Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T5vT2PUuOK_oOw9eeL61OG5JodE.roa
File: T5vT2PUuOK_oOw9eeL61OG5JodE.roa (raw, json)
Hash identifier: Qx9ZluVUWlljB4Ttw7aM+HpAqzmXCG2m7QWMx89ePAE=
Subject key identifier: 4F:9B:D3:D8:F5:2E:38:AF:E8:3B:0F:5E:78:BE:B5:38:6E:49:A1:D1
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 019A2C4D6D5A6F8DDDB1B733876182D911C6
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T5vT2PUuOK_oOw9eeL61OG5JodE.roa
Signing time: Tue 28 Oct 2025 19:31:03 +0000
ROA not before: Tue 28 Oct 2025 19:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 213.137.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:4d:6d:5a:6f:8d:dd:b1:b7:33:87:61:82:d9:11:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 28 19:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f9bd3d8f52e38afe83b0f5e78beb5386e49a1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:8d:82:50:66:9f:9a:9c:88:74:bb:18:0f:
e2:4d:4e:9d:b4:d2:84:d2:2e:f3:12:6e:d4:08:16:
8e:29:3b:7c:f1:9d:76:c7:1d:4e:89:66:6d:68:d5:
7c:0a:b8:ab:87:5c:d4:1a:f2:90:e1:f4:39:3c:a3:
3b:54:9d:98:ab:28:81:b1:7a:0a:24:a5:b5:1d:a7:
65:3f:3a:82:16:29:c3:c9:82:65:99:f0:a8:64:8c:
75:b8:7a:f5:ea:95:ba:93:10:79:c5:80:0e:43:f5:
db:7a:1e:86:9e:4b:1b:84:df:bd:77:e5:8d:eb:5d:
fb:c4:92:95:8d:6b:ef:d2:67:f8:f3:54:be:01:d1:
08:f1:0e:a2:fe:d7:36:5a:03:74:46:17:bb:90:2d:
e9:2f:21:e8:91:ea:f2:35:1e:f6:19:77:7f:86:c8:
08:88:96:bc:71:24:e6:5b:40:77:7b:8d:60:b1:5a:
bd:4d:c7:3d:e6:24:29:f1:89:70:a9:ee:71:4b:c1:
0a:8b:0d:f7:07:8b:a8:42:d9:9d:ec:19:48:0d:73:
80:f0:d9:47:56:22:87:b6:87:ab:f9:a2:67:60:31:
38:64:44:22:2e:eb:dc:a2:66:0e:5f:42:65:65:24:
3e:18:27:50:26:2d:b7:f6:48:22:a4:5e:6e:a7:97:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:D3:D8:F5:2E:38:AF:E8:3B:0F:5E:78:BE:B5:38:6E:49:A1:D1
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/T5vT2PUuOK_oOw9eeL61OG5JodE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7c:03:d5:e7:f0:c4:6b:75:40:2d:d4:9d:67:7c:fd:ae:f1:
2d:d5:86:5b:dd:b5:ad:7f:b2:c6:1f:7d:d6:46:27:53:20:e3:
c5:f1:26:e7:e2:17:6e:bf:6a:0f:86:07:e9:6e:b4:26:cc:04:
3b:39:78:00:95:fc:1e:ae:de:d7:0c:8e:3c:97:13:c8:d1:eb:
e0:ed:5d:70:9d:69:60:e2:89:c5:16:96:c7:5e:4c:98:74:28:
e2:7b:3b:8c:1f:e3:b0:43:e4:0d:c1:03:55:d2:fa:72:87:fd:
95:a4:0a:c4:ed:c6:2b:ff:87:dd:bd:11:9e:e8:36:39:01:c9:
3d:c5:34:87:05:f5:3e:37:92:51:6b:06:f8:45:61:01:c6:5a:
ee:57:d4:a3:8e:ba:cb:b1:86:88:ee:a5:84:68:39:81:4c:a1:
27:33:78:f3:48:28:f5:05:b0:c0:7f:ff:e4:24:c0:1e:e5:20:
26:d4:37:d4:bb:14:86:36:9d:e0:60:95:9a:0f:84:f8:45:ab:
66:db:eb:d6:ce:f7:f2:65:67:26:59:47:c8:e0:f1:ad:ee:3e:
ed:6d:17:35:8d:13:35:bc:d3:75:9c:88:38:bd:9f:00:b5:d0:
c1:f4:24:2d:a2:3c:a4:c4:77:1a:a6:b5:8e:85:38:99:09:33:
2b:5a:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:41 2025 by rpki-client