Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5M8GL6iI0cDwM8QeYAoffS86aCw.roa
File: 5M8GL6iI0cDwM8QeYAoffS86aCw.roa (raw, json)
Hash identifier: 9WWHxlce1UlkMWQXc1WVDuJbsh+Zti9BqK/cjDv6sks=
Subject key identifier: E4:CF:06:2F:A8:88:D1:C0:F0:33:C4:1E:60:0A:1F:7D:2F:3A:68:2C
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01997F404B8F7A37631DBF50C97FFCFA600B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5M8GL6iI0cDwM8QeYAoffS86aCw.roa
Signing time: Thu 25 Sep 2025 05:02:24 +0000
ROA not before: Thu 25 Sep 2025 05:02:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29226
IP address blocks: 2a11:4b42::/32 maxlen: 32
2a13:9340::/32 maxlen: 32
2a13:9341::/32 maxlen: 32
2a13:9342::/32 maxlen: 32
2a13:9343::/32 maxlen: 32
2a13:9344::/32 maxlen: 32
2a13:9345::/32 maxlen: 32
2a13:9346::/32 maxlen: 32
2a13:9347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:40:4b:8f:7a:37:63:1d:bf:50:c9:7f:fc:fa:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 25 05:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4cf062fa888d1c0f033c41e600a1f7d2f3a682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:8c:66:c1:e1:5b:b0:1c:c1:72:43:a7:00:
42:6a:42:04:c9:a4:32:76:45:07:43:13:a7:e3:dd:
39:65:d5:f8:5e:e2:5e:b7:1b:81:65:74:c7:51:ef:
41:7d:c0:e6:f7:70:2c:cc:0f:53:7b:c6:5a:43:44:
4c:40:a1:31:0a:f0:41:27:db:67:17:e9:e2:14:b7:
5c:ed:07:ed:31:da:fb:ee:c3:ef:64:ea:67:47:2b:
4f:c7:1f:dc:cb:f9:12:08:46:aa:0b:37:ac:7c:a7:
48:f4:14:8c:4f:87:01:03:bd:2f:56:96:ea:49:44:
0b:39:c6:2c:59:d3:0b:41:0f:c8:62:a8:a8:a4:1d:
86:a2:30:98:10:a2:85:21:1f:bc:10:04:c7:60:d7:
eb:16:ad:be:64:a5:9c:fd:63:9e:19:12:38:d1:c6:
86:92:f7:86:8f:57:ac:62:dd:2c:d6:21:32:7b:a9:
98:9f:08:bb:21:d9:a8:db:99:52:8f:5e:11:81:78:
ea:02:22:0c:61:2b:8d:06:02:89:59:a6:f1:f2:a6:
32:02:30:a7:83:89:fb:18:42:e0:dc:4d:e4:da:63:
49:00:47:48:18:5e:85:35:49:95:89:d7:35:10:12:
d6:a7:7d:f0:de:56:84:a0:1d:7b:4e:7a:4f:02:82:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CF:06:2F:A8:88:D1:C0:F0:33:C4:1E:60:0A:1F:7D:2F:3A:68:2C
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5M8GL6iI0cDwM8QeYAoffS86aCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b42::/32
2a13:9340::/29
Signature Algorithm: sha256WithRSAEncryption
50:1d:6a:25:3e:c3:52:dc:71:38:10:cb:6f:f7:8e:87:93:cd:
4b:7a:fe:be:19:bb:d9:c1:92:b4:b9:61:ae:34:a1:a9:44:8d:
64:35:8f:23:27:85:e2:57:b8:c1:0f:62:80:7e:41:12:d3:86:
45:5a:e4:a6:07:d9:69:85:31:88:07:0b:dc:79:6f:9d:fe:5a:
65:a2:32:be:3e:7a:c2:6c:9a:43:62:ba:f1:a1:3d:45:02:f9:
56:c6:27:87:57:2c:06:c1:85:c2:79:c5:20:43:3f:a8:1e:2f:
d0:c9:47:26:81:3a:b0:60:66:70:c3:2b:5f:7a:bd:ba:51:61:
eb:d8:8e:e9:4e:0f:7e:d0:46:5b:86:b8:02:19:da:40:df:4d:
de:0e:de:11:06:d8:68:7b:0a:40:70:2f:8a:95:24:c9:bd:9a:
ca:2c:5e:b6:d1:01:10:04:64:48:54:c9:0e:3b:28:7d:43:0c:
f7:d1:a6:c5:0b:e9:ca:8f:4b:ab:fd:26:b5:63:bd:66:06:ec:
07:01:2d:b0:66:c2:e7:50:2f:6e:85:75:fe:54:d2:49:ff:1f:
a8:35:01:42:14:0a:66:da:01:38:8c:c7:1a:79:da:ae:8d:18:
b7:4c:48:78:65:79:bb:b4:22:ee:e1:62:bc:5e:c5:4f:27:0c:
3b:69:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:40 2025 by rpki-client