Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6NQyhBc-lv1H5sNlD2t2O-mOxr0.roa
File: 6NQyhBc-lv1H5sNlD2t2O-mOxr0.roa (raw, json)
Hash identifier: UXKsLLkOfG1XelE9fY2DrxCLPlIFYvk8sH5ZxPnkQSQ=
Subject key identifier: E8:D4:32:84:17:3E:96:FD:47:E6:C3:65:0F:6B:76:3B:E9:8E:C6:BD
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019A2D77E497AF43CAB093B15A48A07D5CA9
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6NQyhBc-lv1H5sNlD2t2O-mOxr0.roa
Signing time: Wed 29 Oct 2025 00:57:03 +0000
ROA not before: Wed 29 Oct 2025 00:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206215
IP address blocks: 2a0e:8f02:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:77:e4:97:af:43:ca:b0:93:b1:5a:48:a0:7d:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Oct 29 00:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d43284173e96fd47e6c3650f6b763be98ec6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:39:c3:30:a1:de:14:b8:30:5f:45:12:d6:
5a:f5:d8:3a:f9:48:ee:68:8e:22:2e:0a:4f:67:b1:
ac:26:5d:b3:a6:0c:15:c5:73:44:73:4f:c6:bb:d7:
6a:98:b5:bd:95:99:c9:ce:d1:b0:c9:36:33:bc:4e:
a5:2b:f0:e4:e7:80:0c:e8:4b:8f:c6:86:25:1a:2e:
97:54:51:e2:24:aa:7f:bf:f4:45:55:e2:19:f6:1a:
db:79:5f:93:8f:3b:88:36:1c:51:2d:1b:2d:1a:54:
fb:d1:0e:ca:97:7f:75:c5:09:f4:9a:6f:92:e6:c1:
01:2e:86:7f:4e:8b:14:01:66:8b:a2:7a:31:88:32:
75:4f:4a:15:81:2f:a4:0e:53:32:97:f1:3d:13:c9:
82:21:ca:5b:6f:cf:4d:b9:0a:e4:b7:db:f4:62:aa:
d9:04:4b:66:51:92:9e:c0:94:a3:5b:1f:c9:8a:d5:
97:fa:d3:91:8d:f5:14:dc:d3:81:51:63:3b:a7:0a:
fb:20:2e:77:20:65:95:33:4f:0a:c7:db:e1:2e:a3:
6f:ab:9b:04:8a:9f:58:4b:75:21:fa:bf:fa:c7:df:
41:74:95:20:e5:f7:c6:bf:61:35:52:4c:2f:f0:8f:
b1:97:1b:54:eb:9a:af:4b:6e:6e:f9:f3:1b:93:54:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D4:32:84:17:3E:96:FD:47:E6:C3:65:0F:6B:76:3B:E9:8E:C6:BD
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6NQyhBc-lv1H5sNlD2t2O-mOxr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:1100::/40
Signature Algorithm: sha256WithRSAEncryption
53:c5:01:7f:16:9f:42:55:f8:9f:30:2f:ee:aa:47:24:28:83:
1c:77:0b:3a:75:20:e1:5b:17:80:5c:67:f6:bf:14:40:ec:09:
97:7f:04:91:ec:9f:82:4b:a2:15:b8:c7:e2:d2:88:3c:0d:a8:
52:9b:07:8e:5c:e2:05:53:a1:ed:ca:f8:9b:5e:6a:92:d7:07:
7e:80:3a:af:61:ae:89:d0:89:04:cc:54:02:dc:7f:7b:e7:6f:
37:75:d7:74:8a:31:ab:af:e6:51:b4:aa:af:b6:08:46:51:0d:
4f:62:49:c6:67:b4:df:79:c0:6b:61:90:80:67:da:b8:c5:7b:
2a:13:99:a9:61:10:30:60:61:3e:8c:52:50:be:df:e5:42:b1:
59:2a:53:15:dd:0c:6a:23:29:3b:a7:c3:c4:4b:c0:08:90:69:
36:b7:b5:53:08:69:8f:9a:d2:f5:23:2c:17:ba:73:5c:78:ef:
c4:6f:2e:d4:fc:06:50:0e:8d:45:37:db:8d:cc:ac:c7:a2:82:
97:73:3b:f1:bb:26:22:ee:11:c1:df:1a:58:84:5a:5d:58:42:
32:65:22:a1:67:5c:41:bf:ef:cb:fd:80:25:54:60:de:40:13:
0e:9e:9e:dd:09:1d:b5:b1:de:a3:56:a4:c5:e7:92:2f:74:88:
47:30:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:14:43 2025 by rpki-client