Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/xeZFFxUTjeteUifcFQ6mdr_qQwI.roa
File: xeZFFxUTjeteUifcFQ6mdr_qQwI.roa (raw, json)
Hash identifier: L34O7i37taiDeG7Hrwja5e0wink9xi3XQdkjy3Bi8a0=
Subject key identifier: C5:E6:45:17:15:13:8D:EB:5E:52:27:DC:15:0E:A6:76:BF:EA:43:02
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019A4A4F9FFFC917AF53E70492C5851A0AA0
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/xeZFFxUTjeteUifcFQ6mdr_qQwI.roa
Signing time: Mon 03 Nov 2025 15:22:03 +0000
ROA not before: Mon 03 Nov 2025 15:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 109.122.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:4f:9f:ff:c9:17:af:53:e7:04:92:c5:85:1a:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Nov 3 15:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e6451715138deb5e5227dc150ea676bfea4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:f1:ce:1d:08:31:72:28:b8:63:34:8a:5f:
86:be:c4:51:15:ef:31:bb:5c:60:01:e1:36:d5:c7:
cc:48:50:34:00:78:d5:57:55:15:97:f1:9c:bc:12:
4b:1c:22:da:36:78:a9:36:c8:b8:3d:55:65:72:53:
c6:45:17:e2:39:b7:0a:76:c9:61:3f:6f:cd:f2:5f:
ab:73:25:e7:05:e7:9f:05:cd:f5:e0:56:22:f2:91:
61:99:f4:ce:54:cd:f7:63:a6:90:21:cb:c9:9f:3d:
e1:55:d8:22:d0:e1:67:70:fe:12:8c:3f:e0:3b:ab:
bd:9d:96:4e:34:dc:23:b2:e1:e3:1b:0d:37:0b:15:
9b:04:df:bf:47:7e:38:41:fe:f0:7a:f0:2b:0c:55:
5f:58:76:5a:25:a8:31:d4:05:4b:82:00:e0:5f:38:
84:8a:9e:b7:82:0e:20:1c:83:85:43:fc:b7:cb:5e:
f1:ea:83:16:10:4b:76:9c:c9:d4:1a:6c:b2:e5:a0:
d4:27:4b:c6:ee:f2:45:61:d8:25:a5:1a:2f:27:f7:
07:bd:ae:3f:59:e4:7c:0d:ae:c3:14:6c:ed:82:eb:
30:23:61:c0:e0:ea:28:9a:b8:da:8e:64:1c:36:0d:
77:b6:c1:57:e1:22:18:a8:af:d8:91:c5:6e:7f:5e:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:45:17:15:13:8D:EB:5E:52:27:DC:15:0E:A6:76:BF:EA:43:02
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/xeZFFxUTjeteUifcFQ6mdr_qQwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.12.0/24
Signature Algorithm: sha256WithRSAEncryption
26:07:81:9b:65:1a:35:27:f3:54:95:a0:44:2d:af:c0:e6:13:
6b:87:18:e6:3b:71:86:c0:8d:2b:10:b0:16:66:ac:86:70:9d:
d1:02:5d:98:c6:fb:fe:09:1b:17:2e:2f:dd:25:51:11:27:4f:
4d:b4:6e:a7:46:c2:41:bc:6c:5b:3b:76:09:cc:48:5e:23:99:
e1:82:34:8a:1c:50:82:92:39:77:6b:40:9a:90:43:27:90:7f:
06:4a:dc:a5:b2:e9:fc:5d:c4:a0:09:74:2e:65:54:6d:d8:b9:
15:8e:e4:6e:af:28:2a:00:61:99:a6:3d:54:81:c8:c8:d1:a4:
9a:c3:b5:6c:64:25:d6:39:b8:ae:85:62:14:d6:4d:fa:0d:20:
15:c5:98:67:2a:a3:4b:08:b0:b0:fa:f1:07:33:18:50:87:41:
58:ce:92:43:03:2b:36:5f:a8:98:61:7f:99:2d:34:9b:e9:36:
0d:f1:fa:2c:f3:d0:c4:84:2e:47:5b:b2:8f:ec:94:bf:20:3d:
98:f0:e5:8a:15:5e:18:6d:b4:d8:06:dc:40:12:f3:0d:a0:b0:
cb:30:e6:b8:2e:03:aa:1c:d8:d5:06:ac:2d:b0:7e:b6:1f:3b:
7d:43:58:4f:de:54:db:5c:33:10:30:28:18:89:e9:ae:57:53:
0e:27:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:06 2025 by rpki-client