Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa
File: 4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa (raw, json)
Hash identifier: JlPqPVzZ1fRapenzkzSS/av8yhZnv6+RiIsubYAxBXc=
Subject key identifier: E0:8D:08:83:EB:19:B1:29:52:F8:84:90:7E:1B:F2:23:E8:48:5C:DB
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 019919643E6A48CFE60AED482BA7FB4972B3
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa
Signing time: Fri 05 Sep 2025 10:20:23 +0000
ROA not before: Fri 05 Sep 2025 10:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47541
IP address blocks: 2a14:25c5::/32 maxlen: 32
2a14:25c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:64:3e:6a:48:cf:e6:0a:ed:48:2b:a7:fb:49:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Sep 5 10:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e08d0883eb19b12952f884907e1bf223e8485cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:7f:87:be:6e:86:2e:a5:bf:4d:15:48:fc:
36:1c:86:16:b4:2a:38:02:3c:67:20:8a:06:dc:4d:
70:99:75:dc:20:ec:8f:bc:0e:a5:35:05:48:fb:9d:
1f:4a:2f:ba:97:53:43:c2:7c:ee:56:41:c6:eb:c8:
6a:07:83:66:fd:fe:b2:e8:51:92:c2:1d:fb:26:18:
a5:1c:85:38:79:73:23:33:2b:da:57:59:c6:f2:09:
c7:df:b8:be:43:f7:46:b0:18:69:ad:fd:5e:4b:6a:
c4:e6:35:23:c2:a9:30:aa:7f:fc:ba:cf:af:28:49:
a1:e8:14:5d:4e:da:30:cb:87:23:68:d1:0a:dd:41:
7a:3e:d0:4f:22:33:22:70:c4:fc:d7:07:fc:14:42:
67:81:19:28:43:5d:03:71:97:e0:00:d0:93:5d:39:
56:ee:bc:fc:7b:9c:56:b8:b4:c5:cc:05:2b:5a:ed:
f9:d4:f6:ec:f6:d5:06:9e:bb:8f:ba:3d:84:01:53:
fc:0b:15:b1:09:f0:79:b4:53:e4:0b:d9:22:0a:d0:
00:d8:96:90:55:77:f6:b5:81:3c:5b:2d:b9:9f:7a:
78:ed:13:fc:3a:a8:45:6a:a0:da:a6:14:19:00:15:
09:23:d0:8b:c7:a7:d2:85:4d:aa:f4:ce:9b:e7:a1:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:08:83:EB:19:B1:29:52:F8:84:90:7E:1B:F2:23:E8:48:5C:DB
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/4I0Ig-sZsSlS-ISQfhvyI-hIXNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:25c5::/32
2a14:25c7::/32
Signature Algorithm: sha256WithRSAEncryption
7c:f1:9b:d3:5f:7e:3a:00:a8:cb:8f:a9:c4:75:cb:d8:3a:1c:
65:a7:0f:93:c5:f2:51:bc:61:76:1e:ea:06:1f:b2:18:62:1b:
fc:ef:c8:4e:47:d6:d0:b1:cf:00:58:37:a7:66:6a:8f:e4:75:
49:84:2b:d4:92:4f:2b:c5:49:b2:a2:47:29:b6:c8:b5:91:77:
c7:c2:2c:5d:d9:d1:e4:19:c9:2a:dd:57:1d:40:f3:ce:f6:fc:
c3:60:ee:41:3f:c1:21:c9:05:72:5b:1c:62:05:90:b7:bc:87:
8c:c9:ae:f8:38:2d:6b:93:75:75:2c:3d:69:06:ca:5a:74:ee:
a9:20:42:a9:49:66:0f:48:05:f5:7a:8c:91:43:0d:b6:2b:c1:
a1:41:b4:22:c2:4b:fb:b7:b9:c3:1b:6a:92:b3:13:3f:c1:d5:
e6:9f:91:dd:b6:a9:9d:54:e0:ed:6a:c8:2f:8f:90:0c:9d:5f:
a0:0d:ef:5a:13:71:9a:e7:68:52:cd:e2:80:1f:97:c7:47:e9:
27:96:06:4e:a6:e3:fb:89:6a:e5:57:ed:7d:ee:cb:2d:18:44:
0c:58:2e:20:2d:7f:20:e9:c8:80:d6:26:d2:a4:96:7d:34:fa:
7b:e2:03:67:6c:7e:46:8e:36:c4:e4:a3:40:26:30:e5:4d:12:
0e:6d:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:46:14 2025 by rpki-client