Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/t-enIXOteL4Tb6ASAqLBu_uGOqg.roa
File: t-enIXOteL4Tb6ASAqLBu_uGOqg.roa (raw, json)
Hash identifier: jCzlshzN/llUBvM2NR0fW5pjqVj+NHh+jZvBOT5NQjE=
Subject key identifier: B7:E7:A7:21:73:AD:78:BE:13:6F:A0:12:02:A2:C1:BB:FB:86:3A:A8
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC85B861010EC0C933FA23FCE323B
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/t-enIXOteL4Tb6ASAqLBu_uGOqg.roa
Signing time: Fri 07 Nov 2025 11:23:38 +0000
ROA not before: Fri 07 Nov 2025 11:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49392
IP address blocks: 194.69.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c8:5b:86:10:10:ec:0c:93:3f:a2:3f:ce:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7e7a72173ad78be136fa01202a2c1bbfb863aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:e2:32:9b:95:e9:20:e1:8a:e4:c5:24:bd:
58:5a:dc:26:2f:58:01:57:12:90:ab:5d:ad:49:8e:
77:d2:7e:e3:4e:95:bf:0a:96:b5:56:89:4e:eb:a0:
8f:7a:cb:7a:6d:02:84:20:a7:f4:c6:85:96:a7:59:
f1:47:f2:40:a5:69:0e:44:e9:10:ff:6c:5d:d2:ca:
c5:f1:c3:c4:36:c3:d5:56:35:56:14:8f:7c:49:7d:
73:57:dc:c7:16:bb:58:9d:03:ff:1c:6a:0d:5a:3f:
77:51:c9:c3:29:cb:b2:ad:60:ce:ad:9a:b7:2b:27:
33:52:38:96:24:f0:f6:3e:b8:88:49:1e:b4:73:a7:
1e:71:a5:79:3f:0e:16:e0:e6:4e:e2:97:ae:d4:aa:
a2:33:84:2e:2d:f8:5b:7b:ee:e6:e0:28:14:96:7f:
a9:55:8d:02:df:53:9a:9f:43:4e:88:b9:cc:91:52:
07:cc:b3:11:fd:b1:14:26:eb:bb:dc:42:ae:ad:4e:
58:c1:bc:ed:73:82:26:89:69:f6:fe:e1:2d:04:28:
48:59:84:ae:9d:b5:a4:3f:51:23:41:f0:55:d9:8f:
0b:18:08:ba:4a:e9:40:00:8c:38:ea:09:bb:c7:ed:
fb:ee:cf:f6:1f:c2:07:11:af:66:eb:f1:c3:ee:e1:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:A7:21:73:AD:78:BE:13:6F:A0:12:02:A2:C1:BB:FB:86:3A:A8
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/t-enIXOteL4Tb6ASAqLBu_uGOqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:02:e3:88:6d:c7:29:8f:23:0f:45:96:80:c5:e3:a9:1a:d5:
2d:06:19:af:b2:46:57:8a:c5:e1:35:8b:6d:07:95:fe:1c:2a:
2b:cb:ff:bd:03:64:d8:88:7c:3d:8f:e3:f5:ec:5c:d1:b1:77:
6d:aa:1c:8b:c5:27:de:a8:b1:45:95:04:23:54:16:5d:e6:5a:
7e:cd:c5:8c:43:cc:95:de:35:56:2f:0f:ba:47:fc:64:f8:d4:
1e:d8:df:de:d0:4d:74:b1:78:e2:a9:3a:b8:09:63:3b:f7:dd:
64:52:c9:86:fe:e5:7e:80:a1:d9:db:3e:17:1e:d4:34:d3:56:
de:8b:f4:7a:5e:ad:c9:06:81:c5:c0:0a:06:c8:d2:76:0b:21:
0b:e8:f2:13:51:b0:9b:8e:08:90:90:86:34:32:1a:bb:d2:27:
86:1c:34:bf:f8:7a:11:a8:b9:e9:2d:53:d1:0b:62:5c:a0:9b:
29:3f:89:ee:ea:7a:ee:54:74:db:cd:0f:ea:89:d1:92:78:4b:
fc:e3:7b:dc:9f:9a:f1:e1:87:2c:fc:6d:c5:8c:9a:be:53:05:
6b:49:7f:5b:e3:32:5f:55:aa:e3:84:9a:a8:1f:f3:ad:0e:6c:
54:a8:70:5c:4f:a7:3c:07:1d:26:f2:16:68:ba:f7:cb:fc:3a:
c4:00:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:03 2025 by rpki-client