Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsDJpkZjCUQgLFiGafP7SFz-JaM.roa
File: NsDJpkZjCUQgLFiGafP7SFz-JaM.roa (raw, json)
Hash identifier: I7Mhpqm6Fr/vDy4pCrgGJe8DECMcJMmbSpUJ89tIgsY=
Subject key identifier: 36:C0:C9:A6:46:63:09:44:20:2C:58:86:69:F3:FB:48:5C:FE:25:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198B84327C3E110421A05233920C503A770
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsDJpkZjCUQgLFiGafP7SFz-JaM.roa
Signing time: Sun 17 Aug 2025 13:41:05 +0000
ROA not before: Sun 17 Aug 2025 13:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207529
IP address blocks: 2a10:ccc6:66ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:43:27:c3:e1:10:42:1a:05:23:39:20:c5:03:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 17 13:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c0c9a646630944202c588669f3fb485cfe25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:5a:b7:ba:d1:4b:dd:65:31:97:78:94:96:
46:d8:e4:50:3c:1a:05:02:49:8b:27:60:ab:b3:91:
70:36:7e:07:24:13:94:3f:ce:41:b0:96:af:42:c4:
61:a0:ed:dd:9b:2e:2d:a5:1d:0c:e7:b3:48:0a:12:
48:e0:11:9f:5a:65:05:6b:2d:ed:de:a3:c3:37:14:
41:53:48:5e:19:79:a5:fa:28:1a:5b:fb:56:18:48:
03:33:a9:bd:8f:87:c5:fc:b0:09:2c:02:08:23:26:
34:21:96:22:52:46:74:d5:8b:72:a0:7d:69:0a:f3:
42:aa:a5:7f:15:8d:20:41:48:50:60:1b:3e:f2:38:
4e:46:85:e7:3e:fb:48:87:40:7c:34:68:8a:f5:0d:
ce:a7:d6:0e:be:4e:22:98:c9:c7:54:95:4f:67:58:
90:1f:96:78:ec:c3:34:e9:44:3a:b4:9c:86:83:9d:
40:a8:79:45:29:c7:39:e8:e3:3e:4d:55:d6:32:4c:
fc:9c:da:90:ba:f0:9f:a3:9d:89:22:3a:bd:90:f4:
db:ba:46:b6:9b:e3:c3:fc:be:20:e4:89:7b:6a:18:
8d:4e:71:4e:ca:68:6f:ce:25:35:e3:4d:50:ad:6a:
c4:7e:1b:5c:ab:4d:91:73:2c:bf:9e:7a:18:96:9d:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:C9:A6:46:63:09:44:20:2C:58:86:69:F3:FB:48:5C:FE:25:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NsDJpkZjCUQgLFiGafP7SFz-JaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:66ce::/48
Signature Algorithm: sha256WithRSAEncryption
62:5d:98:c4:ea:0d:f3:ad:82:77:ab:da:cf:44:af:e8:a0:f7:
dd:0f:c7:98:e2:52:39:7a:d3:34:e8:63:ed:90:83:5b:ca:c3:
90:08:a7:fb:2b:5f:5c:d5:f4:c8:e8:5f:43:c1:bd:3e:6c:14:
4a:b3:58:d1:d1:48:c8:52:3f:86:36:24:e0:e5:8f:4d:cb:92:
10:45:16:f3:41:58:de:c6:a0:72:a3:88:d5:ee:a9:65:6f:91:
bf:9c:dc:76:4a:7e:29:d9:41:e1:b6:3e:1f:5e:a7:c8:f6:7e:
fb:4e:e3:3c:a2:02:8b:ed:c7:21:4b:e3:2e:68:a5:2c:37:8b:
c0:23:6e:19:fe:98:2d:3f:c3:b2:eb:65:ef:da:33:8e:e4:96:
6f:7f:89:c5:b4:56:8c:48:49:9a:86:8f:1f:4b:bc:67:d2:3f:
5d:db:d1:7f:cd:0a:6a:05:bd:4b:31:11:f4:db:9b:d1:4a:a1:
32:0e:c6:15:af:cb:92:d1:3c:99:f7:da:db:73:0a:05:79:47:
81:d8:8c:19:b5:9d:d7:6e:de:83:ac:b6:84:8f:52:32:38:1d:
78:c1:22:d4:57:bb:3f:51:29:0c:9c:ed:ac:39:48:79:1f:78:
20:22:4f:ab:eb:94:b8:18:8d:2e:aa:71:50:7b:57:31:30:f8:
f7:7d:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:26:00 2025 by rpki-client