Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/xENVRuP5uKqGbiuyJdR6-8GlIEE.roa
File: xENVRuP5uKqGbiuyJdR6-8GlIEE.roa (raw, json)
Hash identifier: Lt6FxlNVVzKwTUuuYwOrC8tiEKNsKK8scI+0fsrZ7WU=
Subject key identifier: C4:43:55:46:E3:F9:B8:AA:86:6E:2B:B2:25:D4:7A:FB:C1:A5:20:41
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 019A0FDB52978E5764A6F5477AAA28EBBED5
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/xENVRuP5uKqGbiuyJdR6-8GlIEE.roa
Signing time: Thu 23 Oct 2025 06:57:03 +0000
ROA not before: Thu 23 Oct 2025 06:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212250
IP address blocks: 2a0b:1880::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:db:52:97:8e:57:64:a6:f5:47:7a:aa:28:eb:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Oct 23 06:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4435546e3f9b8aa866e2bb225d47afbc1a52041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:98:d9:a6:d6:48:b3:30:df:9b:cb:8d:96:
78:db:96:93:74:86:2c:d6:9c:a2:76:79:87:44:6c:
33:7d:5d:7f:5e:d2:07:58:60:a5:cb:87:aa:16:9b:
82:fa:75:a4:fd:ea:2b:36:ef:84:11:6b:22:2c:04:
aa:f8:37:94:26:d5:db:09:bf:a0:79:32:09:99:c7:
7c:64:36:b7:25:82:29:7a:8b:3e:65:cf:94:cd:12:
5f:6b:91:a1:70:1a:1d:8a:ea:91:d8:f9:08:55:7f:
64:4b:be:dd:ac:45:32:6d:ec:a1:7f:5d:72:3f:68:
04:3d:bd:7d:cb:28:41:0f:09:ae:57:9a:43:36:ba:
91:12:cd:13:2c:d8:8f:cb:50:30:ad:be:aa:a9:f0:
8d:1c:9c:7c:5d:b4:0c:2b:17:f2:69:77:1d:bb:f0:
c2:02:96:7e:30:46:96:fe:a3:89:4c:39:73:8f:a9:
64:89:c2:20:93:df:ee:c3:35:32:60:76:f0:55:f2:
e3:a9:a7:a7:71:05:8d:bc:21:c3:57:26:36:e2:ba:
9b:2f:ff:2d:69:86:9d:23:20:94:3f:3a:26:fe:10:
0e:f5:46:c1:8a:69:e3:13:47:c3:eb:e3:bd:ca:e5:
9e:2e:96:8c:b8:db:0c:63:16:64:d3:e6:78:4f:7a:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:55:46:E3:F9:B8:AA:86:6E:2B:B2:25:D4:7A:FB:C1:A5:20:41
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/xENVRuP5uKqGbiuyJdR6-8GlIEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
20:e9:1f:0d:78:91:29:5d:bf:56:33:91:ec:06:d4:4f:59:5f:
d6:5c:e2:b6:2e:3a:58:84:9e:64:43:e7:9f:c0:c8:0d:85:96:
60:c8:90:1a:93:09:a0:e0:60:8e:31:18:48:2d:da:a8:55:fa:
66:3a:27:02:f2:05:a3:54:4f:ad:55:ab:d6:3d:33:a4:df:33:
d7:72:e1:15:d0:34:d1:ad:a0:ab:3f:a8:de:5f:83:3c:4e:18:
24:5b:f7:54:a4:6e:fb:81:84:08:4a:f3:a8:e9:e1:4c:84:17:
f9:a4:f5:e7:72:15:85:11:c1:36:21:63:59:d8:f5:90:e2:3b:
91:c5:d7:ed:ab:86:e4:36:82:b2:73:53:3b:98:51:5b:0f:95:
0e:f0:6f:d4:b4:e8:d7:a4:d6:e3:64:2d:76:58:e4:8b:a5:60:
86:1b:eb:4b:97:4f:cb:50:d7:62:6f:59:73:8c:65:44:b8:35:
d5:85:c0:b5:c3:8f:4c:c2:d1:b2:b3:00:33:c3:f8:88:7a:0e:
2b:6c:6f:86:8c:e2:d4:a6:f7:eb:af:9b:88:c9:09:94:6c:6f:
4b:b6:54:b3:8b:97:6a:b2:52:9e:ba:f7:18:e9:57:07:92:54:
b8:64:45:e5:e4:69:f7:b4:d9:a7:ef:08:b2:e9:13:76:7f:bb:
93:6d:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:17 2025 by rpki-client