Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa
File: YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa (raw, json)
Hash identifier: r5CG/fT/2a1FFiFHEfz9mv1/F2o6C2NocnaCA9Rt8TE=
Subject key identifier: 61:EC:5B:67:D5:C5:81:08:53:D6:FA:7C:B2:4D:EC:42:AA:90:7B:D5
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019905202372E58D8FE062F2520A8D89D111
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa
Signing time: Mon 01 Sep 2025 11:53:36 +0000
ROA not before: Mon 01 Sep 2025 11:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:200::/40 maxlen: 48
2a14:67c0:300::/40 maxlen: 48
2a14:67c0:600::/48 maxlen: 48
2a14:67c0:601::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:20:23:72:e5:8d:8f:e0:62:f2:52:0a:8d:89:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Sep 1 11:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61ec5b67d5c5810853d6fa7cb24dec42aa907bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:dc:49:13:51:af:f5:09:67:24:04:c2:4a:
c8:51:ad:2c:ad:9e:f3:5c:7d:1e:56:07:69:3b:96:
dd:3f:a9:4a:24:96:20:81:60:da:02:1a:5d:4c:35:
00:b7:21:9f:46:45:03:f1:66:e6:f3:59:a0:f9:4c:
d2:23:2e:04:35:22:a9:d1:8e:e2:4c:ce:a8:eb:05:
d6:10:79:38:07:31:31:6f:7a:b1:81:93:f8:e0:bd:
9c:28:4f:ad:f9:4d:54:c5:41:3c:92:a4:34:0a:a2:
02:4c:25:8f:a5:a8:e0:fa:f8:44:0a:87:3a:7e:6f:
97:66:e1:28:a2:98:ea:5b:7c:b0:53:e4:5c:09:ff:
8d:99:a9:be:ee:1c:8b:d0:c2:16:bb:9b:a9:4d:8e:
34:7c:9b:40:26:29:fb:6f:d0:20:3b:ba:6d:bb:66:
89:2f:63:cf:5e:4c:6e:c8:9b:55:1b:b0:d2:a4:91:
33:e2:66:89:bb:c8:05:58:3a:43:9c:e5:e4:6d:ef:
c5:01:07:88:d9:63:3a:52:7f:bc:f4:21:9c:75:bf:
32:5f:a5:d2:cc:2f:96:28:9f:98:d4:31:d7:0a:32:
5b:ad:4a:bf:a2:7f:a6:ee:d0:19:6d:c4:2e:58:26:
15:cf:41:77:ee:fc:fe:bd:53:af:63:8c:19:b6:8e:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:5B:67:D5:C5:81:08:53:D6:FA:7C:B2:4D:EC:42:AA:90:7B:D5
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/YexbZ9XFgQhT1vp8sk3sQqqQe9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:3ff:ffff:ffff:ffff:ffff:ffff
2a14:67c0:600::/47
Signature Algorithm: sha256WithRSAEncryption
ab:d4:f1:81:8c:5b:38:08:23:b4:9a:1d:4b:f1:a6:56:57:d9:
3c:45:1d:43:25:00:1b:a6:37:22:19:94:8d:43:06:d4:bf:f2:
78:00:0a:09:8a:ec:b6:6f:ae:47:9f:6c:57:18:7f:05:2f:c2:
3c:fe:5b:a8:42:8b:74:9c:4c:a8:59:ef:b3:53:af:ec:6b:39:
07:a2:7b:75:5b:f8:89:f1:6f:be:7f:ba:24:db:6e:6d:60:e3:
8a:2f:e1:cf:e3:7d:47:14:a1:0a:35:e0:21:f9:2f:70:44:d8:
29:9b:c3:dc:82:dd:06:c0:4d:5c:76:ce:33:47:a0:b4:ad:6b:
9e:e3:78:39:44:14:73:54:da:b0:ed:09:f4:e4:1e:b4:ef:9f:
db:96:28:e7:f0:46:c2:e3:56:5d:13:c2:3d:fb:cc:88:82:52:
8a:22:90:48:2a:1b:3b:41:ec:aa:d2:9a:27:5b:16:6a:30:19:
c9:0a:0d:77:f7:94:45:c2:ff:ab:de:db:4f:8b:e7:30:c1:8a:
3f:a3:5a:1e:e7:7e:e2:b2:08:51:ee:eb:ba:0c:23:67:0f:9b:
a1:17:4a:a4:4f:fd:ed:4d:6a:f9:92:da:da:49:23:46:ad:39:
54:ed:33:88:d0:d3:37:70:59:0b:12:00:dc:b0:1f:c7:8b:9c:
f6:04:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:52:30 2025 by rpki-client