Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa
File: lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa (raw, json)
Hash identifier: tVhecYMNj6vTa/xG0wc+2Ec2FDfRws1DmGu5dGnbsLw=
Subject key identifier: 94:DE:47:3B:E2:4D:BC:6B:B8:84:6A:58:E6:07:13:0B:84:E2:36:23
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019A35360251B8724EF378A87DE634CBA575
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa
Signing time: Thu 30 Oct 2025 13:02:03 +0000
ROA not before: Thu 30 Oct 2025 13:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62563
IP address blocks: 2a14:dc81:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:36:02:51:b8:72:4e:f3:78:a8:7d:e6:34:cb:a5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Oct 30 13:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94de473be24dbc6bb8846a58e607130b84e23623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:45:55:2a:2f:96:c1:b5:9b:24:77:ed:c6:
d3:71:63:93:6c:33:10:a0:ef:d1:f6:c7:a6:ee:8a:
7d:ff:6b:6c:53:08:43:98:2d:a4:fd:c7:22:e0:61:
d8:62:ba:76:46:ad:3f:6a:5c:29:84:89:40:d4:33:
39:af:26:ec:99:4f:e7:26:30:01:73:56:ec:51:c5:
29:a7:51:15:41:0d:6c:68:63:2b:82:e1:46:49:a7:
14:f2:f4:3d:0f:5e:f4:c7:e7:c8:7c:e0:d1:c6:4d:
a2:72:69:0e:e5:bf:1f:14:49:70:2f:c0:4e:f9:4b:
d6:d6:05:06:b7:e7:61:5f:d9:df:aa:29:ac:36:49:
67:f6:78:9b:b2:9d:33:42:b1:9f:47:c9:8c:8a:97:
f1:cb:a1:3e:52:18:b7:93:56:8e:09:e2:95:c2:a5:
4d:67:2f:db:30:bf:16:e2:45:7d:7e:45:38:16:b4:
b4:79:33:1d:44:b7:c0:a4:fa:53:ae:f0:a3:18:16:
14:f8:82:34:d6:03:6a:01:23:5e:86:85:c9:46:ca:
36:65:0c:5a:a3:58:64:a7:4b:ce:fe:b2:49:51:6e:
18:96:51:f3:1a:b0:b2:d5:5d:11:55:2f:3e:ac:c7:
c7:06:1f:e8:8e:10:5b:70:0a:70:b0:52:4c:54:e7:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:47:3B:E2:4D:BC:6B:B8:84:6A:58:E6:07:13:0B:84:E2:36:23
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:dc81:2000::/36
Signature Algorithm: sha256WithRSAEncryption
19:46:4d:9e:e5:a4:f5:e1:48:d8:4f:c5:6e:8a:d2:a3:b4:7a:
af:68:2c:6f:11:53:17:58:4a:59:83:c2:bb:fc:f1:bd:4e:0d:
c0:b2:9d:6d:18:15:10:8e:e7:dc:da:01:d8:13:83:98:67:a9:
63:f6:fc:49:cb:f1:22:dd:c9:a4:10:66:62:8f:0c:b3:58:c5:
1d:da:87:5f:1b:52:b7:66:5c:09:af:59:3f:c4:62:bd:44:2f:
00:db:dd:84:35:9a:87:c8:21:e8:00:75:3d:d9:2f:fa:37:7c:
36:d0:7d:4d:7e:34:12:35:fb:ed:6f:89:ad:03:3d:dc:3c:d1:
81:28:86:99:de:92:5c:f0:32:2f:a8:bb:b7:31:db:1f:b5:ed:
c4:a3:12:4e:42:67:dc:64:21:28:dd:fa:c7:a8:95:25:c1:05:
a6:21:0d:b9:8f:e3:95:87:f0:02:d7:1b:22:e8:04:89:d2:7e:
34:3e:f5:0f:28:ab:b8:0c:3c:bd:7a:0e:e3:97:5d:56:e0:c3:
8b:75:03:84:99:86:7a:14:0e:d7:d1:b4:fb:2e:9a:34:2c:9a:
b7:63:f2:8c:54:2d:ae:e1:1e:f0:14:d5:b2:8a:4b:ad:c2:e0:
bc:92:fd:02:57:98:c0:be:42:8b:c2:2e:9d:21:28:8b:c4:43:
41:02:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:05 2025 by rpki-client