
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ys1v3Ss3Ds_W00Tqg52QIMrPUzo.roa
File: Ys1v3Ss3Ds_W00Tqg52QIMrPUzo.roa (raw, json)
Hash identifier: 4ePLrbG+H8eVQxAYLg0wGGl0YSywdSjrXIDXVh/1+Ig=
Subject key identifier: 62:CD:6F:DD:2B:37:0E:CF:D6:D3:44:EA:83:9D:90:20:CA:CF:53:3A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019809336CDAD01AC7AC35188428C3017746
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ys1v3Ss3Ds_W00Tqg52QIMrPUzo.roa
Signing time: Mon 14 Jul 2025 13:50:21 +0000
ROA not before: Mon 14 Jul 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 2a0e:d604:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:6c:da:d0:1a:c7:ac:35:18:84:28:c3:01:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 14 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62cd6fdd2b370ecfd6d344ea839d9020cacf533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:2d:4a:9a:f9:bd:94:ce:f5:d0:c5:d6:c9:
6c:37:0e:7c:06:5b:6e:0f:13:54:93:85:a6:78:98:
bd:5f:5c:9d:db:65:27:b8:2d:b6:37:b7:da:b8:60:
05:f0:d4:1d:9e:c4:65:43:71:5e:db:13:e4:87:6c:
b4:df:d3:88:d4:dc:39:5b:76:e1:ff:f3:df:82:1a:
c2:cd:0b:0b:3f:be:3e:2d:6a:76:d1:b8:f8:22:cb:
83:b8:58:ae:d9:ab:65:c7:58:5d:a4:e9:9b:10:f7:
8b:d4:38:f7:88:04:9b:15:a4:90:95:b8:21:35:df:
c2:a2:3a:6c:b4:45:f6:5d:ca:90:b8:52:5b:5e:d5:
ac:55:22:5e:28:b3:f3:95:a7:ba:5d:0c:e8:52:9b:
33:b2:c0:66:fd:61:5f:bd:c2:ce:63:2c:94:af:7f:
09:f3:d0:b1:de:d3:43:2f:29:54:61:57:2d:fb:19:
77:5f:ba:ff:6e:dd:34:f6:d6:ae:8c:90:ee:3e:a4:
b6:a4:e7:94:d6:af:dd:67:dd:2c:fc:8f:8b:93:b8:
3a:12:f8:b4:45:b6:f1:6e:8c:bb:f7:9b:a7:46:af:
21:b7:75:4d:fa:3f:c0:59:8b:f6:37:5f:a8:31:f7:
43:ea:bf:b9:1e:42:4d:32:2d:b2:e6:ef:9f:79:a7:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:6F:DD:2B:37:0E:CF:D6:D3:44:EA:83:9D:90:20:CA:CF:53:3A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ys1v3Ss3Ds_W00Tqg52QIMrPUzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d604:1::/48
Signature Algorithm: sha256WithRSAEncryption
74:be:5a:67:c1:d2:6d:5b:54:5c:05:44:39:c1:a9:76:40:14:
93:9f:83:8f:34:02:2a:c5:fb:e2:52:27:84:fb:29:95:5a:b2:
85:1d:0b:d0:61:b5:ff:25:7c:c5:7d:a4:1b:85:6d:f7:2d:dc:
ae:80:2f:2d:0a:9c:dd:7f:35:de:b7:a6:1b:c0:46:c6:f4:08:
c8:e2:8d:fe:7f:76:46:1e:61:25:c3:9e:09:86:4f:fb:c8:75:
85:a4:da:96:6b:24:b8:a3:39:6a:e9:42:fc:08:64:6c:46:2a:
11:08:48:5e:8e:15:73:21:6f:dd:64:dc:f5:d8:8c:21:ad:87:
ce:00:6d:37:5e:e2:8f:5b:9a:c5:4e:6c:e7:b8:81:03:8a:1b:
0e:b3:55:47:17:4a:24:7f:7c:bd:49:aa:14:76:79:5f:b1:de:
bc:b2:8b:94:20:e0:e9:a3:d9:6c:00:90:6d:90:2b:1f:94:21:
b3:ea:5b:6e:68:45:b4:34:fa:16:e6:a7:0f:7f:2b:ee:74:50:
c4:84:06:5a:0d:0a:6a:fb:5a:46:ff:97:04:c4:64:ca:50:17:
62:8d:56:c1:0a:f3:86:4c:db:e3:38:69:18:d3:78:ef:dd:30:
df:ef:be:79:42:b0:ef:0f:8f:df:16:c5:9b:50:3e:74:d0:69:
3e:8a:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:17 2025 by rpki-client