Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fqT2L72L0EVOodwETO_hXYq6YuU.roa
File: fqT2L72L0EVOodwETO_hXYq6YuU.roa (raw, json)
Hash identifier: HPtZ9GaKj383N6h5xfrb0UgTuMCHycBDHJ8Fz3hV7Ys=
Subject key identifier: 7E:A4:F6:2F:BD:8B:D0:45:4E:A1:DC:04:4C:EF:E1:5D:8A:BA:62:E5
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01997244ECB05F9E70FAD408DC6309B36C00
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fqT2L72L0EVOodwETO_hXYq6YuU.roa
Signing time: Mon 22 Sep 2025 16:32:23 +0000
ROA not before: Mon 22 Sep 2025 16:32:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214630
IP address blocks: 2a0e:a780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:44:ec:b0:5f:9e:70:fa:d4:08:dc:63:09:b3:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 22 16:32:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea4f62fbd8bd0454ea1dc044cefe15d8aba62e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:35:87:9d:17:29:db:a8:5a:05:a4:0d:52:
4c:65:95:e4:c6:e3:a0:16:c8:67:2b:8f:b9:82:14:
5e:13:c8:78:39:f1:e8:4a:59:db:ee:20:b4:b6:68:
b5:c4:52:8f:a4:01:bc:2c:ee:41:dc:fb:c6:f2:49:
91:0f:d8:25:2f:38:b5:2a:ff:c8:14:5e:b2:27:4a:
73:80:f9:18:f1:6b:9a:08:9e:5b:43:1e:10:3d:d9:
40:a2:97:5c:5d:6c:08:fb:4d:0e:0a:ea:b4:93:9d:
de:06:5f:bc:70:7e:b4:fa:cc:72:c1:f0:2e:8f:2c:
f1:f7:ab:d0:f5:75:84:0f:72:28:b6:c0:11:9a:a9:
1d:39:90:07:30:30:e2:82:d1:4d:4c:96:9e:9d:b8:
4a:e1:47:84:60:7d:98:ce:0c:0b:12:2b:59:8b:6e:
3c:ea:13:81:0d:c4:61:03:22:34:0d:f9:de:fc:2d:
42:15:67:21:f1:d9:fc:8a:bc:4d:80:00:67:81:23:
f7:47:10:c8:d4:87:00:c2:f1:8c:f5:4e:a7:ae:fc:
53:c6:92:fd:e0:15:cf:bf:9d:80:88:90:3c:ea:25:
9e:62:55:da:4a:7b:db:76:8b:17:91:d0:7b:cb:7a:
bb:7a:5d:6c:5d:0d:f7:d6:09:c1:bf:49:31:9d:24:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:F6:2F:BD:8B:D0:45:4E:A1:DC:04:4C:EF:E1:5D:8A:BA:62:E5
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/fqT2L72L0EVOodwETO_hXYq6YuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/32
Signature Algorithm: sha256WithRSAEncryption
62:68:2e:b9:fc:4b:9c:55:16:c2:c7:c3:3b:05:f5:ad:ac:4d:
85:f9:97:ec:97:53:87:36:1a:dc:7a:a0:ae:d3:f7:ee:6d:9e:
ab:2b:e5:03:76:e7:dd:2e:23:a2:ef:bb:13:bb:4a:42:0a:4d:
58:a0:b8:0a:3d:b4:91:57:4e:14:47:81:62:06:3c:c0:20:cd:
99:f1:6e:06:85:15:c3:4c:d0:bd:5d:4c:0b:39:a2:de:e8:9d:
1e:fc:20:27:56:7a:95:88:ae:4a:9c:5b:ba:f6:6d:52:de:7f:
d0:94:6c:e7:40:f0:a4:b2:19:e6:d9:12:fb:5f:52:6b:60:6b:
5e:d6:84:e2:be:18:42:8c:4b:81:9c:0e:42:9a:45:be:02:67:
00:24:3e:1a:f9:90:03:4f:6d:78:e5:95:c4:7f:a9:5c:09:c5:
6c:88:bc:3a:11:63:f3:e4:ee:3e:4f:56:74:f5:35:8e:55:92:
c5:15:54:5b:3a:0e:ac:d5:37:2b:da:00:0c:24:1d:2f:0d:df:
3c:62:99:13:a5:24:d6:8d:26:7a:82:02:9f:cc:d4:3b:49:c3:
a2:62:b3:12:fd:03:cc:9b:43:ac:f2:27:b9:b1:36:e0:c7:15:
37:70:5a:37:f3:5b:47:7e:28:3a:10:e5:b6:ab:3e:31:31:e1:
26:06:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:56:32 2025 by rpki-client