Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/aenbutlsHdIddYbTr8SaSbe80BI.roa
File: aenbutlsHdIddYbTr8SaSbe80BI.roa (raw, json)
Hash identifier: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=
Subject key identifier: 69:E9:DB:BA:D9:6C:1D:D2:1D:75:86:D3:AF:C4:9A:49:B7:BC:D0:12
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 019A0CDEDBB8B63023107F7B26A31DC0EBB6
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/aenbutlsHdIddYbTr8SaSbe80BI.roa
Signing time: Wed 22 Oct 2025 17:02:02 +0000
ROA not before: Wed 22 Oct 2025 17:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 193.33.246.0/23 maxlen: 23
193.33.246.0/24 maxlen: 24
193.33.247.0/24 maxlen: 24
2001:67c:2798::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:de:db:b8:b6:30:23:10:7f:7b:26:a3:1d:c0:eb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Oct 22 17:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69e9dbbad96c1dd21d7586d3afc49a49b7bcd012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:76:7d:c1:01:98:51:be:5f:b0:77:66:48:
50:99:2a:04:0f:06:f2:d2:ec:c4:72:9d:4d:59:c7:
c6:29:ee:5c:9d:46:dd:91:7c:ec:61:5a:fe:32:d1:
5e:7c:08:79:f1:92:81:fb:f4:3f:b0:5f:a6:c4:7e:
1d:0b:bb:e3:07:f7:cb:7c:07:c3:58:96:3a:99:44:
42:0d:69:da:e4:10:05:00:ee:a0:25:2a:92:f6:d2:
ca:cc:12:76:ee:be:16:62:21:c6:f5:e9:c6:81:a2:
13:99:8f:54:02:43:0c:c6:47:24:f0:59:79:e4:ed:
c9:8a:c1:4a:03:7e:5e:28:06:39:4d:1f:93:c1:be:
e0:fd:2c:3d:ee:fe:8b:bf:86:f4:80:92:ee:7c:46:
de:5a:53:aa:c2:59:0f:9e:80:fa:95:e2:37:aa:da:
96:6d:cf:b2:ba:5f:62:cb:3b:2e:1a:9c:85:fd:dc:
87:04:40:7a:de:b4:22:fc:7a:1c:bf:a6:42:d2:fc:
63:9d:c4:80:94:26:5e:40:a4:c8:0d:d7:d7:71:7f:
02:d3:9d:57:18:d2:65:b0:77:fc:b9:f8:de:b9:c6:
a9:73:25:c7:6b:28:08:ba:30:3e:32:98:11:df:e3:
e7:a0:d8:44:9f:28:26:f7:ba:8d:db:16:7e:14:5e:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:DB:BA:D9:6C:1D:D2:1D:75:86:D3:AF:C4:9A:49:B7:BC:D0:12
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/aenbutlsHdIddYbTr8SaSbe80BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.246.0/23
IPv6:
2001:67c:2798::/48
Signature Algorithm: sha256WithRSAEncryption
ad:61:6c:54:3b:3e:da:aa:24:c8:2d:69:9b:78:b6:f4:0f:8e:
5b:ec:ef:af:c2:d9:92:51:b9:3f:91:a6:74:a1:84:83:f1:e6:
b5:7e:96:c7:96:b9:5b:7d:fc:5e:20:22:6b:0a:2b:ed:16:90:
00:ad:7a:20:65:62:95:91:52:f7:78:37:5a:5e:8a:6f:eb:35:
ba:f3:fb:2f:6d:f7:56:55:fb:14:b9:74:9b:86:ef:70:5e:01:
09:d2:24:80:f2:e3:74:5c:71:4c:bc:d3:3c:85:a0:b1:1a:33:
12:24:ef:6a:bd:bd:8b:2a:7c:be:8d:b6:af:ec:7d:75:e6:38:
1c:75:aa:e3:77:00:ab:94:84:a8:26:c7:20:7b:8b:01:47:0f:
f8:f3:d2:46:93:3a:d6:f3:19:30:6e:ee:80:85:61:83:b4:4c:
18:5c:8f:ee:c9:f2:93:3c:a5:64:96:02:4e:cf:b1:fa:ae:bd:
ef:51:9e:6c:32:c3:c5:10:22:a3:88:7e:1f:5c:9a:5b:ff:7d:
f6:1a:85:0e:22:e1:21:9f:62:2a:6d:ef:67:d0:64:0d:af:e6:
57:27:d0:19:e8:ff:d6:83:e4:46:03:c6:7f:22:8c:0f:6c:ed:
60:bf:be:74:a3:da:a0:70:ce:d3:79:1f:60:b8:1f:13:d5:48:
5a:97:8d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:47:00 2025 by rpki-client