU.roa
File: 5rGgrqdPoueZL9n49lewJLQalrU.roa (raw, json)
Hash identifier: TQRxGNLMYQGT2NG1xMafNXAuCm7U0yoBgbBdMTpn79I=
Subject key identifier: E6:B1:A0:AE:A7:4F:A2:E7:99:2F:D9:F8:F6:57:B0:24:B4:1A:96:B5
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 01993E499BCC5A6E229E507E68826C1FDD2D
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/5rGgrqdPoueZL9n49lewJLQalrU.roa
Signing time: Fri 12 Sep 2025 14:17:15 +0000
ROA not before: Fri 12 Sep 2025 14:17:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205183
IP address blocks: 130.43.168.0/24 maxlen: 24
2a0c:d780::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:49:9b:cc:5a:6e:22:9e:50:7e:68:82:6c:1f:dd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Sep 12 14:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b1a0aea74fa2e7992fd9f8f657b024b41a96b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:8a:5f:71:8a:ed:e7:af:42:aa:22:d0:62:
0f:f7:f5:a4:81:c2:b5:5c:a6:79:61:9d:3d:5f:09:
69:39:74:45:e5:00:47:6d:df:c8:4c:1b:e1:35:1c:
f9:31:3b:0a:ca:14:04:90:39:bd:3c:f3:37:3c:2d:
4e:87:06:ec:4b:3b:2a:3c:f2:60:a5:4c:8d:ca:98:
6b:8a:08:6c:c4:6d:b4:93:3c:37:b8:b8:18:ac:7d:
7c:28:cf:33:2d:7a:e0:06:18:bd:90:08:c3:0f:90:
d6:b8:90:ef:79:ae:0e:01:dd:82:b0:71:e6:86:28:
a2:da:ab:90:c9:84:b7:33:d8:3e:b0:3e:7f:45:43:
8f:78:aa:ad:e7:5d:9e:18:d9:d2:5b:f1:a6:37:36:
c7:1c:bc:6f:ab:6f:d2:86:fe:3a:00:5b:b1:e2:cd:
58:d5:53:71:52:0e:cc:0e:bf:d9:75:75:10:1b:62:
97:96:67:2f:dc:21:8e:ce:f7:c3:3d:06:a7:df:6a:
68:88:d9:d9:4a:83:14:97:61:58:c1:10:6f:64:44:
6c:01:94:fd:43:da:a2:25:57:b9:16:44:68:30:6c:
f3:1e:75:c8:62:e7:f6:9f:8b:1e:fe:bb:08:d7:94:
a1:52:a7:ed:de:70:08:1a:a8:51:bb:2c:f3:68:b9:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:A0:AE:A7:4F:A2:E7:99:2F:D9:F8:F6:57:B0:24:B4:1A:96:B5
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/5rGgrqdPoueZL9n49lewJLQalrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.43.168.0/24
IPv6:
2a0c:d780::/29
Signature Algorithm: sha256WithRSAEncryption
6d:c4:d0:da:75:3a:00:cd:33:89:2f:4f:b0:86:df:b9:45:ca:
e5:67:d8:11:5e:a7:1b:63:66:fe:d4:a5:bc:4b:26:ba:69:9e:
2e:6e:cd:56:45:4a:4a:27:d4:ad:1e:0e:24:b7:ce:d9:7f:19:
d9:4e:88:50:5a:97:39:aa:22:5a:6e:61:5d:b4:6a:f0:50:f6:
e7:d0:71:6e:36:0b:53:15:07:0c:a7:66:cd:79:40:b8:ab:43:
6e:6a:72:94:dc:7b:29:86:83:cf:2d:d2:3e:b8:aa:d3:a6:85:
06:e9:c9:08:b3:3c:a5:e1:44:a9:2e:a3:22:14:17:7f:ad:90:
80:06:1f:d5:53:11:68:a3:30:80:ca:fc:4c:ba:e4:5d:82:6d:
88:79:75:c4:09:a3:f8:8d:ed:1b:a9:d3:f6:7c:ee:4e:0a:79:
c8:94:e4:1b:33:75:e4:f9:d0:81:e9:34:c9:2d:65:76:c6:bf:
6e:8d:82:dc:7c:92:68:31:09:d7:f8:30:d1:3f:cc:64:53:44:
bb:7c:ee:f3:23:4e:56:cd:1f:45:79:31:7c:4e:71:1f:c4:9a:
f2:e5:41:a0:68:c9:4b:fa:f1:2e:25:f1:99:2a:22:b0:56:4c:
38:61:d3:7a:61:cd:e6:53:c4:cb:e5:f3:f4:b5:63:88:56:db:
c0:7a:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:05 2025 by rpki-client