Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tf8V9WhPoUsH6KIjhVObkrxiglc.roa
File: tf8V9WhPoUsH6KIjhVObkrxiglc.roa (raw, json)
Hash identifier: /MWJb1KDqCtEYX4gFkAgj9QHWCDNsu+2gIhpbedTLSA=
Subject key identifier: B5:FF:15:F5:68:4F:A1:4B:07:E8:A2:23:85:53:9B:92:BC:62:82:57
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019A2F28056B39EC79FCB7EB6143E57AD350
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tf8V9WhPoUsH6KIjhVObkrxiglc.roa
Signing time: Wed 29 Oct 2025 08:49:03 +0000
ROA not before: Wed 29 Oct 2025 08:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9c90::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
2a0e:7d45::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:28:05:6b:39:ec:79:fc:b7:eb:61:43:e5:7a:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 29 08:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5ff15f5684fa14b07e8a22385539b92bc628257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:df:4d:76:41:28:ae:6c:44:ec:6b:8e:43:
98:cc:48:73:92:4f:5f:3c:91:9e:d1:8d:22:51:70:
ff:84:a8:04:e9:97:7d:76:07:fa:3f:5f:94:1e:c1:
58:4e:d1:f9:58:25:cb:45:59:22:cf:4d:48:20:27:
4c:a5:61:a8:86:96:1d:c8:82:19:0c:30:ea:f1:dc:
b8:85:af:e3:44:2d:99:a6:68:b2:0e:ef:8a:bb:02:
d3:82:cf:d7:2d:d8:15:4f:b4:80:b3:69:ee:c2:93:
d5:28:b5:08:b6:25:19:00:08:2a:09:a2:16:5f:33:
66:3b:2a:d6:17:eb:7f:18:e7:ad:3f:65:ba:a9:d8:
1d:cf:eb:79:ca:66:c4:49:da:c1:51:81:78:b9:40:
e4:46:01:b5:7b:dc:99:bc:b0:b4:a1:ba:ba:ad:8a:
85:36:79:4a:43:4b:8d:f9:ce:1a:e2:94:ce:8f:4e:
ea:2c:3f:a0:1d:9f:4c:12:a4:76:a0:2e:ab:6b:66:
95:49:71:28:31:f4:3d:45:79:22:8c:67:27:ad:2b:
0c:6f:8e:56:83:a0:da:04:c3:74:c9:b2:85:93:9e:
35:3e:62:d6:26:c7:27:e5:cc:5e:c8:73:03:fd:9c:
f2:e7:a7:94:eb:9d:d1:d5:56:bb:8d:7a:73:8b:f3:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:15:F5:68:4F:A1:4B:07:E8:A2:23:85:53:9B:92:BC:62:82:57
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/tf8V9WhPoUsH6KIjhVObkrxiglc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff
2a0e:7d45::/32
Signature Algorithm: sha256WithRSAEncryption
bd:1b:b7:98:42:b1:77:56:d7:f9:c3:8d:80:bc:3a:20:13:3f:
e0:4f:bd:bc:c7:1d:d1:21:ce:9a:17:10:1e:05:f1:17:40:ae:
83:9e:f1:14:69:c9:08:a2:0a:5c:9c:fb:44:79:24:1a:91:bf:
08:1a:a6:12:a7:9c:32:ba:b5:e3:4b:02:2e:0a:58:78:40:20:
ee:4d:dd:ac:67:11:6d:96:4c:5d:ea:75:1f:a2:b8:96:c3:94:
56:03:a2:c4:ff:58:34:37:83:40:9e:02:66:3a:d4:62:d0:75:
92:dd:6b:ce:87:d6:06:e5:b7:1c:19:7d:77:8f:35:76:9a:57:
30:b7:e7:6c:9a:45:9a:c3:c2:10:38:77:33:9d:ec:0e:01:00:
5c:20:de:29:f8:0a:9a:c4:b4:48:c7:27:fe:77:75:62:03:36:
2b:99:c9:34:7e:c8:ba:d2:f5:09:69:b3:03:f7:8b:67:80:89:
99:06:41:23:f0:b2:e9:c9:41:a6:ad:7c:9e:1b:7e:fc:58:9f:
11:4f:81:b3:5f:ca:15:56:8a:46:19:25:66:2c:d8:c8:4b:20:
32:45:22:e4:ff:61:f8:ee:ba:c2:5b:80:90:47:19:44:a9:a6:
bf:84:71:7a:c6:c1:a3:f7:4c:61:a7:71:38:55:ee:19:4f:7c:
ab:8a:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:36 2025 by rpki-client