Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/92NldC0zvC1eJSbh4OCxgJg0MJg.roa
File: 92NldC0zvC1eJSbh4OCxgJg0MJg.roa (raw, json)
Hash identifier: cdv1Zg6tY8x0nEQj84/qUUFcfR31YUvCxsA6CngRWa8=
Subject key identifier: F7:63:65:74:2D:33:BC:2D:5E:25:26:E1:E0:E0:B1:80:98:34:30:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0199C3AF229287286C144169B7EB9FA7D99E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/92NldC0zvC1eJSbh4OCxgJg0MJg.roa
Signing time: Wed 08 Oct 2025 11:57:38 +0000
ROA not before: Wed 08 Oct 2025 11:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211876
IP address blocks: 2a0e:97c0:120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 22:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:af:22:92:87:28:6c:14:41:69:b7:eb:9f:a7:d9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 8 11:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76365742d33bc2d5e2526e1e0e0b18098343098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:29:94:8e:23:00:be:30:bd:e1:4f:c2:1b:
99:f1:43:4e:05:62:e3:80:60:99:61:33:18:b5:f9:
80:f2:b5:28:e1:42:e4:3c:7d:94:8e:60:4d:ec:d1:
67:f4:e5:7a:f9:84:77:0b:8d:5a:01:07:7f:56:08:
19:9d:ae:30:97:66:b5:a7:1c:fa:a7:de:40:14:56:
fa:25:ee:62:62:a4:f8:50:10:6a:a7:a2:27:67:5c:
c4:a9:cd:a5:fa:b9:ee:3f:8c:e6:af:fc:ae:48:d9:
4f:c6:5f:59:4f:17:91:e8:53:f1:95:5a:ca:d1:85:
e1:d4:f3:9f:d6:17:9a:60:cd:b6:2b:b1:42:02:43:
62:5c:9c:44:4f:f5:b5:a8:44:b7:b8:e5:38:f9:d0:
79:80:5c:53:3d:7e:08:ad:e3:5c:b0:14:3a:fb:a2:
2b:20:fa:60:69:18:c3:5c:5a:5e:4a:5a:c4:37:41:
2e:7b:a4:7a:9f:3c:94:6c:99:30:f7:54:fb:23:84:
29:96:75:f1:1f:72:0c:75:c9:a0:f1:cc:8c:13:16:
cf:e8:68:05:83:28:2c:ec:71:d4:1d:39:25:07:db:
d2:ca:b3:8e:8f:c1:06:64:e7:d7:b6:80:7a:e7:1f:
d6:94:61:d3:a2:4b:48:15:4d:75:c2:42:2c:15:c6:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:65:74:2D:33:BC:2D:5E:25:26:E1:E0:E0:B1:80:98:34:30:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/92NldC0zvC1eJSbh4OCxgJg0MJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:120::/44
Signature Algorithm: sha256WithRSAEncryption
3e:59:5d:20:94:68:e3:ff:d8:ea:d6:15:22:04:ab:41:07:e9:
da:d7:a2:14:19:79:71:a9:7b:a9:42:f5:2b:77:16:c6:d6:aa:
55:f8:13:ee:60:de:0b:52:f3:d7:87:ab:30:5f:a6:8e:7e:90:
86:df:79:4c:9d:30:4e:f5:cf:69:b2:ae:41:75:df:01:f1:48:
89:b9:8c:90:64:2e:69:09:d4:d7:ca:17:7d:63:ff:bd:26:d9:
9f:20:9e:f1:8c:43:84:7d:8c:f4:be:aa:7f:ba:c6:54:9a:70:
3e:aa:27:de:6b:12:19:b7:a5:ad:09:a3:bc:65:bb:15:48:e1:
f5:c0:9f:48:46:ca:92:37:ee:4b:71:f1:07:0b:0b:6f:57:c4:
5e:6a:7a:d3:9e:39:19:cd:31:5b:41:88:b4:87:e6:c1:0c:69:
51:d6:fe:a6:55:46:b2:31:6d:5f:63:d4:ac:8b:21:09:c5:b2:
61:4e:3e:12:7a:45:04:f7:81:d2:16:d7:9c:ae:e1:81:7b:a1:
df:f0:4b:0b:4a:1c:87:46:17:6c:6c:76:8c:2b:6e:9c:4a:52:
c9:84:d2:94:70:d1:3d:f5:05:9e:71:76:32:7e:d8:36:f5:f2:
7e:0a:3c:07:c7:58:55:25:0d:36:e9:c0:77:b6:23:f1:8f:25:
1b:95:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:20:34 2025 by rpki-client