Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E8fzWgcpCLPd8QNckIEXekQlBQA.roa
File: E8fzWgcpCLPd8QNckIEXekQlBQA.roa (raw, json)
Hash identifier: /dxaNvLGRjA+UTtklgSzXuZ7zFokCn/5lh40YAx5npw=
Subject key identifier: 13:C7:F3:5A:07:29:08:B3:DD:F1:03:5C:90:81:17:7A:44:25:05:00
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019A2AD2665D631EB8878DEE1ED085AD3143
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E8fzWgcpCLPd8QNckIEXekQlBQA.roa
Signing time: Tue 28 Oct 2025 12:37:03 +0000
ROA not before: Tue 28 Oct 2025 12:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205866
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:19c3::/32 maxlen: 32
2a0e:adc0::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:d2:66:5d:63:1e:b8:87:8d:ee:1e:d0:85:ad:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 28 12:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c7f35a072908b3ddf1035c9081177a44250500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:5e:61:b1:a3:69:82:c5:84:3c:eb:ad:10:
0c:5b:92:33:e3:f8:df:80:c3:74:ef:04:b8:b7:dd:
11:cf:25:55:df:45:49:3f:bb:df:4a:f8:d3:48:c0:
fb:4e:d1:d9:0c:dd:a3:bf:ab:0d:f5:31:0b:68:96:
ef:65:c7:83:a1:87:48:b9:62:af:f9:02:df:8e:e4:
d5:15:d9:82:e0:67:de:b7:bb:f8:4e:1b:81:62:73:
38:99:de:a7:e8:5e:74:47:82:a4:3a:08:02:0f:80:
da:09:ce:05:2e:52:57:49:31:5f:5e:ac:3d:1d:f6:
f3:94:d4:7d:ef:39:f2:b5:cf:be:f6:e0:5e:a7:27:
9d:24:54:78:e4:07:6d:45:bb:b3:59:51:44:f3:8c:
a8:a8:8c:d1:33:5b:1b:f3:ec:16:60:c0:1a:43:d8:
e3:6b:c5:18:3f:e5:7e:4a:e6:65:81:a7:72:6d:ac:
64:e2:77:19:0f:8c:a9:8a:bb:2f:10:91:6c:13:47:
d6:72:e3:cf:b6:8c:0f:4a:35:c9:0a:ac:0b:80:65:
aa:ab:09:47:52:37:4c:f3:82:2d:0a:e1:93:0a:82:
2b:82:87:7d:f4:d2:5d:a7:55:e1:2b:95:52:20:d5:
9b:4f:02:1e:bd:24:c6:d6:43:8a:e6:de:46:a5:89:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:F3:5A:07:29:08:B3:DD:F1:03:5C:90:81:17:7A:44:25:05:00
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/E8fzWgcpCLPd8QNckIEXekQlBQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:fbc0::/29
2a0e:19c3::/32
2a0e:adc0::/29
2a0f:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
11:01:75:7b:ef:54:e0:15:8c:35:b0:b6:3c:73:11:c7:28:33:
e5:d5:b8:17:3e:03:14:0e:cf:c2:7d:4b:ee:eb:d8:88:1c:a5:
97:d5:f2:90:5a:66:31:04:01:69:90:8b:57:13:e3:35:25:fd:
5f:2d:b6:5e:4b:fc:3d:58:04:cc:d8:a6:f2:74:44:89:00:52:
de:a8:0b:aa:90:2d:a5:57:ac:e8:d1:bf:83:45:d0:a8:f7:c2:
a5:7f:0b:16:f8:fd:21:70:a5:66:da:43:e0:90:cc:0d:e9:6a:
50:d0:71:58:60:b2:ec:74:1d:68:d7:9b:bd:26:85:ff:79:aa:
d7:19:40:52:fa:1c:4a:e7:19:c6:d1:b5:d0:0e:55:da:f3:58:
fd:43:68:f2:93:1a:02:68:eb:c1:4d:4e:a8:f8:67:cc:93:19:
a8:d8:10:b6:a8:8f:5e:b4:9d:92:bf:37:3b:ae:05:c4:f7:fd:
dd:44:4e:ad:89:60:7a:90:a2:ca:b9:fa:b3:77:bb:22:1f:60:
f4:92:1a:c9:db:c2:86:62:45:1c:b2:e5:4f:43:e1:07:8b:c4:
9f:fc:75:b2:57:cb:78:ef:00:75:13:ca:51:c6:2f:6c:fe:f3:
34:59:81:67:00:19:78:a1:57:85:13:f3:46:fc:a4:a2:8f:30:
c5:46:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:06 2025 by rpki-client