Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/vELKBYHFEWuziyxwHt8P-AaeZu0.roa
File: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (raw, json)
Hash identifier: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=
Subject key identifier: BC:42:CA:05:81:C5:11:6B:B3:8B:2C:70:1E:DF:0F:F8:06:9E:66:ED
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 01998706535BCDBAC6B144289701DEF10C4E
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/vELKBYHFEWuziyxwHt8P-AaeZu0.roa
Signing time: Fri 26 Sep 2025 17:16:02 +0000
ROA not before: Fri 26 Sep 2025 17:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216091
IP address blocks: 2a0a:cd83::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:87:06:53:5b:cd:ba:c6:b1:44:28:97:01:de:f1:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Sep 26 17:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc42ca0581c5116bb38b2c701edf0ff8069e66ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:53:8f:f0:dc:85:13:3c:36:41:c3:24:59:
42:a6:18:11:04:84:13:c8:31:0e:cd:46:03:7b:7f:
ff:db:11:dd:33:9e:fe:7c:4a:12:68:e5:63:f7:c0:
b4:c4:cc:b6:c8:1a:08:3f:ca:3a:c5:99:12:33:b1:
f8:9b:1e:fc:47:c0:73:e0:18:c6:18:9d:7a:e3:5d:
ef:88:f4:80:0e:db:93:3d:32:ce:f2:0d:c8:5e:4b:
32:33:e9:d3:c6:1b:f7:b3:dc:23:20:b9:07:4e:06:
d4:29:8e:f9:85:14:81:2e:42:d8:4d:44:77:52:4b:
67:6e:9e:3a:ac:4a:9a:f5:e9:a1:3c:16:89:a3:79:
c2:2f:04:88:08:ff:47:5e:db:57:db:59:f1:74:58:
0f:c6:13:86:ae:02:02:7b:10:15:53:bd:7c:ac:60:
c8:ba:86:4d:92:5c:2a:87:bf:91:b5:f7:b9:cb:db:
29:07:25:d8:5b:5c:b4:95:0d:8a:4e:ea:60:03:39:
91:95:c1:dd:29:ea:2d:7d:76:40:57:aa:62:0e:41:
db:b2:d7:82:1a:1e:57:0d:24:9d:fc:9b:89:26:cf:
94:70:02:b3:27:76:53:7d:f3:97:19:25:62:9e:10:
08:bc:70:5b:44:90:b4:f3:8f:4a:01:c8:e5:66:ca:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:CA:05:81:C5:11:6B:B3:8B:2C:70:1E:DF:0F:F8:06:9E:66:ED
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/vELKBYHFEWuziyxwHt8P-AaeZu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd83::/32
Signature Algorithm: sha256WithRSAEncryption
26:a9:8c:42:21:39:8a:e3:22:ac:96:95:5b:c2:f3:34:8f:0f:
4c:6d:6a:81:86:7d:2a:a1:d0:db:2f:59:1d:ec:bc:ab:1e:c8:
36:3b:a3:31:8d:41:ca:38:2f:f9:4d:f8:01:52:8a:0e:6c:bf:
0d:d1:d7:84:aa:e0:3f:89:b3:f7:9f:28:c5:dd:02:00:35:20:
39:d2:7b:bc:5b:3b:b8:86:04:b4:fc:10:54:b6:ed:0a:8a:38:
96:69:89:63:d8:43:85:36:29:89:cc:12:84:80:b9:25:2b:86:
5d:20:91:97:ea:8c:e8:77:40:d3:c1:7c:13:d2:0f:39:1d:31:
9e:09:ac:b8:5f:c4:d4:1e:f9:14:db:b0:1f:99:f4:ea:84:f2:
9f:de:39:aa:c7:5a:31:6d:65:a2:d3:68:37:1e:3e:a6:17:40:
71:06:ca:b4:7d:0e:77:2d:38:a1:f1:97:57:22:23:16:01:9b:
48:8d:b3:4b:9a:02:f9:02:2b:38:49:77:d3:96:60:a7:ac:61:
2d:fa:c4:1f:55:5c:06:33:71:eb:30:ff:8f:11:8a:ea:02:e0:
8d:a9:f8:c3:e1:40:6e:8d:85:65:a2:de:6f:bf:30:51:4a:cd:
30:9e:e0:4b:32:51:57:44:8d:2b:59:d4:e8:15:68:0b:f5:f2:
c0:f0:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:49:43 2025 by rpki-client