Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Necoluml58z61jESNeKFC8Yfs1I.roa
File: Necoluml58z61jESNeKFC8Yfs1I.roa (raw, json)
Hash identifier: gWIyRII8eJT+Yz7bF73SG2HCopGEB+aQ2bRPHFauThc=
Subject key identifier: 35:E7:28:96:E9:A5:E7:CC:FA:D6:31:12:35:E2:85:0B:C6:1F:B3:52
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A10926FECD54B64B212A17C5196725D76
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Necoluml58z61jESNeKFC8Yfs1I.roa
Signing time: Thu 23 Oct 2025 10:17:03 +0000
ROA not before: Thu 23 Oct 2025 10:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 2a10:ccc0:100::/44 maxlen: 48
2a10:ccc0:100::/48 maxlen: 48
2a10:ccc0:101::/48 maxlen: 48
2a10:ccc0:102::/48 maxlen: 48
2a10:ccc0:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:92:6f:ec:d5:4b:64:b2:12:a1:7c:51:96:72:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 23 10:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e72896e9a5e7ccfad6311235e2850bc61fb352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:c7:bd:94:da:c4:2b:41:d8:6b:c4:b8:c7:
b1:b3:34:48:0d:75:63:c2:8e:21:08:8b:77:c3:11:
9b:7c:9c:71:14:a8:0e:61:12:a2:02:2b:93:ce:80:
5f:8d:a2:2a:b6:5b:bb:f4:90:aa:39:9d:7e:c6:70:
88:e6:60:a0:18:89:7a:9c:ba:40:b7:0c:7e:f3:f5:
c5:0d:64:28:81:af:4b:61:7b:94:ec:c2:9c:16:d7:
16:a6:45:1d:0f:96:0d:91:95:35:8e:9d:ae:1e:55:
19:db:db:b5:f2:86:0c:db:68:b9:7a:90:7b:d2:8b:
f6:61:77:84:5b:f4:cc:f6:d2:24:1f:74:3b:57:4f:
28:df:56:aa:9c:cb:d6:8a:dd:bf:0f:fc:b8:08:95:
bd:e7:c9:03:33:5b:67:ef:7c:8b:92:41:92:41:be:
0c:25:bb:d9:df:4b:28:50:29:6e:d4:76:51:87:ae:
dc:1b:13:62:f5:94:0a:fb:76:87:94:06:bf:01:a6:
0e:2e:48:20:e8:64:87:7b:1b:f5:af:eb:19:5f:46:
eb:02:7c:71:ab:1d:b7:90:b1:80:58:21:e6:d2:0a:
3e:5e:f5:c6:c5:08:87:29:89:d5:76:47:19:18:ad:
47:d7:30:11:90:16:88:95:51:10:db:ac:a7:b7:d8:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E7:28:96:E9:A5:E7:CC:FA:D6:31:12:35:E2:85:0B:C6:1F:B3:52
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Necoluml58z61jESNeKFC8Yfs1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:100::/44
Signature Algorithm: sha256WithRSAEncryption
ae:e1:81:08:db:db:0e:f9:14:5f:17:6f:67:bd:53:d5:fb:b2:
91:94:3e:36:78:0d:f9:f1:3c:fc:44:38:ef:b5:a9:ac:d2:46:
b3:b5:ba:cf:06:1a:60:39:df:ea:08:75:ae:ca:c8:ae:ff:10:
92:97:69:02:67:81:8b:90:29:46:3b:04:80:d9:44:c0:b1:af:
f9:a3:34:f7:81:5c:05:96:13:11:45:64:1a:22:3b:f8:23:47:
ac:65:39:e6:80:34:d7:f9:56:57:9b:ff:99:36:3b:46:4b:ba:
7c:fd:48:40:31:c4:36:be:e8:86:18:1d:91:c8:dc:90:90:a5:
b7:63:e7:21:53:0a:4b:22:63:01:bb:f5:d2:c9:71:58:32:7a:
27:3b:ef:95:d0:95:76:69:c2:d7:32:0f:77:30:ed:df:6d:10:
e9:da:12:48:f9:3a:77:fe:e5:37:db:f7:53:6b:70:a4:9a:26:
43:80:8c:d2:58:09:97:04:9d:d7:dd:16:01:59:c3:6b:9f:83:
40:a4:2d:fa:e7:4a:84:99:18:01:60:c2:83:c9:db:99:d4:8d:
71:e8:c2:4d:39:25:ac:d1:a5:9c:16:4b:44:3c:5c:85:40:d4:
58:6e:a3:ca:45:2f:89:5a:a7:17:cb:19:66:d0:9a:a8:0a:6b:
90:53:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:45:05 2025 by rpki-client