Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/DuUayi7tY9bIV5I_bemnhj2FKgU.roa
File: DuUayi7tY9bIV5I_bemnhj2FKgU.roa (raw, json)
Hash identifier: 7q+2lmzKPBedZK74Yj01qUbUDa4feTYvUbWikyXAteg=
Subject key identifier: 0E:E5:1A:CA:2E:ED:63:D6:C8:57:92:3F:6D:E9:A7:86:3D:85:2A:05
Certificate issuer: /CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Certificate serial: 019A6DFE5B9CD718C7708D6A55EFCDC51D8A
Authority key identifier: 21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/DuUayi7tY9bIV5I_bemnhj2FKgU.roa
Signing time: Mon 10 Nov 2025 13:39:37 +0000
ROA not before: Mon 10 Nov 2025 13:39:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2001:678:1120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:fe:5b:9c:d7:18:c7:70:8d:6a:55:ef:cd:c5:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ba8ccf345eef0dcf7d0154920818f319c25f8
Validity
Not Before: Nov 10 13:39:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee51aca2eed63d6c857923f6de9a7863d852a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:11:01:28:59:c1:1e:36:56:40:0b:3a:5f:
34:9e:bb:f1:79:59:8b:eb:89:e3:d0:5f:b2:02:2b:
66:8a:4d:07:da:d3:85:00:26:61:36:6c:d4:aa:00:
7c:90:1a:a1:c9:68:9d:e9:91:24:6e:24:34:8a:80:
5e:76:d8:c3:59:04:7c:25:98:69:a6:b4:78:c4:73:
51:78:7a:30:41:41:14:e0:8f:b6:db:1e:16:ec:ee:
d7:58:c4:26:0a:48:ce:d4:72:ea:4f:dd:00:cb:8b:
57:22:c1:d0:8d:3e:bf:cb:7d:f1:ed:7f:ee:5d:8f:
55:35:03:f3:f3:1d:0a:e3:a9:28:4f:ce:20:e0:7e:
f0:b3:53:f8:3e:c9:10:95:0a:92:e4:e3:78:53:06:
79:d9:63:24:90:cc:e9:87:fb:a9:fc:15:92:6f:5e:
a0:82:bd:db:30:b2:76:e5:e9:27:89:d0:4b:90:74:
fa:37:04:74:5c:fc:7e:b6:0a:76:66:f7:5c:5d:5a:
c3:96:69:be:df:8a:30:d9:2e:11:47:38:9f:4d:82:
ad:b2:6c:fd:13:1c:70:ee:8d:fe:24:f4:b7:ba:49:
a3:94:03:f7:c3:0a:0c:ba:bc:ec:58:fd:bf:6b:6d:
ec:fb:df:c5:f8:8c:f0:08:a2:2f:30:6d:15:1a:b0:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:1A:CA:2E:ED:63:D6:C8:57:92:3F:6D:E9:A7:86:3D:85:2A:05
X509v3 Authority Key Identifier:
keyid:21:2B:A8:CC:F3:45:EE:F0:DC:F7:D0:15:49:20:81:8F:31:9C:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISuozPNF7vDc99AVSSCBjzGcJfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/DuUayi7tY9bIV5I_bemnhj2FKgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/834298-37f7-4830-8943-e066e0041a05/1/ISuozPNF7vDc99AVSSCBjzGcJfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1120::/48
Signature Algorithm: sha256WithRSAEncryption
69:ed:4f:40:f1:ea:48:74:71:3c:69:54:10:4b:8d:f9:1d:31:
7d:da:fb:9d:33:a5:95:b7:2f:25:65:fe:e3:19:d3:73:28:b0:
24:e5:37:ca:85:3c:80:41:66:19:02:0a:bd:73:2f:0f:b5:d4:
fa:0d:53:61:c3:39:08:fb:b0:bf:54:01:51:c0:2c:48:58:b9:
4e:20:1c:1e:b7:8a:ef:71:8b:bc:27:1a:6a:ab:40:1e:27:66:
3f:49:06:9f:1d:43:3a:fd:13:fb:1f:10:bd:b7:e1:ce:c1:32:
e4:4d:44:8f:ed:53:f7:7a:a4:27:67:97:43:a1:94:0e:af:03:
73:54:0b:44:73:97:8f:2c:ee:e9:9b:25:5f:90:ef:14:e9:6b:
37:cc:25:c8:84:71:62:56:1e:97:3a:32:73:78:35:2f:21:51:
d6:f5:fe:71:c0:42:60:f9:1a:0b:64:61:dd:3b:a0:fc:91:14:
ec:ab:3a:ae:99:f3:13:f2:07:6e:96:d9:cf:28:85:1f:b6:d7:
03:f5:8c:ae:26:b3:df:7c:8f:81:6a:ef:7e:08:08:ef:30:d7:
8a:78:83:90:b0:8f:a0:cb:74:fb:78:15:ef:5c:98:e7:f9:2a:
9f:05:20:c6:e9:c7:ea:7f:94:a0:e0:ce:6f:ff:9f:6a:91:81:
a0:b8:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:41 2025 by rpki-client