Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/AELbnrst4kQyzdi7g4ShDezGM3w.roa
File: AELbnrst4kQyzdi7g4ShDezGM3w.roa (raw, json)
Hash identifier: xt/86MELw/mibPspX4H0v4uqAT/zohe5sLMXj3CCgqE=
Subject key identifier: 00:42:DB:9E:BB:2D:E2:44:32:CD:D8:BB:83:84:A1:0D:EC:C6:33:7C
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019A4EDB6C66CD9CEC443E7AEB3101D4271B
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/AELbnrst4kQyzdi7g4ShDezGM3w.roa
Signing time: Tue 04 Nov 2025 12:33:14 +0000
ROA not before: Tue 04 Nov 2025 12:33:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205828
IP address blocks: 2a11:4047::/32 maxlen: 32
2a11:84c5::/32 maxlen: 32
2a11:a187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:db:6c:66:cd:9c:ec:44:3e:7a:eb:31:01:d4:27:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Nov 4 12:33:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0042db9ebb2de24432cdd8bb8384a10decc6337c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:10:ae:85:50:0c:41:0e:55:0d:bd:db:37:
f5:e2:0d:ff:51:86:44:86:c1:72:76:4c:3f:90:f9:
2c:90:17:c3:72:9e:4d:f7:10:af:be:ea:89:2c:a3:
cb:ad:0f:22:cf:74:f7:09:39:3c:c3:5e:ab:21:8c:
df:67:d3:04:e8:7c:4b:ef:f0:26:66:61:0e:62:a6:
65:0a:17:fe:20:b0:34:ea:9a:4f:18:16:4f:e5:27:
bc:2d:43:09:f5:78:d1:d0:b0:82:8a:32:3a:83:b9:
cf:66:1f:f0:5a:38:de:50:ad:d4:9a:81:14:70:8a:
10:2d:6f:69:c4:f7:aa:9c:11:81:8a:38:a8:da:4f:
16:88:93:17:bd:ff:76:f7:d0:47:e8:77:06:c9:b0:
17:bf:a2:c4:f7:bb:fd:5b:7d:81:9e:94:27:0e:45:
14:49:52:66:5e:4e:88:e8:31:39:8d:84:6b:2d:72:
fe:ae:0e:dc:cd:a5:09:ec:eb:58:bc:6e:f1:96:69:
e1:ba:f4:a4:b2:bc:0e:64:05:9b:9f:27:36:18:a1:
56:d6:be:6f:5c:94:86:b7:a4:01:68:42:8a:50:ca:
76:d9:ca:7f:bf:dc:73:2c:84:ea:85:e6:c6:10:b6:
cc:38:db:27:58:d4:e6:45:08:d1:71:74:99:4e:fb:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:42:DB:9E:BB:2D:E2:44:32:CD:D8:BB:83:84:A1:0D:EC:C6:33:7C
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/AELbnrst4kQyzdi7g4ShDezGM3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4047::/32
2a11:84c5::/32
2a11:a187::/32
Signature Algorithm: sha256WithRSAEncryption
ad:39:69:0a:02:5c:21:bf:c9:2d:d8:4f:fb:2a:69:78:8c:17:
2c:fe:b7:37:66:4a:a9:c7:04:73:f5:54:5b:7a:8c:92:f7:c7:
89:04:a6:81:43:68:fe:c2:e0:95:37:a2:15:b6:74:bb:8c:48:
3c:19:1b:81:37:a2:c1:dc:0e:5c:cd:71:66:4a:ad:b3:11:2c:
07:9f:c5:8c:25:08:58:5d:19:fa:8c:a6:22:05:1d:0b:ff:d5:
db:6a:f4:8d:24:8c:c3:14:30:da:c1:ac:47:f8:95:0b:1f:07:
f8:5d:96:1b:f3:1e:d9:18:ba:5d:5e:dc:44:d5:b5:d8:84:b0:
7c:65:2e:c5:ed:7e:3c:d4:cc:fc:78:30:4f:d9:a7:d7:2d:ab:
64:6f:89:41:2d:bc:6d:95:82:9e:50:bd:91:f9:6c:74:58:13:
ea:f5:e4:d9:eb:93:d3:04:dd:95:69:2c:8a:05:47:d5:c9:a6:
fa:c0:3f:ea:17:0f:47:5b:22:f2:78:c7:78:37:eb:a4:8f:f2:
72:19:7e:60:00:ba:ae:56:c5:e3:3e:79:81:76:41:af:3f:d7:
43:57:87:aa:b6:1c:ce:de:40:fe:45:20:33:c3:29:63:c7:7c:
12:d0:8d:cb:49:6f:8e:ea:b3:b8:7d:57:7a:7e:c7:2d:51:1b:
03:5b:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:27 2025 by rpki-client