Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B9MhNGJEl3itFHB4OmslGem7aUY.roa
File: B9MhNGJEl3itFHB4OmslGem7aUY.roa (raw, json)
Hash identifier: un8CbQGGxn4kYEqbqoZwYvwtS0C3S21Ju5kztlctV6s=
Subject key identifier: 07:D3:21:34:62:44:97:78:AD:14:70:78:3A:6B:25:19:E9:BB:69:46
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01995D8C5DE4D0799EEC497B6EEEB1167D09
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B9MhNGJEl3itFHB4OmslGem7aUY.roa
Signing time: Thu 18 Sep 2025 15:58:24 +0000
ROA not before: Thu 18 Sep 2025 15:58:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214309
IP address blocks: 2a06:de00:dde0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 15:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5d:8c:5d:e4:d0:79:9e:ec:49:7b:6e:ee:b1:16:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 18 15:58:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d3213462449778ad1470783a6b2519e9bb6946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:b8:00:f4:d4:74:6c:5e:12:dc:db:55:27:
e9:d4:ff:8f:93:30:ed:75:ba:39:f9:48:79:74:ca:
42:fb:3c:75:0a:59:14:f3:03:36:d3:5b:21:bd:f3:
ba:54:a5:78:97:f7:98:24:d6:af:c4:6b:f5:fa:2a:
69:08:12:1c:f5:3d:38:1c:17:66:1b:62:43:bf:90:
86:0d:1b:9d:11:ed:ca:1a:e0:dd:19:74:f8:a3:26:
22:4e:b3:43:d3:7b:c8:16:8f:ac:e3:05:90:1b:c4:
2c:66:2f:ea:2a:2e:db:04:cf:7e:09:10:8b:12:89:
34:08:a1:70:6a:78:29:c2:6e:86:12:25:3e:e1:36:
1f:f3:23:47:1f:b4:65:31:44:9f:0c:32:07:b2:1e:
a2:0d:fe:02:83:e4:21:3f:1b:1b:52:16:5a:e1:53:
97:a7:cc:08:12:15:c9:fe:65:03:61:15:36:9d:29:
48:af:4c:25:5b:07:70:4a:72:6f:46:06:70:24:ec:
1f:68:38:b5:0b:0b:06:e9:23:87:8f:68:48:ee:6a:
30:63:48:ff:3e:af:9e:77:d4:eb:99:36:b6:65:72:
b6:35:de:56:25:63:5f:c3:ad:24:a6:9b:5e:ec:dd:
f4:68:d4:5d:dc:f1:e1:2b:55:46:b1:2d:b4:fe:1b:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:21:34:62:44:97:78:AD:14:70:78:3A:6B:25:19:E9:BB:69:46
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B9MhNGJEl3itFHB4OmslGem7aUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:dde0::/44
Signature Algorithm: sha256WithRSAEncryption
37:f9:a6:e1:ac:fb:96:5d:44:9c:ad:8f:23:bc:34:67:f7:33:
1d:1e:bb:27:29:8e:7d:f8:b5:36:ab:19:5c:e7:60:77:4b:ff:
4b:f5:49:38:7d:7b:80:25:6f:30:be:b4:35:e1:d1:7e:e8:34:
fa:80:a4:a4:88:ea:f3:1d:b9:51:40:aa:00:11:a3:1f:cc:02:
f9:33:1a:7c:60:83:67:7d:32:95:79:1a:fa:1a:58:6d:38:b9:
13:19:d3:61:9f:bc:e3:fa:c7:36:76:63:6c:e6:45:20:66:3e:
42:da:b2:18:cf:42:d9:47:b4:f2:8c:44:34:b1:6d:fe:ad:13:
91:d2:31:e4:52:89:fa:17:f0:b3:12:93:51:d2:ff:ed:47:4e:
87:66:3b:e7:b7:2b:34:05:e7:af:c5:46:cc:38:81:bf:96:15:
53:64:d5:67:a6:65:91:3a:fa:df:7e:cc:09:cd:10:56:e5:76:
ed:00:03:a7:c9:96:ed:1a:fd:7e:be:fe:be:ad:e8:59:95:dc:
fb:ae:9f:2e:8e:d5:30:2a:e6:68:67:91:d4:22:82:1a:68:7c:
3f:3b:c1:08:ee:99:d8:85:ca:b0:f4:c6:9e:cc:2d:2a:25:00:
90:fc:63:81:e6:10:71:2a:2c:d8:b8:92:eb:df:37:3a:02:08:
d4:d4:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:39 2025 by rpki-client