Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/59LH6Adk14fzU8O8cL1tS0tjZrg.roa
File: 59LH6Adk14fzU8O8cL1tS0tjZrg.roa (raw, json)
Hash identifier: U0MyjNG++pvqNJQab0gsWnbWL6x0Di05kdY9Z+I6oU4=
Subject key identifier: E7:D2:C7:E8:07:64:D7:87:F3:53:C3:BC:70:BD:6D:4B:4B:63:66:B8
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019A027B4036B835FA8E5BAA261E68D3E854
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/59LH6Adk14fzU8O8cL1tS0tjZrg.roa
Signing time: Mon 20 Oct 2025 16:37:03 +0000
ROA not before: Mon 20 Oct 2025 16:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 2a11:7e06::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:7b:40:36:b8:35:fa:8e:5b:aa:26:1e:68:d3:e8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 20 16:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7d2c7e80764d787f353c3bc70bd6d4b4b6366b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:b0:70:af:f2:0c:9e:bd:83:7f:00:a1:fc:
1a:6e:b5:aa:bf:98:47:3a:d8:f0:5d:af:1b:ba:e6:
8d:b2:14:f6:ee:aa:02:b8:86:8a:fd:d4:fc:4a:fe:
b0:42:22:b3:7d:8e:cd:f8:8e:6b:10:77:e6:3e:96:
74:a7:4f:88:06:85:c8:74:ea:f2:e6:69:e3:18:ea:
5e:d5:3c:dd:56:40:1f:66:f7:d4:30:4b:05:4b:b2:
49:eb:66:fc:7e:4f:c9:4b:1b:50:55:50:21:13:6e:
8f:a2:55:41:1b:bd:fb:2a:15:e8:2a:44:67:9c:22:
f5:ef:81:3c:9e:35:8f:67:6c:86:87:bf:5c:84:4e:
16:ed:11:93:1b:8b:97:3d:60:08:39:59:c9:59:7b:
b7:77:2b:f9:42:1a:3b:d6:37:30:2b:86:50:06:5e:
e9:14:cb:5d:69:57:fc:bd:3a:8e:c0:6e:a5:39:e2:
55:4b:71:9b:a3:43:07:22:4e:2d:c5:d5:da:3b:7a:
61:9a:30:2c:1d:a9:7c:26:ee:97:b4:92:e3:8e:74:
12:c9:c6:bf:79:c4:e4:42:0e:e8:ce:66:3e:47:31:
3f:7d:c4:fe:bc:0a:99:b2:25:f5:77:e0:8e:a0:56:
a7:dc:7e:49:58:f4:c0:17:3d:b8:56:36:01:15:62:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:C7:E8:07:64:D7:87:F3:53:C3:BC:70:BD:6D:4B:4B:63:66:B8
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/59LH6Adk14fzU8O8cL1tS0tjZrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7e06::/32
Signature Algorithm: sha256WithRSAEncryption
04:ac:fe:3b:41:4a:f5:35:3d:e6:81:0d:10:75:70:e4:8d:82:
88:65:e2:45:94:c9:8d:b9:b9:43:76:c9:5f:5f:56:8b:dc:5b:
ca:dd:54:b0:87:58:58:d5:ba:83:0f:b1:d0:c5:49:74:42:d7:
97:17:3e:f0:4e:df:d9:7c:22:99:8b:a4:91:f6:e8:33:52:1f:
f1:fc:49:75:23:80:40:2a:f1:89:35:57:63:b5:f4:ca:d8:65:
45:42:66:b5:f7:64:60:12:94:e8:6e:a5:07:8e:47:f6:55:ad:
b8:be:9a:3a:a6:3c:02:01:f3:6f:1e:76:e4:60:ab:0f:d0:fb:
63:24:c8:5c:56:07:29:3f:66:20:bb:c2:bb:bf:ca:ca:6a:54:
68:79:c9:59:b9:6e:b7:61:51:50:ed:0c:1e:67:22:e5:ea:37:
68:89:a2:26:35:a6:83:6f:db:3e:b3:ce:ab:94:1f:1c:b5:5c:
fb:e8:75:d0:11:60:55:d8:0a:4e:2d:27:14:5d:bf:55:69:9a:
30:65:3d:4c:51:7c:54:c8:6c:ef:2c:65:61:4c:93:a0:d3:92:
0f:ad:9a:56:11:55:9c:76:ab:7e:96:24:1c:4e:6b:3a:13:af:
1a:62:95:6c:b5:e1:8d:31:7c:dd:36:1e:fe:df:71:db:bd:6a:
d6:1d:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:52:39 2025 by rpki-client