Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/eNWnwqIDMEiQxfYhNRHjW54poNY.roa
File: eNWnwqIDMEiQxfYhNRHjW54poNY.roa (raw, json)
Hash identifier: ycpxV8nYGU8l1ZJlM7ZM3skLLwnEhIqNMh55U8iJWmw=
Subject key identifier: 78:D5:A7:C2:A2:03:30:48:90:C5:F6:21:35:11:E3:5B:9E:29:A0:D6
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019A4F683EC7F67E59918B479E328E789F4A
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/eNWnwqIDMEiQxfYhNRHjW54poNY.roa
Signing time: Tue 04 Nov 2025 15:07:03 +0000
ROA not before: Tue 04 Nov 2025 15:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204162
IP address blocks: 2001:678:1124::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:68:3e:c7:f6:7e:59:91:8b:47:9e:32:8e:78:9f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Nov 4 15:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d5a7c2a203304890c5f6213511e35b9e29a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:c6:c1:a1:5e:7c:d8:c9:ac:3a:18:f5:4b:
f8:94:b4:05:b3:5f:1c:0b:2f:e3:2a:b8:b9:93:af:
fc:2b:61:ec:4f:11:86:b9:f8:2d:cd:69:97:fe:35:
c7:97:d7:4c:e6:ea:8d:26:8f:c6:da:d0:19:f3:4a:
a0:49:77:2c:71:9a:5f:44:f3:ec:66:4c:f2:b6:32:
b6:50:1d:56:d0:6f:1a:10:3e:b0:67:ed:47:28:f7:
2b:0e:96:c6:e1:28:5f:2d:24:e0:ed:ae:76:38:87:
34:87:4e:a5:d2:32:6b:66:19:aa:2e:0d:a9:d7:4c:
d8:16:52:f7:75:8f:c5:89:c0:4f:39:85:d6:b1:fc:
65:f1:a0:32:d5:72:10:89:6b:a4:86:c3:49:8a:62:
24:7c:d9:b2:56:06:aa:6a:9d:89:bc:24:3d:14:5c:
2a:05:9d:e5:d0:b7:9d:06:06:f9:a6:db:83:99:8f:
f4:fa:a5:5a:49:5b:7e:44:e6:44:97:32:50:6c:54:
59:d6:65:8f:c4:f7:a2:e9:d5:f1:0e:36:a4:3a:de:
a8:5e:49:00:a3:15:33:27:b9:89:15:80:1d:6a:3c:
11:da:58:c5:ce:2a:c9:98:9d:19:bc:7d:49:a9:78:
f5:3d:fe:fa:50:e7:03:ac:7e:1a:60:1b:97:de:ac:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:A7:C2:A2:03:30:48:90:C5:F6:21:35:11:E3:5B:9E:29:A0:D6
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/eNWnwqIDMEiQxfYhNRHjW54poNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1124::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e3:61:9b:e9:a3:71:28:a9:be:44:c3:a3:01:d8:5a:60:24:
69:79:67:0f:1d:0b:1e:68:d4:9b:59:41:f1:8b:03:d8:56:56:
ce:b8:0e:d5:54:34:56:17:99:e2:b4:5f:e2:6a:47:70:55:bd:
37:f5:cf:e0:80:4a:d9:90:25:27:49:4b:c9:d2:32:53:1e:93:
86:68:65:68:57:6d:85:3f:e6:d0:11:46:cb:14:9c:d3:78:ca:
33:95:af:b8:bb:4c:0d:da:34:5e:bc:5b:b0:a2:cb:48:9e:a3:
d5:a6:b5:51:7a:e6:67:89:96:c8:ce:eb:66:ab:66:41:6b:a6:
86:cf:90:d3:05:49:fd:36:ae:df:bd:51:e9:8b:12:4b:d3:12:
af:83:2c:07:04:3a:52:0b:6e:e0:97:d3:06:66:d5:da:41:0b:
ad:f7:5d:59:49:8a:bf:88:a0:18:6b:12:1a:bb:8f:6f:a7:33:
52:6c:34:65:42:1f:8d:cb:8f:c5:e5:35:39:f1:94:58:eb:6e:
39:b2:78:88:8f:d3:f3:c1:c2:e1:c1:2c:67:d7:83:2d:41:ea:
ad:5d:6d:24:bf:7e:9f:1f:de:a0:20:8b:24:64:c8:86:aa:c2:
6b:e8:59:1f:e9:5d:4a:db:93:88:11:59:ed:cc:3c:69:f2:7e:
41:24:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:25 2025 by rpki-client