Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6u5_sP4IhyoWqEDQ2t9dx963QRY.roa
File: 6u5_sP4IhyoWqEDQ2t9dx963QRY.roa (raw, json)
Hash identifier: Pbx79AK3bEc8t4PUDhO4smxz6yCZ8d6bcYa/ZleseH4=
Subject key identifier: EA:EE:7F:B0:FE:08:87:2A:16:A8:40:D0:DA:DF:5D:C7:DE:B7:41:16
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019A016D1BD7BFC75C359DDFE7B078B9887A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6u5_sP4IhyoWqEDQ2t9dx963QRY.roa
Signing time: Mon 20 Oct 2025 11:41:59 +0000
ROA not before: Mon 20 Oct 2025 11:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60077
IP address blocks: 194.225.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:6d:1b:d7:bf:c7:5c:35:9d:df:e7:b0:78:b9:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 20 11:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaee7fb0fe08872a16a840d0dadf5dc7deb74116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:25:9e:ca:63:15:8a:41:ab:94:1d:0a:2a:
69:af:73:91:d9:75:06:2b:11:eb:64:f3:ff:02:d4:
04:d2:9e:4c:bf:93:53:a4:01:bc:d9:d7:8b:97:0c:
4e:fd:b5:29:3a:11:4d:63:04:89:61:70:ba:95:6b:
a9:b1:21:70:70:1f:52:87:6a:93:f5:e4:48:70:3c:
02:94:79:54:ac:c1:11:c8:13:d1:d0:6e:e1:23:e0:
a2:94:19:37:19:ab:ad:c9:1e:38:8b:3e:e8:34:ed:
97:bd:7c:67:40:2a:c8:43:73:bc:cb:8b:81:a5:6b:
b9:f8:47:f3:fa:8a:7e:55:ee:03:cf:87:47:50:fc:
7b:43:00:16:b2:b4:61:58:fc:fe:f5:02:35:cb:75:
b1:ee:bc:93:79:f2:1a:86:23:71:9d:54:c9:71:da:
fc:d8:de:9e:7a:8a:cc:f8:93:a6:19:ab:db:66:4d:
fa:24:73:1a:96:3b:9d:87:c6:a3:58:52:bf:bc:a0:
a6:f5:a8:e7:0c:55:e4:2c:c1:b9:71:50:7c:f5:c2:
c5:fa:e0:bc:bd:8d:9b:76:c6:f4:6d:86:a2:39:c5:
ce:bf:81:87:45:b7:eb:89:fa:54:83:cd:c4:30:cb:
f7:e0:c2:f9:3b:e6:36:2e:ff:4a:05:ab:65:a3:56:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:7F:B0:FE:08:87:2A:16:A8:40:D0:DA:DF:5D:C7:DE:B7:41:16
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/6u5_sP4IhyoWqEDQ2t9dx963QRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.130.0/23
Signature Algorithm: sha256WithRSAEncryption
31:2e:76:25:d9:92:0e:33:0b:20:c2:f1:40:93:95:a6:64:d5:
b2:c1:34:23:b0:33:f7:1b:9c:47:75:e3:c9:73:2e:14:e0:fb:
d7:2a:1b:32:ed:28:46:4f:ad:2e:b6:26:ae:cb:46:1e:e6:1f:
3c:44:f9:61:7b:ed:d6:20:61:b5:ed:21:2b:68:bc:fa:5a:59:
cd:40:8a:cf:07:81:d8:70:12:57:a2:15:68:06:fc:e7:de:37:
d1:c1:30:46:70:a9:f7:cd:27:8b:b9:2a:98:00:b5:3e:1a:c4:
aa:f7:c1:73:02:f3:31:0d:4b:9f:2b:2d:0c:1b:1e:cf:8d:dd:
c0:27:4c:3c:f5:75:d0:b5:bd:38:70:12:02:a1:a1:95:62:6d:
81:a7:cf:f5:9c:c0:e8:00:3f:9c:c4:94:12:92:a3:39:9a:16:
22:8c:b3:d9:d9:ca:76:21:7e:7f:56:b5:16:bd:06:b1:bf:40:
99:fc:d2:48:1c:6e:34:e6:16:15:56:a9:a6:3d:bd:1a:33:cf:
0e:39:27:25:60:ba:df:c4:ec:e1:b1:8e:5e:65:a5:00:39:bd:
81:79:58:23:10:60:69:5c:87:d4:36:fa:2b:f5:75:12:d4:be:
48:0d:62:16:e8:df:1f:5e:3f:8f:d3:48:ad:e4:90:be:d0:66:
ee:81:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:36 2025 by rpki-client