Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa
File: E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa (raw, json)
Hash identifier: FG5kEU8xILi0ZymFCPhW2otQY+i3ggNhpgiTX1Ta3o4=
Subject key identifier: 13:70:45:F6:A0:AE:4E:39:03:24:78:BB:52:7E:EA:40:F2:FE:BC:BC
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC5A33A709C752E868E1D394AEAF7
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa
Signing time: Fri 07 Nov 2025 11:23:37 +0000
ROA not before: Fri 07 Nov 2025 11:23:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35048
IP address blocks: 77.83.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c5:a3:3a:70:9c:75:2e:86:8e:1d:39:4a:ea:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137045f6a0ae4e39032478bb527eea40f2febcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:52:74:c0:05:cc:79:37:7a:ab:26:86:30:
3b:94:cb:96:b5:a1:cd:a7:a8:a7:80:68:80:b3:6f:
5e:29:41:82:a6:fe:7a:18:b4:34:fa:27:08:01:58:
70:46:1b:07:0d:bb:68:22:af:24:f0:fc:bf:2e:5a:
13:89:af:ef:bf:ef:1e:ef:e6:64:45:6c:d7:2a:53:
16:cb:2c:fb:de:7e:08:e4:ba:8c:2e:8c:9f:9b:8e:
ac:b4:8e:3d:8a:75:aa:54:8b:e8:41:f5:31:e6:a6:
8d:b2:d6:6a:e2:dc:7c:e5:c7:a8:31:75:4b:7c:72:
48:78:06:54:58:58:97:93:14:f8:a2:5f:ef:e0:5a:
98:05:42:b8:37:3e:71:f7:72:f0:5d:0f:c3:3f:1c:
9d:3f:a1:e0:e3:85:04:c4:62:44:80:aa:05:86:db:
4c:bc:bd:58:2a:a8:0b:7b:be:ed:01:3e:b4:22:10:
bb:9c:2b:bf:6f:e4:d4:05:d9:2d:25:09:e1:6e:bd:
ca:33:74:14:14:05:46:5f:6b:d6:8c:af:d1:42:fd:
92:8c:d1:98:b7:8e:79:e2:05:ce:73:a4:51:36:12:
34:03:59:29:33:45:69:66:89:ba:14:8b:33:64:14:
ea:3a:25:7e:96:9e:ee:f0:d4:d5:2b:95:52:70:e7:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:45:F6:A0:AE:4E:39:03:24:78:BB:52:7E:EA:40:F2:FE:BC:BC
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f9:06:6a:5a:41:27:fa:91:e4:c3:c9:54:ae:76:a6:91:d3:
c3:ca:84:6a:09:bb:32:a6:3c:be:23:92:df:63:b1:9f:d1:63:
39:65:3e:79:2d:b6:c8:fc:5c:6d:22:cc:a2:70:1c:88:95:06:
7b:89:16:2b:22:99:56:ee:b8:ff:78:a9:4a:fe:63:3c:0e:a6:
59:63:65:54:54:b5:38:e0:78:07:89:73:d1:17:f4:c6:00:f2:
8f:fb:68:5b:09:30:c0:11:c1:62:88:71:72:1a:a9:02:81:c1:
e7:26:26:c3:65:e5:a5:eb:3f:8b:72:61:c2:8b:ed:bd:9b:a5:
4e:de:66:1a:e7:3f:f8:35:7c:15:61:99:5f:3c:5a:82:72:2c:
4d:d8:d2:51:00:87:37:93:ee:fb:12:16:66:e3:0a:a9:12:4a:
9b:6e:4a:2f:6c:61:51:3e:57:f1:1c:96:6d:36:34:76:7a:d6:
1f:6f:c9:9e:bf:67:d5:5e:66:40:22:43:e9:86:12:48:eb:6c:
87:8f:0a:5b:e8:ad:20:67:00:df:eb:72:3a:ed:e7:4e:0d:0c:
d2:66:9f:14:88:f6:a9:50:ba:53:c2:1e:0e:7a:0b:86:2b:f4:
b3:44:5d:85:5f:67:4e:99:28:2f:54:24:08:d1:9e:75:cf:79:
3c:54:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:54:45 2025 by rpki-client