Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AAzTzzoIN_MiPRWwBv0en3BuAl8.roa
File: AAzTzzoIN_MiPRWwBv0en3BuAl8.roa (raw, json)
Hash identifier: o4enI/i908faa70qXU9A8eNcAtvBncgZr6fh7CFRWSs=
Subject key identifier: 00:0C:D3:CF:3A:08:37:F3:22:3D:15:B0:06:FD:1E:9F:70:6E:02:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A2B563EBED4032ADEFBDD0028C2F829C3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AAzTzzoIN_MiPRWwBv0en3BuAl8.roa
Signing time: Tue 28 Oct 2025 15:01:03 +0000
ROA not before: Tue 28 Oct 2025 15:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12695
IP address blocks: 45.12.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:56:3e:be:d4:03:2a:de:fb:dd:00:28:c2:f8:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 28 15:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=000cd3cf3a0837f3223d15b006fd1e9f706e025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:61:93:4c:ec:ff:2e:4a:e9:58:43:12:d3:
5e:80:97:ac:61:ae:56:d2:e7:cb:8a:90:e8:ee:b1:
ef:5e:b9:93:84:6b:b4:4d:6e:17:14:41:5e:de:69:
eb:fd:d5:6b:ff:8e:9b:77:f3:9b:18:d5:5d:68:b0:
d7:f8:b6:b7:fe:9b:d4:df:6c:60:b6:fc:ea:d4:e5:
97:94:66:97:65:ca:03:b2:35:64:50:8c:47:e2:7c:
64:b4:02:14:ba:3b:e1:07:63:0f:c4:44:00:f5:16:
6a:30:ba:42:ff:90:63:97:15:ea:0a:05:a0:99:56:
60:d9:aa:fe:3e:cb:b4:82:1f:b0:87:78:fd:d4:3e:
e8:86:7d:cd:fa:7a:92:bb:7f:48:61:74:45:7d:a2:
3b:66:86:9a:e0:4e:c4:a7:e5:18:85:38:e0:79:55:
eb:7f:71:9f:17:43:01:e9:36:75:bf:e6:fe:93:39:
34:aa:b2:c6:67:ab:d5:48:68:ee:34:ae:91:10:e5:
02:11:73:3f:73:80:9e:50:74:be:84:3e:3c:68:1f:
c1:a2:72:5b:56:c2:28:37:ff:b3:46:25:f7:1d:4e:
27:ac:b4:26:8b:86:2d:5e:5d:ad:fa:51:66:3d:6c:
7f:ff:c0:f8:a2:cd:4f:2e:06:b1:73:c9:03:28:3c:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0C:D3:CF:3A:08:37:F3:22:3D:15:B0:06:FD:1E:9F:70:6E:02:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AAzTzzoIN_MiPRWwBv0en3BuAl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c7:30:5d:e6:f5:25:2c:5e:0f:e5:6f:7d:5d:e0:d8:a9:74:
9c:68:65:cb:ae:74:5c:3f:aa:71:06:52:69:41:e5:1e:ff:fc:
a3:51:d5:ce:2f:4f:e1:49:29:77:fa:4a:45:ac:c5:b4:7c:ba:
78:01:99:72:bf:98:f1:8f:d5:e2:e1:e0:fa:fa:50:dc:f7:98:
c5:bc:42:44:84:41:70:e9:cb:b7:39:0a:6f:85:d0:e9:43:57:
d9:d7:1f:13:c8:6b:7a:90:89:a0:9a:7b:0d:83:a6:d5:cf:db:
2c:a9:05:92:47:52:7e:a2:97:c3:bb:e6:ae:bc:66:c0:ec:89:
8f:b7:ef:ce:d2:3d:9f:79:5d:25:d5:43:a8:ab:79:0f:40:68:
07:9e:dd:63:dc:2e:60:f0:00:c5:8b:0a:e8:89:f6:59:76:4f:
ed:4f:ba:47:a8:8d:31:0c:42:4b:94:57:e4:d7:c7:76:a9:70:
bb:6f:96:1c:e3:aa:25:84:67:88:f0:8e:8b:97:f3:82:fa:81:
14:d4:66:16:de:ff:82:0f:89:40:4a:27:35:fb:12:c0:59:44:
67:fb:b0:42:0e:fe:d8:e3:f4:ab:a0:77:79:bb:1b:98:8d:e3:
f2:d9:1f:bf:27:be:a2:9e:13:42:8b:86:44:de:dc:97:f3:10:
a9:a3:9b:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZorVj6+1AMq3vvdACjC+CnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUxMDI4MTUwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDBjZDNjZjNhMDgzN2YzMjIzZDE1YjAwNmZkMWU5ZjcwNmUwMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuThhk0zs/y5K6VhDEtNegJesYa5W
0ufLipDo7rHvXrmThGu0TW4XFEFe3mnr/dVr/46bd/ObGNVdaLDX+La3/pvU32xg
tvzq1OWXlGaXZcoDsjVkUIxH4nxktAIUujvhB2MPxEQA9RZqMLpC/5BjlxXqCgWg
mVZg2ar+Psu0gh+wh3j91D7ohn3N+nqSu39IYXRFfaI7Zoaa4E7Ep+UYhTjgeVXr
f3GfF0MB6TZ1v+b+kzk0qrLGZ6vVSGjuNK6REOUCEXM/c4CeUHS+hD48aB/BonJb
VsIoN/+zRiX3HU4nrLQmi4YtXl2t+lFmPWx//8D4os1PLgaxc8kDKDyBPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAM0886CDfzIj0VsAb9Hp9wbgJfMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQUF6VHp6b0lOX01pUFJXd0J2MGVuM0J1QWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQxHMA0G
CSqGSIb3DQEBCwUAA4IBAQCNxzBd5vUlLF4P5W99XeDYqXScaGXLrnRcP6pxBlJp
QeUe//yjUdXOL0/hSSl3+kpFrMW0fLp4AZlyv5jxj9Xi4eD6+lDc95jFvEJEhEFw
6cu3OQpvhdDpQ1fZ1x8TyGt6kImgmnsNg6bVz9ssqQWSR1J+opfDu+auvGbA7ImP
t+/O0j2feV0l1UOoq3kPQGgHnt1j3C5g8ADFiwroifZZdk/tT7pHqI0xDEJLlFfk
18d2qXC7b5Yc46olhGeI8I6Ll/OC+oEU1GYW3v+CD4lASic1+xLAWURn+7BCDv7Y
4/SroHd5uxuYjePy2R+/J76inhNCi4ZE3tyX8xCpo5vY
-----END CERTIFICATE-----
Generated at Mon Nov 3 09:50:02 2025 by rpki-client