Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CcxEno_jEtaX0KN3AA2g0Shd474.roa
File: CcxEno_jEtaX0KN3AA2g0Shd474.roa (raw, json)
Hash identifier: jA+cvgfVuYtk2xkD4ZpvJ7Suqx69jcihGW9LGglgzLU=
Subject key identifier: 09:CC:44:9E:8F:E3:12:D6:97:D0:A3:77:00:0D:A0:D1:28:5D:E3:BE
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01985516A96BB29EBBF8728D7382B20EDEE2
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CcxEno_jEtaX0KN3AA2g0Shd474.roa
Signing time: Tue 29 Jul 2025 07:30:05 +0000
ROA not before: Tue 29 Jul 2025 07:30:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210864
IP address blocks: 2a01:e901:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:16:a9:6b:b2:9e:bb:f8:72:8d:73:82:b2:0e:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jul 29 07:30:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09cc449e8fe312d697d0a377000da0d1285de3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:79:ed:96:7b:d8:02:4d:81:18:eb:b2:d9:
d2:4f:6d:b7:59:e1:06:3a:b4:dc:51:78:6a:71:5f:
6c:bb:ef:0d:9a:d5:d1:ce:8a:43:74:0e:dd:f5:7a:
88:90:e1:6d:75:0d:c7:7a:ab:ea:31:d4:37:20:9c:
bb:0c:65:f0:14:9f:05:45:61:88:98:c3:d3:f2:36:
f7:c6:c9:08:53:e7:03:c4:a1:26:16:87:f7:fc:d0:
fc:df:fc:7d:d7:d6:00:5c:11:8a:9f:e2:05:05:f1:
c3:1e:85:80:47:90:19:eb:f7:a5:a6:c5:c7:69:81:
e6:cf:f3:60:3d:1a:3f:c3:03:2d:eb:24:04:c3:0e:
44:55:1e:e7:80:16:33:5a:63:79:97:b0:6e:53:26:
95:6c:c2:d6:ed:e4:96:26:1f:9c:bb:a8:03:c0:02:
be:f7:8b:08:be:63:17:2c:69:eb:4c:da:a1:b3:3b:
53:94:74:95:d0:8a:a1:fc:35:7f:29:9b:c2:d9:f8:
73:f1:c4:b5:90:ce:ec:45:b7:2d:14:31:cc:95:ea:
b8:0c:da:62:52:7f:45:65:29:4f:ff:09:28:55:78:
ee:eb:94:64:b7:3a:d1:87:ca:5a:59:71:5c:e6:df:
85:98:c2:50:b0:b1:38:38:fd:17:11:15:60:20:5b:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:44:9E:8F:E3:12:D6:97:D0:A3:77:00:0D:A0:D1:28:5D:E3:BE
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/CcxEno_jEtaX0KN3AA2g0Shd474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:12::/48
Signature Algorithm: sha256WithRSAEncryption
70:a4:fd:3d:cc:1f:47:88:5d:0b:5f:9a:6e:29:f6:20:01:53:
3d:4b:b7:88:0a:a1:54:7a:54:57:15:90:bc:b0:3b:82:0a:e6:
4c:d9:de:fc:70:9b:7c:c9:fa:13:dd:e2:66:18:df:d6:4c:a1:
bb:86:54:a1:90:77:d2:47:ab:f8:14:79:6f:41:c5:a4:ca:37:
49:a6:01:fa:fb:9d:b4:ea:c3:b7:a0:d2:df:6a:be:40:40:7b:
f9:d9:66:50:b8:f1:26:4a:94:7e:d7:ca:04:ae:fe:cb:3b:79:
98:a6:e2:1e:9f:4a:ad:fe:65:14:cb:fb:e9:10:d1:1e:4a:4f:
cc:8e:56:a0:84:88:8b:24:d0:24:b4:26:47:fe:8d:7a:e4:ec:
c7:d2:dd:70:18:0a:9b:89:33:25:a2:a1:9b:5a:92:98:30:a7:
49:d0:f9:c8:b5:05:2a:84:ae:4e:bf:c1:fb:31:09:d1:83:cc:
63:fe:c3:87:10:bc:8e:ef:44:e7:ef:6f:fe:e6:ca:ad:93:9a:
02:fc:47:69:6e:0d:de:95:3e:6f:a9:27:80:95:95:76:55:8e:
4f:92:09:30:a9:01:fc:39:53:3a:ff:8b:34:b1:73:de:f1:01:
18:63:f2:5b:a3:2f:4c:41:6e:51:ca:88:fb:c6:ae:1d:cb:2d:
2b:aa:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:35:53 2025 by rpki-client