Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/eNN5-PfYVxPD1egs3XFg_Z3YNak.roa
File: eNN5-PfYVxPD1egs3XFg_Z3YNak.roa (raw, json)
Hash identifier: hmyISJ7AadgqZv+B3EMPWuEfETsGD0hklrvyA4Kb0Kg=
Subject key identifier: 78:D3:79:F8:F7:D8:57:13:C3:D5:E8:2C:DD:71:60:FD:9D:D8:35:A9
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 019A2F63871BBE827C1D6D9F05A0C6769F76
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/eNN5-PfYVxPD1egs3XFg_Z3YNak.roa
Signing time: Wed 29 Oct 2025 09:54:02 +0000
ROA not before: Wed 29 Oct 2025 09:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 194.169.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:63:87:1b:be:82:7c:1d:6d:9f:05:a0:c6:76:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Oct 29 09:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d379f8f7d85713c3d5e82cdd7160fd9dd835a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:70:b6:a2:96:f5:29:46:35:f4:35:a3:06:
4c:1e:e9:83:fd:19:1f:bf:06:6c:a7:0f:cd:0b:c3:
cd:6d:53:51:ec:a6:1a:f0:e7:39:39:49:3b:74:e5:
a3:e7:e9:7b:13:2c:1a:69:43:d3:93:c7:aa:bf:76:
0f:98:fb:3c:24:70:52:71:09:37:77:be:f1:10:8a:
5e:9b:20:17:f8:6b:29:b0:98:c5:9c:2f:2c:b9:5e:
d5:40:20:78:3e:c3:5b:fe:8c:f7:db:75:67:a1:a1:
73:fc:18:8f:9a:d5:d1:43:0f:97:fb:fb:7a:4d:44:
a1:4d:2f:3f:81:27:30:d2:8c:cd:c1:77:f2:d3:33:
bc:ce:d8:f1:f6:08:79:59:ea:1c:65:2e:2e:ce:c3:
de:73:6d:c5:26:18:1c:3c:17:da:aa:57:02:36:f3:
05:78:82:7c:2e:72:83:26:d4:dc:fb:38:96:fb:26:
dc:97:47:11:f2:63:f7:40:58:14:ee:49:0d:d3:96:
24:71:83:de:bc:8c:31:34:43:04:d7:34:05:f0:03:
17:a7:70:7d:63:83:e8:29:54:93:86:b3:19:08:36:
a0:da:2a:fe:fa:29:95:92:26:ff:fc:37:73:e2:9a:
1f:aa:13:c3:da:60:7c:06:fe:dc:08:89:ed:40:ae:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:79:F8:F7:D8:57:13:C3:D5:E8:2C:DD:71:60:FD:9D:D8:35:A9
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/eNN5-PfYVxPD1egs3XFg_Z3YNak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.157.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0d:8d:85:42:2b:e8:2d:24:4d:b8:c1:0a:57:64:33:54:cb:
c2:94:1a:a3:73:e2:0b:1c:62:d0:a2:79:d7:83:9d:82:9c:a1:
cd:4d:e7:c8:ff:ad:74:d5:0e:7e:11:b9:b5:6b:a0:00:66:04:
8a:f0:60:49:4c:15:2e:93:79:f0:b1:ee:d4:b5:03:b6:d2:ae:
31:ef:5c:68:64:bd:08:f3:ee:8a:dd:94:9b:d0:39:b8:45:4a:
00:2c:9d:25:05:54:54:a5:f4:ca:69:04:b1:62:58:4a:e3:d2:
18:80:c8:dd:5b:f5:11:f5:05:fa:bc:89:36:f7:c7:57:33:dd:
af:22:c0:2e:ea:40:33:dc:de:c4:46:38:31:db:8f:29:03:0b:
6f:f1:30:68:eb:81:4a:0c:7a:df:05:ab:45:fa:1a:e8:83:1f:
45:ca:ec:16:7c:3e:87:6b:67:97:a7:b4:0a:7d:47:82:dc:6f:
3a:c6:01:80:08:1f:eb:3e:72:88:fc:f9:8b:fa:d5:92:a5:53:
ca:64:15:a9:be:f5:1f:18:f8:ba:d0:91:8e:34:64:2a:05:b0:
d8:6d:91:50:1e:78:dd:5f:9e:df:58:c8:52:f0:0e:12:2f:02:
e7:f3:7d:18:05:34:d4:a1:ec:1d:e6:ab:01:1b:b8:a3:02:2d:
b5:c7:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:00:39 2025 by rpki-client