Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-egA9xX0fmdEp63uZeaNEjdc7Rw.roa
File: 1-egA9xX0fmdEp63uZeaNEjdc7Rw.roa (raw, json)
Hash identifier: xBhWbIu3FbY6bWF5ukvU5iBInx8MpMAh7fQGK6Ug6O4=
Subject key identifier: F9:E8:00:F7:15:F4:7E:67:44:A7:AD:EE:65:E6:8D:12:37:5C:ED:1C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0198F60E1C3BB7B120DCA62FE2DD92337AD2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-egA9xX0fmdEp63uZeaNEjdc7Rw.roa
Signing time: Fri 29 Aug 2025 13:39:36 +0000
ROA not before: Fri 29 Aug 2025 13:39:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209618
IP address blocks: 2.59.194.0/24 maxlen: 24
2.59.195.0/24 maxlen: 24
2a0a:e9c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f6:0e:1c:3b:b7:b1:20:dc:a6:2f:e2:dd:92:33:7a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 29 13:39:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e800f715f47e6744a7adee65e68d12375ced1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:db:38:ae:86:fe:cb:57:cf:3d:82:b5:82:
40:3c:a8:27:d5:4e:0c:c0:0d:33:96:e3:a7:dc:b1:
34:83:1a:30:95:18:b7:fa:f9:e9:ef:09:cb:0a:b9:
19:e3:eb:0d:e6:22:b2:b4:aa:e7:b2:c9:dc:a4:68:
29:29:1a:ed:00:f7:a8:08:4b:e4:52:b8:1b:d3:e6:
e4:01:ee:a7:e1:ca:eb:88:8c:73:11:46:82:6c:b9:
80:2e:6e:de:5d:8c:d2:39:8f:20:13:35:f5:b2:ef:
39:ed:a6:82:ee:97:e4:b0:05:0b:a8:9f:37:05:19:
5f:4a:c2:0f:8f:3d:c7:f2:9e:03:60:de:90:cc:0c:
39:f7:40:b5:92:e2:ee:47:80:6f:6b:4f:f7:b2:1d:
1b:19:31:a4:0b:cf:9e:ef:44:31:20:aa:1b:05:bb:
b4:17:4e:2e:b5:18:50:9f:83:a5:5d:94:ae:05:11:
9a:61:b7:d1:5c:b2:59:07:72:49:34:c4:62:4f:2b:
53:52:d8:51:b4:c0:04:16:ee:b5:db:0d:e8:8b:04:
2e:f3:d0:f6:69:75:e5:c1:a0:0c:13:79:c7:2b:ea:
6a:76:20:8e:30:5c:68:a0:43:88:86:bd:9e:f5:7c:
bc:d9:3a:5a:f3:ce:36:af:5c:03:1d:8c:9e:05:c3:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E8:00:F7:15:F4:7E:67:44:A7:AD:EE:65:E6:8D:12:37:5C:ED:1C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/1-egA9xX0fmdEp63uZeaNEjdc7Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.194.0/23
IPv6:
2a0a:e9c2::/32
Signature Algorithm: sha256WithRSAEncryption
29:36:ef:53:bc:84:8d:a8:ae:94:cf:dc:d7:7c:5f:7e:f7:d4:
a6:e4:d2:be:d9:81:52:96:21:17:a7:9a:a3:09:b8:16:ac:39:
65:15:e4:89:55:63:38:ea:4b:cb:1a:a2:c5:58:9b:98:c0:88:
52:56:54:48:da:34:0d:9c:29:46:f1:95:48:a5:98:99:9f:35:
eb:b9:1d:5f:54:f3:68:3e:f2:8d:47:63:4d:b5:0d:71:13:16:
9b:de:09:c0:25:c6:27:b7:62:cc:50:44:d7:d9:6f:39:82:00:
5c:11:d2:4a:8a:c4:76:99:d8:d4:63:0c:c5:4d:bd:f9:ac:57:
ee:26:25:15:91:6f:60:37:c5:b2:d4:f1:29:51:6d:81:8a:51:
07:69:79:33:58:a1:c0:d7:75:bd:89:57:d1:42:be:5d:4b:39:
a4:55:ee:9e:90:f7:2e:43:c6:96:b0:31:92:02:87:63:52:be:
6a:28:44:5d:08:15:c8:52:23:80:f0:39:a9:be:7a:25:0b:c6:
93:5a:6f:4e:2f:90:72:f4:c2:72:0e:4e:23:4d:e4:00:af:28:
6d:cc:5d:57:3e:b1:72:96:1e:a9:2c:1b:81:9e:57:2c:6b:6e:
ec:11:5f:af:f8:c6:1f:85:f0:af:b5:32:ff:74:03:6f:74:18:
59:8b:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:50 2025 by rpki-client