Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/42xVzUIyXqfXVqxZnWJdy4Kwupc.roa
File: 42xVzUIyXqfXVqxZnWJdy4Kwupc.roa (raw, json)
Hash identifier: /mxwpkDKFasvyEn1G6AJvfMW6ypxk1g4AfmWIHKbxAc=
Subject key identifier: E3:6C:55:CD:42:32:5E:A7:D7:56:AC:59:9D:62:5D:CB:82:B0:BA:97
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 019A07024EFD8DA30F0693B303A601A25A7E
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/42xVzUIyXqfXVqxZnWJdy4Kwupc.roa
Signing time: Tue 21 Oct 2025 13:43:02 +0000
ROA not before: Tue 21 Oct 2025 13:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 62.164.160.0/21 maxlen: 21
62.164.164.0/22 maxlen: 22
116.199.224.0/21 maxlen: 21
116.199.232.0/23 maxlen: 23
116.199.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:02:4e:fd:8d:a3:0f:06:93:b3:03:a6:01:a2:5a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Oct 21 13:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36c55cd42325ea7d756ac599d625dcb82b0ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:83:78:4b:bd:18:a1:b4:65:0c:bf:a6:c6:
eb:5f:d9:35:8f:53:83:08:91:ad:75:df:65:6c:c3:
bc:74:34:6d:9a:b7:59:c9:d2:7e:d7:af:48:52:4c:
dc:1b:05:04:3c:a9:3a:22:a0:26:60:5e:cc:76:0b:
77:bc:c6:f7:13:53:26:0b:20:af:21:aa:ae:eb:00:
97:8c:46:56:d4:65:60:ad:d8:f6:73:7c:d3:4b:0f:
4b:c4:cc:00:db:74:d5:e6:b9:51:9c:ae:8c:55:dc:
ae:ec:d1:b8:e4:d2:92:db:03:63:1c:21:ad:83:35:
c9:21:20:f2:0b:ff:c0:e6:ca:dd:0c:b5:c6:36:58:
2a:1e:06:70:c4:85:54:b0:21:54:4c:6a:b4:7d:dd:
17:76:2f:eb:b4:1e:30:21:87:ab:b4:1a:26:2c:07:
97:a4:47:ff:86:53:aa:a3:35:0f:a7:b5:ab:ca:3b:
89:f2:2b:fc:e4:d1:73:bd:59:ba:99:ff:6d:0e:86:
6b:0c:a1:01:30:48:c7:2f:d6:7f:18:bb:af:a3:cf:
6e:e1:bc:9e:48:5d:be:e6:53:8b:6d:55:ed:2d:59:
5f:c6:ca:9a:9d:2f:38:28:c0:96:b7:dc:e3:07:ce:
0b:ff:21:d3:ee:63:5a:9d:9a:3c:17:00:8f:2b:53:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:55:CD:42:32:5E:A7:D7:56:AC:59:9D:62:5D:CB:82:B0:BA:97
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/42xVzUIyXqfXVqxZnWJdy4Kwupc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.160.0/21
116.199.224.0-116.199.234.255
Signature Algorithm: sha256WithRSAEncryption
0d:79:75:f7:87:3f:5f:0d:9b:52:e1:b9:18:9a:8f:bd:9f:10:
2e:52:2d:13:0c:dc:65:cb:83:6d:67:b3:ef:9a:ac:8a:68:4e:
30:32:eb:b9:3f:a8:27:8e:95:fe:1b:a5:80:98:74:62:8b:41:
33:37:6d:73:65:b4:cd:bf:3b:af:81:f2:8a:ee:dc:a9:95:8c:
42:94:c4:4a:06:f1:5b:21:8a:56:19:01:d0:ec:44:c7:b3:97:
d5:5d:b9:fc:65:f5:30:b3:82:37:ee:61:dc:52:53:2f:8e:85:
fc:ae:38:3d:ab:ac:32:1e:39:af:8b:58:4c:aa:ee:af:16:55:
26:00:ca:ee:eb:3a:5a:30:db:e6:90:a1:dc:cc:29:89:f3:5c:
92:5c:58:8b:36:3b:30:60:66:de:ae:ca:30:b7:6f:8b:d5:d8:
32:c2:3c:53:60:4c:e8:6b:24:83:bd:75:14:1f:ce:c6:66:9b:
76:92:0e:52:11:61:c2:3d:a4:61:fe:73:e3:c1:b6:c4:bb:f9:
76:96:a6:02:e9:57:89:89:29:0b:8c:11:77:68:4e:d1:aa:72:
68:4f:2c:4f:0e:18:c3:4f:21:6c:cb:17:05:0a:fc:62:6d:61:
f5:c4:03:79:6f:42:3d:4d:9e:d8:e0:48:4b:9a:cf:26:54:ec:
18:f6:29:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:19 2025 by rpki-client