Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeDEf2uXutN_YEFPJXyRGUMfuO0.roa
File: HeDEf2uXutN_YEFPJXyRGUMfuO0.roa (raw, json)
Hash identifier: 0guAYZKP0SULGiIDuR1ak/rRQqhFgWVIaEiYq3jd6s8=
Subject key identifier: 1D:E0:C4:7F:6B:97:BA:D3:7F:60:41:4F:25:7C:91:19:43:1F:B8:ED
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198B843292D9D55991A6D24A28613439650
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeDEf2uXutN_YEFPJXyRGUMfuO0.roa
Signing time: Sun 17 Aug 2025 13:41:05 +0000
ROA not before: Sun 17 Aug 2025 13:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213891
IP address blocks: 2a10:ccc6:66ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:43:29:2d:9d:55:99:1a:6d:24:a2:86:13:43:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 17 13:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de0c47f6b97bad37f60414f257c9119431fb8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:3a:b0:f9:b9:ab:31:69:88:fc:59:38:76:
d0:bf:79:fb:ca:66:65:7e:c8:bd:f1:3e:f2:c9:4d:
19:99:10:16:f9:99:f4:3b:c8:2e:03:9f:fb:53:97:
13:06:71:ad:c6:ad:7a:40:74:e3:92:da:9c:36:0f:
6b:26:8b:ec:a9:3c:3e:62:bf:b4:6e:74:86:31:20:
de:66:ef:b9:e6:47:aa:5d:10:33:87:d7:a5:60:5b:
f0:56:e3:43:40:f3:27:53:ee:2a:9f:88:f2:a1:92:
3c:d0:ba:ad:b8:9e:35:fb:a8:62:11:32:2f:87:00:
12:63:63:cc:ef:26:65:37:fa:79:1e:51:5c:b6:24:
45:e8:9a:50:10:d8:48:43:6f:7f:95:99:02:17:0f:
3f:bc:c9:13:d1:e4:9e:14:aa:21:f0:db:6f:39:59:
48:79:5f:13:08:20:41:22:d5:12:75:a1:38:3c:c3:
3a:be:d9:96:4f:2c:e0:6f:7b:95:b9:0a:86:36:5f:
68:78:26:af:01:7f:8f:a0:63:33:70:fa:cf:ac:26:
21:24:10:ad:36:34:d5:a4:da:f5:4f:89:f4:bb:be:
9d:74:65:b0:f3:5d:d6:a5:6b:a0:f6:aa:23:8f:87:
79:5d:ba:a9:b5:d8:df:bb:5c:b0:ce:92:9a:5b:33:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:C4:7F:6B:97:BA:D3:7F:60:41:4F:25:7C:91:19:43:1F:B8:ED
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeDEf2uXutN_YEFPJXyRGUMfuO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:66ce::/48
Signature Algorithm: sha256WithRSAEncryption
59:2e:74:2a:bb:a7:96:e5:ba:df:8c:e1:d5:80:ab:68:5b:26:
f6:b0:94:fc:e7:1c:23:df:a1:b8:df:94:dc:fe:47:1b:1e:3b:
1e:67:a3:41:d7:8c:67:a3:9b:96:18:89:a4:b2:fd:08:11:65:
95:42:75:b3:19:fb:8f:77:31:31:84:69:bc:54:e2:05:7c:4a:
1a:89:29:4d:4f:4a:1a:58:be:c5:ac:a2:aa:d6:ae:66:bd:74:
4f:76:4b:ff:1e:26:d2:0d:ed:54:2b:6c:3a:6d:ea:7f:ac:31:
6c:01:4a:8a:8d:8b:45:36:77:db:ef:43:b6:d8:05:d7:07:48:
44:66:47:c3:10:ba:a5:7e:b2:14:46:11:3e:8b:b1:6a:9f:08:
e4:86:57:53:40:ea:a3:8b:5c:53:94:58:e6:21:9f:08:ac:9e:
9c:fc:86:4a:b7:02:66:cf:8b:9b:d4:70:3c:cf:40:68:a0:d0:
41:e2:98:48:7a:c4:3c:1a:28:bf:5c:e0:fa:f0:d7:1b:2e:0e:
25:da:67:75:22:f7:10:42:0d:65:33:8f:af:a0:ab:60:b8:ba:
ae:50:70:60:46:01:9a:19:e3:05:98:a4:07:3e:0e:2e:67:92:
3c:14:cf:31:be:08:89:93:6e:2b:ad:41:2d:19:ac:ab:9c:e6:
f0:bb:f8:44
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZi4QyktnVWZGm0kooYTQ5ZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwODE3MTM0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGUwYzQ3ZjZiOTdiYWQzN2Y2MDQxNGYyNTdjOTExOTQzMWZiOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xA6sPm5qzFpiPxZOHbQv3n7ymZl
fsi98T7yyU0ZmRAW+Zn0O8guA5/7U5cTBnGtxq16QHTjktqcNg9rJovsqTw+Yr+0
bnSGMSDeZu+55keqXRAzh9elYFvwVuNDQPMnU+4qn4jyoZI80LqtuJ41+6hiETIv
hwASY2PM7yZlN/p5HlFctiRF6JpQENhIQ29/lZkCFw8/vMkT0eSeFKoh8NtvOVlI
eV8TCCBBItUSdaE4PMM6vtmWTyzgb3uVuQqGNl9oeCavAX+PoGMzcPrPrCYhJBCt
NjTVpNr1T4n0u76ddGWw813WpWug9qojj4d5Xbqptdjfu1ywzpKaWzM6xQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB3gxH9rl7rTf2BBTyV8kRlDH7jtMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSGVERWYydVh1dE5fWUVGUEpYeVJHVU1mdU8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMxmbO
MA0GCSqGSIb3DQEBCwUAA4IBAQBZLnQqu6eW5brfjOHVgKtoWyb2sJT85xwj36G4
35Tc/kcbHjseZ6NB14xno5uWGImksv0IEWWVQnWzGfuPdzExhGm8VOIFfEoaiSlN
T0oaWL7FrKKq1q5mvXRPdkv/HibSDe1UK2w6bep/rDFsAUqKjYtFNnfb70O22AXX
B0hEZkfDELqlfrIURhE+i7FqnwjkhldTQOqji1xTlFjmIZ8IrJ6c/IZKtwJmz4ub
1HA8z0BooNBB4phIesQ8Gii/XOD68NcbLg4l2md1IvcQQg1lM4+voKtguLquUHBg
RgGaGeMFmKQHPg4uZ5I8FM8xvgiJk24rrUEtGayrnObwu/hE
-----END CERTIFICATE-----
Generated at Thu Aug 21 08:30:15 2025 by rpki-client