Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kq7WFfrLC5p4s6M9HOuycbFcXe4.roa
File: Kq7WFfrLC5p4s6M9HOuycbFcXe4.roa (raw, json)
Hash identifier: ZZ1wGb6eI20EPXSnhltCme48rx1QiadfjY4ySt2+tl0=
Subject key identifier: 2A:AE:D6:15:FA:CB:0B:9A:78:B3:A3:3D:1C:EB:B2:71:B1:5C:5D:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A76CA92EDF07FBC110B1E6C626D5EAF9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kq7WFfrLC5p4s6M9HOuycbFcXe4.roa
Signing time: Wed 12 Nov 2025 06:39:38 +0000
ROA not before: Wed 12 Nov 2025 06:39:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59881
IP address blocks: 193.58.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:76:ca:92:ed:f0:7f:bc:11:0b:1e:6c:62:6d:5e:af:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 12 06:39:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aaed615facb0b9a78b3a33d1cebb271b15c5dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:60:32:c6:f1:8d:3e:f4:c6:d0:7c:5c:8f:
04:0d:ce:e7:8e:c0:eb:2f:87:4d:1c:21:51:da:51:
77:ac:eb:1e:41:11:e9:4c:3c:2e:5b:a5:b0:17:f0:
bc:ef:60:7c:e7:12:6c:1e:44:24:18:09:02:4c:f1:
c2:04:a6:3b:78:28:17:57:7d:24:02:e5:92:0c:45:
05:02:77:dd:7c:77:d9:08:00:c8:b4:6f:c5:18:98:
fb:94:9c:59:bd:da:41:75:4b:23:91:cd:8f:d1:c7:
50:23:cd:26:63:09:b0:bf:82:3f:e8:da:fe:c0:20:
f3:12:a3:ab:47:2e:34:f4:8d:ae:bf:55:5e:ef:14:
cd:a8:20:bb:91:62:4f:17:4e:3d:d3:f3:43:4f:34:
e8:ad:6e:5e:47:bd:7d:1a:c3:29:c4:d8:cf:6b:92:
4d:2f:19:b6:36:a7:71:f3:fc:4c:77:df:4e:6c:b2:
a1:37:45:7a:bd:d6:4f:ed:82:f2:76:4e:32:40:dd:
8f:e3:fb:93:2e:ac:a1:96:ad:37:cd:ed:9e:45:23:
2a:fb:cd:b3:32:2a:fe:6e:d5:7d:17:46:84:f5:c5:
c2:a9:54:84:77:dd:94:64:d9:0d:8f:70:b3:da:e1:
d7:34:78:a9:26:85:b1:47:13:98:fe:cf:3e:3e:50:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:D6:15:FA:CB:0B:9A:78:B3:A3:3D:1C:EB:B2:71:B1:5C:5D:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kq7WFfrLC5p4s6M9HOuycbFcXe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.239.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8e:16:73:a0:58:06:f6:7b:10:a9:a9:65:d2:73:25:01:df:
09:72:79:98:28:d9:b1:9e:11:c7:e3:16:dd:fa:85:d2:ba:6f:
e6:86:32:ae:ab:62:6f:4f:6e:93:1e:18:20:c8:44:44:66:34:
f5:ea:c7:0a:72:dd:97:6f:32:98:ae:74:cc:1c:df:3e:65:3b:
83:0b:46:5e:4d:d7:b3:49:fa:0a:cd:6d:fb:e1:b8:61:fc:b4:
29:f5:2f:42:bf:87:97:cf:1a:64:f5:44:b7:5b:16:78:01:7b:
f7:9f:89:6b:b3:65:99:7e:e2:37:35:c0:17:6b:f1:4d:ca:fa:
fc:fe:fd:59:9c:95:eb:7d:fe:40:ca:95:39:59:04:cb:fd:b8:
a7:94:d1:b2:60:88:d0:1a:f0:d6:b4:8b:ad:8c:a7:ef:0b:e8:
30:fc:dd:19:15:e1:e5:ab:2a:24:3b:31:35:38:1e:c2:55:d3:
f8:3b:e5:d8:6f:b3:ab:bf:6a:78:b1:ae:05:e6:0d:31:67:a0:
1a:54:17:d5:31:99:08:c1:17:23:3d:9f:fb:0f:53:a2:1f:cc:
f3:d8:e5:2c:b1:08:7f:92:44:c5:87:c0:12:1f:42:cc:26:ce:
d9:7e:41:d1:33:54:6e:2b:30:04:21:8d:10:56:70:5b:70:64:
3f:bf:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:12:11 2025 by rpki-client