Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa
File: FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa (raw, json)
Hash identifier: 7f8n8xrs8z+GOmfg9rEL/AINEMlWtSmtFpMtGEwaqcw=
Subject key identifier: 14:22:B9:87:98:2E:6C:F3:21:67:74:6C:AD:DE:D3:8F:83:80:45:91
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019A4ACD0B4BBF31E1912C45196FE4AF53E7
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa
Signing time: Mon 03 Nov 2025 17:39:03 +0000
ROA not before: Mon 03 Nov 2025 17:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204089
IP address blocks: 2a0f:7d40::/29 maxlen: 29
2a0f:7d40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:cd:0b:4b:bf:31:e1:91:2c:45:19:6f:e4:af:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Nov 3 17:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1422b987982e6cf32167746cadded38f83804591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:9b:a7:12:32:4f:0c:7d:12:61:89:90:70:
95:dc:00:50:6d:73:c7:58:d6:9b:19:f6:95:16:08:
a6:24:6b:32:7c:f7:30:92:5b:a1:6b:2d:a8:b5:21:
0b:4b:8c:c5:fe:54:2e:24:51:3a:8a:36:32:b3:4c:
f6:d1:7b:e9:66:44:5c:32:87:1b:69:d0:58:28:d9:
df:25:02:0f:77:2a:07:27:00:12:1e:70:3b:4a:4d:
22:0e:63:da:db:ee:73:0e:2c:a5:ae:44:be:f7:6b:
fc:9f:31:ff:bc:27:18:7e:54:c2:b1:18:9b:25:19:
d2:49:9a:39:69:ff:15:c0:50:2b:db:1e:7b:6b:ac:
99:4e:22:f7:13:d7:cc:d8:9b:9f:38:bc:05:a0:cf:
ef:c3:59:34:0e:d7:c3:df:58:68:3d:ed:72:d3:62:
53:4e:27:f3:84:78:44:1f:36:16:99:ec:55:ad:0e:
8a:87:de:84:bb:54:c8:6c:2b:5e:f0:07:a8:91:3d:
59:7f:13:0a:a4:48:cc:6a:84:e0:58:f6:d6:d8:f3:
b3:3e:e3:de:da:f7:80:b1:e9:9b:fc:fb:ab:09:54:
65:e3:78:b3:72:cb:2f:eb:9b:f6:77:6c:90:33:be:
cd:b4:fb:64:d6:e7:d8:a0:05:70:ea:e0:49:81:04:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:22:B9:87:98:2E:6C:F3:21:67:74:6C:AD:DE:D3:8F:83:80:45:91
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/FCK5h5gubPMhZ3Rsrd7Tj4OARZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7d40::/29
Signature Algorithm: sha256WithRSAEncryption
c6:66:a9:68:30:6e:4f:aa:5e:cd:a5:57:69:16:c1:a9:f0:40:
ce:5d:90:df:3f:b9:10:45:36:6c:86:4c:ad:28:bd:66:f6:e1:
ff:9b:07:8c:a1:83:64:7a:84:83:b6:31:f2:db:f6:25:b9:b0:
d7:1b:5e:c1:61:9e:57:19:d4:3f:c9:58:e5:3c:28:d7:85:fb:
f1:60:77:63:e0:f7:b3:62:cb:0c:a1:20:9b:a7:b6:c7:b7:7d:
ad:6b:f0:40:ed:0c:b3:e4:e5:ab:55:2c:6c:69:64:ee:35:8e:
63:59:ff:32:3f:b7:66:89:77:35:4c:6e:c6:9b:0b:9f:1c:ba:
c7:ca:6e:82:32:28:22:c2:79:21:d2:64:3a:df:bb:e0:56:91:
84:6c:ed:21:14:8e:78:05:2a:56:8b:54:47:2f:4b:5e:62:39:
ad:0c:6d:e2:af:bb:af:d8:84:d8:f6:7a:b5:e4:1b:2f:fc:eb:
35:db:96:1e:7d:20:ab:cf:ed:95:06:f8:c7:01:a7:69:41:c5:
13:4c:4e:fd:5d:a9:65:ed:75:90:79:e1:4f:db:43:69:9b:96:
98:2d:68:3c:2a:e8:4d:34:f8:7a:b5:86:d9:22:fd:92:5d:40:
51:09:df:0f:38:d7:60:b2:57:bb:65:e1:3e:26:68:6d:e5:f8:
32:c4:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:26 2025 by rpki-client