Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QSodvTSu6wiyKk461RGnYo8wnbw.roa
File: QSodvTSu6wiyKk461RGnYo8wnbw.roa (raw, json)
Hash identifier: nQIe/5rB2rHUkuwUF57W01+qXXspsUCgddU5ikQcQT4=
Subject key identifier: 41:2A:1D:BD:34:AE:EB:08:B2:2A:4E:3A:D5:11:A7:62:8F:30:9D:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A1D21C53F4C01D694A877550D37CFEA81
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QSodvTSu6wiyKk461RGnYo8wnbw.roa
Signing time: Sat 25 Oct 2025 20:49:03 +0000
ROA not before: Sat 25 Oct 2025 20:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:b107:27c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:21:c5:3f:4c:01:d6:94:a8:77:55:0d:37:cf:ea:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 25 20:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=412a1dbd34aeeb08b22a4e3ad511a7628f309dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:1f:64:c6:3e:50:a0:fb:22:4a:5e:95:79:
96:7b:0c:ae:f8:fd:20:dc:98:c3:2a:0f:b6:67:4b:
77:41:0a:1c:38:e7:e7:1f:d6:13:9f:de:4f:8b:08:
37:14:f0:9c:e5:c0:b1:1e:87:66:4c:f6:6e:e2:2a:
2d:a4:f1:12:fd:21:f9:8d:d8:ae:1d:5c:87:72:b2:
15:fd:0b:70:66:46:59:f2:ff:2d:88:ab:61:c8:2e:
7d:ea:ea:43:23:00:90:70:05:a8:13:9d:4e:c3:1a:
b1:3c:cb:20:4d:64:e4:87:fa:89:8a:cc:fe:ec:3b:
81:85:50:21:4f:b2:13:94:5f:9f:bc:e1:7c:aa:e4:
9a:fc:5f:73:fc:70:fe:52:89:56:96:95:c5:15:30:
ce:cf:27:4f:1a:e0:9e:06:4a:c3:aa:23:66:8b:d6:
be:ea:dc:d0:e3:12:c1:54:b9:1b:1c:bb:50:ea:3b:
9c:53:f2:dd:16:c4:c9:3b:6f:98:08:df:a7:2a:d5:
72:d3:fc:50:e8:6d:d4:f5:c6:9e:e5:af:ff:6a:61:
0f:ca:55:8f:d3:04:bb:c7:60:d8:03:21:ff:b4:b4:
1f:c0:45:04:93:11:6a:dd:ba:20:cf:c3:ec:10:a9:
5d:cf:58:e1:77:4e:56:87:5a:91:ba:c4:dc:22:5c:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:1D:BD:34:AE:EB:08:B2:2A:4E:3A:D5:11:A7:62:8F:30:9D:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QSodvTSu6wiyKk461RGnYo8wnbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27c7::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1e:83:86:82:94:a3:02:99:e1:b3:64:a2:04:74:84:eb:23:
6f:a2:cd:40:81:7a:a7:92:d5:01:ec:0f:0f:4f:d0:b9:26:00:
d8:6e:23:ab:a7:2e:04:b3:02:24:aa:55:6b:76:2c:b6:64:be:
c9:6c:45:55:d8:bc:90:09:c6:95:9f:ef:27:43:8f:d3:cb:ea:
f4:3b:7d:74:a4:3a:50:1d:8b:32:3d:d5:e8:86:0f:d2:c1:8a:
6f:bb:7b:b9:75:47:26:20:c9:30:10:33:28:66:f3:e1:53:c9:
20:41:97:1c:02:41:c7:f1:cd:d2:37:62:0b:d1:f9:f9:ae:fa:
4e:8b:9f:eb:9e:4c:ef:f1:3d:11:3e:31:95:1e:1a:3b:b7:26:
48:b9:b2:4a:50:ab:f5:70:b2:ea:3d:05:25:02:29:ef:0a:2b:
ae:b0:50:b2:ca:8b:61:d2:07:bc:62:ce:6b:54:9c:9b:90:70:
2b:87:d1:60:56:13:df:6b:09:b8:4b:c0:23:51:01:02:7e:84:
eb:97:5d:6e:e3:1e:4a:7c:c6:29:25:ee:8d:64:96:f5:1a:19:
42:f6:35:0f:04:ac:a9:0b:e0:90:e1:f4:6e:ae:c8:35:00:dd:
d1:1e:86:ff:a7:23:ac:c2:e3:b9:75:b6:89:dc:b2:6b:53:a3:
b2:d5:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 09:50:02 2025 by rpki-client