Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U_zgF9oBdGqRPrnS4bnd6N_C8IU.roa
File: U_zgF9oBdGqRPrnS4bnd6N_C8IU.roa (raw, json)
Hash identifier: mv0Y6ZKdLb+Lvta9nEO2D9pFQieQdK1V7XDqHuchuXo=
Subject key identifier: 53:FC:E0:17:DA:01:74:6A:91:3E:B9:D2:E1:B9:DD:E8:DF:C2:F0:85
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019A76F855C3F39A4B911A1397CBFEB37E46
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U_zgF9oBdGqRPrnS4bnd6N_C8IU.roa
Signing time: Wed 12 Nov 2025 07:29:37 +0000
ROA not before: Wed 12 Nov 2025 07:29:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 20:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:76:f8:55:c3:f3:9a:4b:91:1a:13:97:cb:fe:b3:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 12 07:29:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53fce017da01746a913eb9d2e1b9dde8dfc2f085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:f0:1f:62:8d:0a:9c:b1:68:60:7d:a7:cd:
bb:dd:fd:be:85:7f:f7:02:68:35:e7:df:89:da:c4:
5f:cd:4d:0b:6f:12:a0:13:39:7d:4b:78:58:dd:75:
3e:ed:a8:55:67:69:a1:87:34:0e:7e:37:56:02:a4:
d0:69:57:7f:1b:a3:28:be:e3:a2:94:b0:0b:ae:25:
15:26:ef:0f:88:2a:d6:a2:ab:6f:7b:95:16:22:9c:
2d:95:7a:85:f6:4e:eb:6e:f7:b1:64:6d:63:de:cb:
54:eb:f9:a6:23:aa:67:52:1d:3f:fa:78:ac:07:7e:
5b:f1:3f:9a:e5:4f:64:3b:43:fa:d6:b1:60:ad:c8:
37:b5:72:4a:7c:e7:60:09:32:c1:32:a7:36:85:bd:
c9:7d:96:77:15:fc:a9:7f:6b:2d:bd:3c:8c:47:23:
ce:c3:20:0a:0e:b5:ac:a0:83:63:79:0e:3f:f5:a5:
c2:4a:5a:17:8d:a5:03:b7:57:fb:e8:74:ae:04:1f:
38:33:af:d0:ef:59:85:2e:cf:20:c3:c9:52:72:4c:
af:b1:da:a4:1a:93:cd:5f:fa:a9:ac:b7:45:a0:cd:
0a:26:a1:4a:49:3d:f5:83:89:56:ed:23:8c:b2:a6:
93:9a:89:68:6d:4b:eb:96:9c:05:d8:cd:de:20:c3:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:E0:17:DA:01:74:6A:91:3E:B9:D2:E1:B9:DD:E8:DF:C2:F0:85
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/U_zgF9oBdGqRPrnS4bnd6N_C8IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:42c0::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
25:75:42:c4:16:0e:18:3e:eb:67:ac:14:f1:2b:f3:9f:e0:ea:
24:a8:01:15:31:c0:bd:83:13:72:8a:9f:2e:94:9d:21:ca:32:
5d:84:f0:b7:96:51:94:5e:05:f3:d6:95:5f:47:07:8f:99:eb:
10:fb:43:4c:48:43:bf:4e:b1:97:d0:85:8c:69:1b:97:7f:2d:
8b:cd:9f:f2:c2:51:ee:f0:c9:0d:c3:94:68:50:23:72:1b:38:
e3:13:de:c6:2c:92:a9:e1:8c:73:90:f6:7f:42:a0:b2:3c:a9:
8d:b5:ad:95:f6:84:af:8d:0f:4f:dd:2d:f1:b2:8a:b8:36:0c:
cd:da:ad:ae:42:c5:48:ce:08:e3:68:61:f2:a9:c7:86:ae:23:
75:93:4b:15:14:b1:bb:03:62:b9:4b:7e:86:cc:e6:79:07:92:
61:14:b7:0c:7d:02:98:73:5a:a0:c0:50:bb:42:01:85:b4:14:
c7:b4:6e:7d:e7:74:b1:ed:76:89:03:b1:14:ea:db:00:29:71:
7b:c0:1a:9b:1c:f3:71:95:15:6b:bb:0f:a8:7b:96:14:81:0c:
b8:be:46:7e:98:d2:4b:a7:56:03:36:b0:f4:19:0e:e3:78:c7:
e2:96:1a:e4:f3:c4:f2:6f:62:c7:99:3e:a0:15:21:ea:93:38:
1c:9b:07:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 14 05:47:24 2025 by rpki-client