Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/XsdhFSN7DeTh4eI00BDD4_zttPw.roa
File: XsdhFSN7DeTh4eI00BDD4_zttPw.roa (raw, json)
Hash identifier: tFKcPxfIMyOctJnt0bo6v620CjrP47cFED0TLnvjy0k=
Subject key identifier: 5E:C7:61:15:23:7B:0D:E4:E1:E1:E2:34:D0:10:C3:E3:FC:ED:B4:FC
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019995FEB97CF96C4DB5C62373544412EDCF
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/XsdhFSN7DeTh4eI00BDD4_zttPw.roa
Signing time: Mon 29 Sep 2025 15:02:02 +0000
ROA not before: Mon 29 Sep 2025 15:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210814
IP address blocks: 2a05:3a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:95:fe:b9:7c:f9:6c:4d:b5:c6:23:73:54:44:12:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Sep 29 15:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ec76115237b0de4e1e1e234d010c3e3fcedb4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:93:97:47:39:af:a8:b4:63:eb:50:ad:84:
3c:0d:62:61:1a:a0:d1:d1:33:8e:e3:0e:3b:2a:85:
d4:f5:ca:d7:72:e1:39:40:3c:86:d5:e1:82:f8:f1:
e7:30:df:26:98:c4:6f:2c:f9:cf:40:e9:82:79:e5:
8e:33:7a:34:b6:6e:9b:18:53:b4:10:5e:43:09:c2:
aa:7a:f0:ba:d7:d1:f3:5a:41:33:65:1e:9b:4b:a7:
59:25:69:a4:e6:9c:b1:b8:86:86:9c:1d:d8:d5:15:
ff:49:d3:59:5e:c1:82:52:5a:a4:b0:9c:40:22:f6:
38:a1:36:32:d5:c6:19:1a:8e:eb:a3:5e:d6:7d:88:
30:f4:dd:68:fc:7e:e1:1a:11:ee:f5:87:eb:a4:0a:
cb:21:4a:bb:02:ce:03:4a:f6:60:ee:c6:71:fe:82:
54:5c:ba:53:75:ea:a5:5c:62:77:50:6d:af:af:03:
0d:2b:69:2f:c1:11:37:81:94:e6:cd:28:52:f7:c1:
85:56:f6:c0:5f:28:d1:d4:cd:00:ea:11:12:8a:d9:
a1:ac:50:37:a1:15:ed:30:ec:84:23:12:0f:3c:a3:
d7:e7:00:6a:39:d4:13:6b:88:5a:11:39:0c:61:c2:
f9:7f:02:6d:ad:48:65:c4:d9:2d:ba:e7:da:b1:e9:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C7:61:15:23:7B:0D:E4:E1:E1:E2:34:D0:10:C3:E3:FC:ED:B4:FC
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/XsdhFSN7DeTh4eI00BDD4_zttPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
30:dc:ca:8d:50:9d:90:83:5d:fa:0a:a7:44:f6:8b:8a:e3:c3:
88:f0:c5:40:99:d7:34:27:20:9b:a2:45:08:f3:56:34:cc:01:
8e:2a:e7:c0:cb:a0:ac:da:5a:63:c9:b8:f6:fb:4c:ea:3c:8a:
5e:40:a5:e9:f9:d5:14:29:8b:20:2f:4e:70:3e:71:6b:e7:08:
17:bf:7b:53:b2:90:bf:1c:c5:45:3b:6f:50:15:46:69:9b:67:
62:58:46:87:0e:0d:56:3e:a4:be:af:83:f1:45:98:f2:f6:2e:
a7:83:1f:98:ed:08:2e:28:78:24:d0:46:e1:70:b3:d4:96:19:
4c:a5:24:c0:46:e5:a1:8c:e7:0c:43:f8:85:b0:40:ec:9c:ea:
a7:0c:37:e7:d1:43:5e:db:39:db:68:b9:f6:8e:0d:35:f7:01:
70:b6:04:30:d5:de:37:54:6e:42:eb:89:37:36:41:f2:8f:ee:
21:2b:6b:2b:14:24:3d:64:cf:97:5c:45:78:3f:99:7b:a3:8d:
6d:c0:5c:1d:a7:a4:90:fa:af:62:81:78:6b:5c:39:4f:0e:3a:
ef:79:7c:18:a0:23:39:69:68:30:53:72:5b:84:e3:c9:4e:61:
79:36:08:d2:5c:4a:3e:22:7a:75:e2:ab:34:37:61:67:3c:75:
06:f9:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:13 2025 by rpki-client