Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e5rj08Om4cHIuz4fFwP0O1yoJFs.roa
File: e5rj08Om4cHIuz4fFwP0O1yoJFs.roa (raw, json)
Hash identifier: wmjsBMhnE9bQnN4MTWqdbcxogRaUz36I/b+MMz9rTWA=
Subject key identifier: 7B:9A:E3:D3:C3:A6:E1:C1:C8:BB:3E:1F:17:03:F4:3B:5C:A8:24:5B
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019A91D3F2F1645D89B89C67E3BC8314DAC0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e5rj08Om4cHIuz4fFwP0O1yoJFs.roa
Signing time: Mon 17 Nov 2025 12:39:37 +0000
ROA not before: Mon 17 Nov 2025 12:39:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 185.215.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:91:d3:f2:f1:64:5d:89:b8:9c:67:e3:bc:83:14:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 17 12:39:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9ae3d3c3a6e1c1c8bb3e1f1703f43b5ca8245b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:01:c3:d5:e7:7d:e4:31:4b:b7:70:09:28:
1a:83:1e:ed:e9:68:9d:ee:5c:24:13:d7:e7:7e:ff:
21:19:76:c0:b8:32:7b:cc:66:e3:51:e1:51:9f:9a:
df:57:2a:99:c1:40:78:a3:71:2d:1e:75:d3:34:c8:
ec:55:9a:e3:53:78:b9:44:56:9c:18:8c:93:7e:76:
95:f4:b3:4d:8d:fd:c0:2d:ee:21:ac:75:f7:df:97:
41:69:9b:02:17:6c:59:db:c5:77:12:e0:e0:7d:ec:
28:58:a7:b1:80:cf:e8:96:f7:0c:ad:4c:d7:c4:14:
64:35:6f:1b:77:9f:f1:bf:45:04:d2:8c:7f:82:c0:
e1:cf:16:57:0a:ef:0b:07:2c:dd:19:bd:92:bd:66:
f5:a0:38:e8:e6:29:56:93:99:bc:b4:bb:d6:84:01:
4e:69:5f:a4:32:83:04:87:48:a2:9d:85:4c:6f:59:
1a:94:3a:cf:29:fa:9c:48:0c:8e:89:85:e4:30:c7:
d9:c5:6f:88:07:2d:4d:9c:c1:91:f2:3e:a4:7c:b4:
86:f8:e9:1b:1b:6c:8a:37:c3:f5:76:02:cd:11:f6:
35:72:56:8f:5c:e7:22:ac:e4:0b:d6:95:4b:ed:7b:
e7:c0:30:89:2a:b9:b9:7b:36:57:8e:c4:34:e8:31:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:E3:D3:C3:A6:E1:C1:C8:BB:3E:1F:17:03:F4:3B:5C:A8:24:5B
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/e5rj08Om4cHIuz4fFwP0O1yoJFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:73:f8:ed:bd:e2:d1:1d:07:77:da:21:4e:5c:51:64:f4:85:
c5:51:eb:69:69:53:3a:1e:59:49:9d:9d:80:cb:9c:f6:cb:2f:
70:d8:f2:c4:4e:20:40:2f:c1:e6:76:07:7b:6b:be:f3:ae:c0:
a0:10:14:07:54:0d:ec:26:11:10:1e:c1:89:3b:81:b6:08:df:
e8:d9:3a:52:35:e6:c2:87:b7:4b:a6:32:97:b2:ea:af:9e:05:
ea:7d:50:0e:c9:41:f9:82:34:0f:a5:1e:eb:94:50:21:f7:a8:
9a:c2:6f:ea:92:62:58:bf:49:6c:44:29:2e:d5:09:e9:96:90:
be:a1:e0:17:17:13:a8:b8:c4:77:72:02:66:b0:22:04:83:93:
d3:6c:37:98:7b:00:f0:54:41:e5:d7:82:00:8d:8b:14:3f:5a:
d9:56:ef:e7:75:76:12:16:49:27:70:f5:b0:d6:af:07:2f:4d:
1b:a0:2b:d4:b8:6a:fb:3c:a9:bd:b7:e4:7c:2d:24:db:10:0c:
22:b8:d8:7a:47:e8:29:da:a1:5d:a8:bf:af:2c:b8:c3:00:38:
06:17:64:9c:64:ba:f0:3b:06:ed:79:22:50:4c:89:61:c7:3b:
92:e0:6c:23:e1:f3:e1:92:8f:54:bd:c3:f7:2a:03:bc:a6:e3:
d2:bc:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:24:12 2025 by rpki-client