Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F_Ne16nPD54kNGbUVZo6yqP3pWk.roa
File: F_Ne16nPD54kNGbUVZo6yqP3pWk.roa (raw, json)
Hash identifier: 3Jel0k1hxHNmH3I1FnHgNdskn5BofIw3ZN134KEfE9c=
Subject key identifier: 17:F3:5E:D7:A9:CF:0F:9E:24:34:66:D4:55:9A:3A:CA:A3:F7:A5:69
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01992B86E97313D71504E1C268C6C46F7ED6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F_Ne16nPD54kNGbUVZo6yqP3pWk.roa
Signing time: Mon 08 Sep 2025 22:51:25 +0000
ROA not before: Mon 08 Sep 2025 22:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58336
IP address blocks: 2a0e:97c0:550::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:86:e9:73:13:d7:15:04:e1:c2:68:c6:c4:6f:7e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 8 22:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f35ed7a9cf0f9e243466d4559a3acaa3f7a569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:30:bd:c1:ca:e1:98:4a:da:cb:82:ad:1b:
a0:02:fa:85:6e:8b:b7:bc:48:e5:4c:76:4e:bc:82:
82:29:6b:b8:3a:c4:97:aa:c3:31:ab:df:73:3d:83:
c3:06:9a:6e:49:2e:57:12:dc:0d:11:c8:77:98:c2:
1d:e0:f3:2e:ef:cc:50:bd:76:b6:8d:f8:bf:32:87:
d1:c4:00:d4:fb:08:87:af:0b:13:1e:21:cd:3c:1a:
cf:c5:d9:e7:ae:a0:dc:3b:82:b4:ac:7e:3c:72:c4:
ca:c2:c7:f3:55:52:38:4e:8a:42:db:2b:a5:59:6f:
05:72:55:d7:1d:c5:2f:fb:2d:9b:ed:f3:4a:c4:2a:
6a:8d:23:f3:0f:6f:ae:3c:be:fc:f3:ac:13:ba:41:
e6:25:98:ec:c3:fa:b6:39:07:c6:90:f9:68:62:72:
ad:6e:56:77:6e:bf:60:2a:57:57:d0:f6:ce:43:e3:
2a:14:fe:45:03:a7:5b:97:e0:bf:01:0b:8f:5c:f1:
45:4f:26:2d:1a:5d:bf:5e:b8:37:3a:4b:51:a6:40:
39:1c:4b:00:de:84:24:4b:e0:a7:c2:82:ba:28:0b:
cf:c6:06:1b:20:da:13:51:b7:d6:7f:19:7d:3f:98:
37:57:ba:cb:4f:9e:e9:ea:f0:22:f6:f4:bd:a4:c0:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:5E:D7:A9:CF:0F:9E:24:34:66:D4:55:9A:3A:CA:A3:F7:A5:69
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F_Ne16nPD54kNGbUVZo6yqP3pWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:550::/44
Signature Algorithm: sha256WithRSAEncryption
51:09:7f:0a:cc:b5:9c:f9:e7:a9:d6:16:84:ea:b9:93:72:80:
ae:e8:c6:96:d6:ca:73:54:cd:55:46:f8:d7:74:d6:57:c5:a4:
c9:ed:46:79:58:52:9b:61:b1:ef:65:f9:35:3b:96:c5:7f:56:
4b:37:f6:6b:19:91:6d:64:4c:62:49:14:8f:d7:eb:29:b7:70:
47:47:5a:cb:93:93:ba:92:ee:b7:eb:71:17:4a:68:4a:1d:df:
ef:e2:38:e4:18:b0:17:5a:3f:02:d5:a6:50:65:44:07:6b:ca:
57:02:f4:e3:fe:78:aa:08:6d:4f:13:75:39:35:f2:42:a2:42:
c8:31:ac:12:07:1e:4f:95:cd:22:98:56:4c:37:0b:23:2c:d4:
73:72:d2:8b:1b:99:23:e9:79:65:4b:db:99:31:bc:e3:a4:4d:
bf:8e:4e:81:7b:27:e5:44:08:e8:e4:1d:c7:cc:c9:fe:3a:63:
15:c8:92:75:48:eb:f4:2f:50:6f:a7:66:59:5e:e3:00:9a:2b:
b1:21:89:f6:56:1e:ea:46:99:13:1b:06:8b:db:25:0a:59:a0:
22:db:60:3b:83:a3:62:1a:8c:7b:41:e8:11:cc:fd:61:54:3d:
96:b4:6d:de:1f:07:e1:e1:a3:e7:e0:7d:12:b8:e4:65:63:5d:
45:3b:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:29:47 2025 by rpki-client