Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sOTC3P9MJxASQpZ0ilV2oUXMF4o.roa
File: sOTC3P9MJxASQpZ0ilV2oUXMF4o.roa (raw, json)
Hash identifier: +EZZYZIlTkCtuQDHaWgspBiAjRKjiOYy7y2gdzinmuI=
Subject key identifier: B0:E4:C2:DC:FF:4C:27:10:12:42:96:74:8A:55:76:A1:45:CC:17:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0197F600AFA5448C0A6DFE809DEF52830EC2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sOTC3P9MJxASQpZ0ilV2oUXMF4o.roa
Signing time: Thu 10 Jul 2025 20:22:09 +0000
ROA not before: Thu 10 Jul 2025 20:22:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 2a10:ccc0:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f6:00:af:a5:44:8c:0a:6d:fe:80:9d:ef:52:83:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 10 20:22:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0e4c2dcff4c2710124296748a5576a145cc178a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:2c:8d:fd:a0:ec:29:8f:24:2a:96:16:7f:
92:fb:ec:7b:42:25:6b:57:9b:cc:48:3f:15:21:3f:
25:80:56:a5:ea:f2:67:5a:3b:cb:9e:ab:59:db:f3:
50:76:d5:28:57:9b:23:9f:0b:f9:83:95:62:16:92:
e5:c4:30:d8:b5:b0:54:27:08:87:f3:d7:36:73:41:
f6:0d:69:be:85:57:8c:30:a9:18:2f:93:97:51:7b:
9f:eb:13:be:73:ef:46:0f:dd:07:7b:27:33:9e:3a:
9a:c1:84:39:ec:25:36:3a:17:9e:d7:11:c8:ee:80:
c2:39:ec:f6:4c:c6:2b:41:f0:37:f1:44:69:04:34:
8a:11:dc:9d:09:ca:2f:b0:7a:1b:e5:45:94:23:5a:
90:e2:14:3d:18:60:f0:6d:07:a2:f6:1a:88:f0:41:
02:a4:e8:6f:87:c9:5c:43:af:91:39:98:2f:c9:2e:
a3:61:7d:e5:d1:29:6a:e8:79:00:11:54:8b:5a:8a:
71:1b:2f:55:87:86:1e:a1:5f:b0:d5:3f:55:99:fa:
0d:05:d7:94:68:02:43:4b:04:ee:a7:dd:88:81:6e:
c2:cf:d5:e5:21:ab:04:f3:9e:1e:cd:0b:41:5a:32:
2c:20:e5:66:fd:aa:e0:c0:d0:c9:6d:38:bd:da:2d:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:C2:DC:FF:4C:27:10:12:42:96:74:8A:55:76:A1:45:CC:17:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sOTC3P9MJxASQpZ0ilV2oUXMF4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:100::/44
Signature Algorithm: sha256WithRSAEncryption
b7:b1:fc:10:3b:cd:1f:c7:4e:40:e3:5c:9d:1b:a8:d5:78:cb:
d6:a0:f4:ab:3f:55:91:70:7e:c1:68:0e:9d:13:15:8d:c8:ab:
82:09:63:6a:56:d0:b1:f4:57:6f:dd:d6:31:64:0e:13:09:61:
4d:01:24:36:03:c2:d4:c2:7f:9d:ec:2b:94:17:97:a3:33:89:
4f:ab:02:a7:86:4c:01:a5:1a:ba:85:87:1a:80:f2:51:73:0f:
b4:11:f9:cf:e6:e1:61:0e:72:a7:d9:a7:db:57:b4:04:ee:ca:
98:10:a3:75:f0:90:57:5d:13:c2:43:e9:16:91:af:c0:2e:cd:
19:6f:c7:4d:5c:68:6d:7a:85:36:c6:93:85:1c:2f:a8:1a:63:
65:75:ef:f8:ce:46:38:7f:c5:fb:9d:97:68:f8:68:a9:40:07:
45:0f:f9:a3:82:26:4d:de:68:14:25:68:df:5d:ba:17:d2:a8:
e0:05:20:86:ca:ca:c5:a0:48:ac:9f:1a:03:25:8b:0b:92:1f:
7c:35:0e:85:ae:32:dc:dd:1f:76:b0:bf:9d:57:2d:d4:0d:42:
ac:31:18:84:9d:2a:f1:39:ab:ef:c4:de:11:1d:a0:36:55:16:
31:e6:a9:2c:a4:9f:c2:d8:18:cd:87:32:c8:b4:25:c0:df:f0:
74:d2:c2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:08:42 2025 by rpki-client