Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U-A7UIF8HFfaIfqzdQ7C2L0zquw.roa
File: U-A7UIF8HFfaIfqzdQ7C2L0zquw.roa (raw, json)
Hash identifier: GU58R8XVv5pE4eYMaa0KfDxvMTXKbkzu6n6kuXkDNTU=
Subject key identifier: 53:E0:3B:50:81:7C:1C:57:DA:21:FA:B3:75:0E:C2:D8:BD:33:AA:EC
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 019A33B92543556F8001E3F06093CA0ACB52
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U-A7UIF8HFfaIfqzdQ7C2L0zquw.roa
Signing time: Thu 30 Oct 2025 06:06:03 +0000
ROA not before: Thu 30 Oct 2025 06:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197204
IP address blocks: 2a06:ef80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:b9:25:43:55:6f:80:01:e3:f0:60:93:ca:0a:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Oct 30 06:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53e03b50817c1c57da21fab3750ec2d8bd33aaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:23:95:86:92:b5:c1:7c:7c:15:e0:1c:68:
f4:5d:2b:83:6f:9b:d8:38:91:fa:5b:2b:ee:96:16:
6c:af:a1:c2:26:a3:c5:98:42:c7:99:11:22:c3:e0:
e4:41:3e:fc:66:28:bc:b9:70:a3:24:bc:21:dc:f8:
20:f1:72:be:62:28:92:3d:3b:bd:d1:16:9c:24:44:
21:95:dc:75:4c:5c:96:01:9b:54:f6:86:95:51:a1:
9b:af:e5:01:c5:91:8c:d4:74:51:6f:6d:96:fe:2b:
1e:11:54:10:86:48:12:fa:7a:af:f3:85:03:fe:7f:
b7:95:2e:88:3a:85:eb:9a:aa:4c:49:cb:5f:bc:4f:
1a:9e:71:53:05:02:a8:66:07:45:08:6d:75:f1:d1:
20:27:17:ea:1e:c5:8e:9c:fe:1c:af:2a:b5:8d:17:
c5:01:22:6b:a4:d0:7b:ad:6e:3e:89:2b:98:d0:4d:
c9:69:ff:48:8c:a4:87:f7:41:95:f0:af:08:9a:07:
6e:63:47:ef:15:47:1c:f7:c2:3c:1f:fc:3b:1b:8f:
1c:4b:6d:f3:40:a6:ad:2f:fa:15:56:27:95:ee:cc:
81:26:4b:1b:bc:80:b2:a4:5d:d4:67:6c:c2:ba:4e:
58:49:fc:10:16:1c:b4:f4:ae:f5:bc:cf:2b:71:5d:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:3B:50:81:7C:1C:57:DA:21:FA:B3:75:0E:C2:D8:BD:33:AA:EC
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U-A7UIF8HFfaIfqzdQ7C2L0zquw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:ef80::/29
Signature Algorithm: sha256WithRSAEncryption
0a:2c:24:34:cd:cd:0b:45:bb:68:8a:5c:cc:a9:27:96:e4:82:
8c:8f:78:4b:fc:d3:e1:b9:d4:22:30:fc:d2:8d:7a:f4:6f:55:
8a:15:53:62:f9:01:a4:8d:b7:8c:a6:15:9f:e4:5e:89:88:01:
ab:55:e9:b4:8d:ee:a0:ec:c6:2b:e1:19:4f:f6:21:6a:be:9f:
2e:af:46:3a:49:d7:ca:7e:3f:b5:12:27:eb:44:e3:bc:3f:0f:
5b:78:3d:52:ec:92:e2:0a:d6:41:db:2f:97:21:ae:b0:cb:43:
59:31:50:51:07:f7:c6:e2:17:fd:cd:a5:da:3e:bf:01:5d:7c:
2a:5d:52:1b:ea:50:1c:23:2b:34:93:6e:a3:07:4a:c8:f1:72:
f9:b8:83:7f:79:d4:59:3b:28:05:56:be:48:5c:ed:42:19:1f:
2c:88:7b:12:72:e8:cd:67:d4:00:b5:41:14:49:64:78:b6:b5:
d1:e7:a0:6d:4e:d3:dc:53:71:30:94:cb:ae:40:2f:64:5a:91:
1d:48:33:84:3f:ef:21:e7:0b:2e:0c:77:6f:b2:af:c4:31:01:
f9:5e:a0:f2:d9:51:aa:08:bc:97:e9:55:a2:3a:67:54:0a:4f:
2b:29:d6:a5:0d:c5:f6:2b:d2:3c:d6:b7:28:c4:86:e6:24:32:
78:5e:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:40 2025 by rpki-client