Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/koBib2uPWu1fyn4HVBAVxFJIczc.roa
File: koBib2uPWu1fyn4HVBAVxFJIczc.roa (raw, json)
Hash identifier: yxrymR254A6BMsvvnsqltpyGmKY1M2wtyBZSkgJxmi8=
Subject key identifier: 92:80:62:6F:6B:8F:5A:ED:5F:CA:7E:07:54:10:15:C4:52:48:73:37
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019A2C176A3E50E1BD77F2DBB81C3D421B58
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/koBib2uPWu1fyn4HVBAVxFJIczc.roa
Signing time: Tue 28 Oct 2025 18:32:03 +0000
ROA not before: Tue 28 Oct 2025 18:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214404
IP address blocks: 2a0d:5480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:17:6a:3e:50:e1:bd:77:f2:db:b8:1c:3d:42:1b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Oct 28 18:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9280626f6b8f5aed5fca7e07541015c452487337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5b:c2:10:38:9d:98:50:07:c0:e5:a8:63:da:
59:d7:54:1f:6b:07:1a:5c:aa:0d:5b:6f:aa:7b:f5:
ea:9d:39:73:16:7f:09:5b:6e:2a:98:e8:89:a4:9d:
9c:80:68:97:84:36:e0:e5:79:fe:e5:ff:dc:74:e5:
bf:03:fd:fd:a6:0a:1b:e1:c0:b5:7e:7c:18:05:b9:
f0:bf:f7:a4:81:2e:fe:11:2a:e3:5c:2a:ed:51:93:
b1:af:b7:62:60:d3:91:6e:75:ae:d8:e7:52:57:54:
44:18:a5:6e:57:89:df:ae:ca:69:8e:a7:a2:e3:65:
17:ad:71:6d:14:24:e4:7e:c8:75:1f:f3:68:6e:f0:
e2:cd:6e:16:93:c5:d5:30:14:43:83:fd:77:89:c6:
1b:19:58:f8:d8:58:5f:77:80:fc:2f:ff:ec:eb:60:
e8:f3:f3:43:d8:87:35:09:1e:80:c0:d6:c0:a8:4d:
8d:0c:a8:54:63:79:5f:12:ea:dd:82:bf:da:2f:5d:
5c:b7:da:51:c6:7d:2a:c5:d8:93:eb:85:be:62:e1:
e1:1a:66:51:1a:10:a0:94:c4:89:82:41:1d:26:cc:
eb:f9:a8:74:5f:70:c6:33:4e:70:5b:93:69:36:a7:
dd:63:3b:50:4e:3f:d3:78:79:40:5e:d2:b3:b4:7e:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:62:6F:6B:8F:5A:ED:5F:CA:7E:07:54:10:15:C4:52:48:73:37
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/koBib2uPWu1fyn4HVBAVxFJIczc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:5480::/29
Signature Algorithm: sha256WithRSAEncryption
a5:f3:0e:4d:a5:75:85:05:33:44:22:9d:a5:f8:90:b0:26:93:
a3:ab:fb:b3:d7:93:c5:27:75:f6:34:19:15:74:b0:a1:51:8d:
52:34:4e:c1:0f:97:8c:ff:e4:0e:f0:06:ed:6d:39:e1:70:c1:
be:dd:5c:4a:5a:05:42:5c:c9:10:94:74:54:f8:5b:14:91:61:
c7:7d:a1:fc:fe:0a:14:e0:80:29:e8:af:88:e4:82:ce:09:86:
a6:70:18:d6:96:47:0b:4a:0b:05:ec:8a:20:61:7b:56:da:ee:
69:3b:79:45:2b:1b:b3:6e:d0:43:5b:d5:cd:1d:48:c5:3e:92:
7a:ce:a8:12:37:07:ca:a7:d7:3d:f7:1d:27:fc:25:5c:80:7c:
be:27:0d:33:33:29:bb:35:d3:0f:d7:4c:86:ed:59:b9:19:0f:
de:fe:01:88:91:c1:40:d9:7e:f0:10:e5:de:2b:c5:9f:da:60:
8a:87:de:db:b5:2b:9e:79:b6:47:8e:06:ba:a5:3b:85:40:46:
16:69:83:58:73:30:31:ea:97:f0:6c:c9:4b:9f:e2:ea:1a:c3:
0c:65:29:fe:f1:ed:e0:16:5f:e5:27:38:70:3c:73:52:8a:ac:
3a:cd:71:f6:bc:f7:bd:f8:2f:eb:0e:10:d8:60:e3:77:eb:19:
90:dd:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:18:44 2025 by rpki-client