Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/xVwXfsSObrXQAVriToeSj3uAvns.roa
File: xVwXfsSObrXQAVriToeSj3uAvns.roa (raw, json)
Hash identifier: g9vj02CENPzqFXPZXkJG+M2AQILVcGZsqel94k5NeKI=
Subject key identifier: C5:5C:17:7E:C4:8E:6E:B5:D0:01:5A:E2:4E:87:92:8F:7B:80:BE:7B
Certificate issuer: /CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7
Certificate serial: 019A5AD5E0F6F648532829F4C52600A742BF
Authority key identifier: FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/xVwXfsSObrXQAVriToeSj3uAvns.roa
Signing time: Thu 06 Nov 2025 20:22:37 +0000
ROA not before: Thu 06 Nov 2025 20:22:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215558
IP address blocks: 2a04:a8c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:d5:e0:f6:f6:48:53:28:29:f4:c5:26:00:a7:42:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbc11e3722059687b7b21ce6ef6e06e13aae7ff7
Validity
Not Before: Nov 6 20:22:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c55c177ec48e6eb5d0015ae24e87928f7b80be7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:19:94:81:f4:36:dd:3e:e0:4d:4d:23:96:
e0:92:f2:2f:58:a7:42:2d:db:8d:8c:49:b8:93:88:
96:f8:d1:e2:c2:9b:a3:a3:b8:bc:70:51:85:d5:e5:
f6:1d:b0:a9:7e:8e:7f:82:3d:ee:a9:76:94:10:f5:
9e:3e:c1:1c:ae:7f:f3:81:ae:a8:ca:e6:b7:40:31:
ec:72:bd:38:a7:69:a3:0d:ec:fe:a0:5f:72:bd:a5:
ae:0f:79:43:27:b4:58:7d:06:f7:e2:bb:a4:8e:b6:
49:ea:7f:6d:c0:3a:1c:40:1d:a0:d3:86:e9:8a:90:
46:9d:5e:91:a1:38:56:21:e9:b1:28:50:c3:f8:a3:
98:f6:89:f6:23:58:0a:c8:f6:59:78:a1:c3:c7:e9:
1b:8d:a7:df:cf:2a:6d:58:c9:f3:37:df:e1:21:08:
b2:15:e2:45:6a:01:70:a3:77:78:6b:f5:9e:fa:1d:
95:c6:16:c5:fb:1d:77:f6:ce:f0:ac:1e:6b:d6:c8:
a1:12:2c:c1:a8:20:a6:45:47:63:70:ee:70:46:98:
2e:09:a2:c8:25:cb:14:27:93:b0:e8:41:68:f5:5c:
9b:ae:9a:0f:63:33:31:5c:9b:73:4f:fe:67:49:3a:
67:41:91:a5:c0:99:8e:b3:e5:ba:fc:e4:3b:23:0f:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:17:7E:C4:8E:6E:B5:D0:01:5A:E2:4E:87:92:8F:7B:80:BE:7B
X509v3 Authority Key Identifier:
keyid:FB:C1:1E:37:22:05:96:87:B7:B2:1C:E6:EF:6E:06:E1:3A:AE:7F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8EeNyIFloe3shzm724G4Tquf_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/xVwXfsSObrXQAVriToeSj3uAvns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ec7169-6124-4a0d-ada2-dbff401d1021/1/1-8EeNyIFloe3shzm724G4Tquf_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:b8:ef:8b:56:bb:83:e1:ea:83:e1:9a:4e:d5:63:80:6f:46:
be:f6:76:24:58:c6:dd:62:c7:44:93:2b:e4:f8:55:12:b8:c2:
49:ef:3d:6f:54:1b:a1:8b:d6:38:04:73:4e:cc:5a:01:5b:71:
1f:fa:b9:6a:1b:c3:41:90:d8:98:b3:15:bf:b9:82:60:c2:56:
8b:66:a0:40:2a:bb:22:75:00:d8:09:b6:07:97:9a:29:de:65:
62:bd:2c:14:89:fd:15:6c:53:4f:37:74:0a:c9:89:c1:d1:cc:
de:38:1a:01:5c:6e:be:b8:e8:49:c2:fb:c4:fc:ac:86:20:23:
c7:63:8d:aa:d4:a2:a4:16:58:23:37:c8:ed:b1:da:80:dd:b5:
d2:c6:bc:ae:96:6d:46:7d:94:7b:11:f0:80:ea:d5:7c:15:77:
58:7b:ee:39:c9:d3:af:78:12:98:0b:e6:2d:b6:a4:70:3b:7f:
60:96:72:87:21:96:00:ce:ad:e6:e2:bd:d9:d3:2a:62:ea:e5:
c2:22:95:22:7b:e7:22:97:96:62:a0:83:01:4b:73:44:3a:f9:
de:f1:8e:c2:5e:4a:39:e4:98:33:d6:1a:dc:48:56:8f:bf:67:
c1:d5:78:78:f8:2d:d7:24:20:aa:dc:7c:b1:3b:21:c5:f5:22:
27:99:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:39:30 2025 by rpki-client