Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TvZC_XcyJut-jmYLF_twzETvyUg.roa
File: TvZC_XcyJut-jmYLF_twzETvyUg.roa (raw, json)
Hash identifier: JC5YID62/bALskAiiHaF2uSsJgzSGJRzmTbr78QbOew=
Subject key identifier: 4E:F6:42:FD:77:32:26:EB:7E:8E:66:0B:17:FB:70:CC:44:EF:C9:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019902543CB6D1EB4E40B02787D1EB260234
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TvZC_XcyJut-jmYLF_twzETvyUg.roa
Signing time: Sun 31 Aug 2025 22:51:38 +0000
ROA not before: Sun 31 Aug 2025 22:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211946
IP address blocks: 2a0e:b107:1c31::/48 maxlen: 48
2a0e:b107:1c32::/48 maxlen: 48
2a0e:b107:1c33::/48 maxlen: 48
2a0e:b107:1c34::/48 maxlen: 48
2a0e:b107:1c35::/48 maxlen: 48
2a0e:b107:1c36::/48 maxlen: 48
2a0e:b107:1c37::/48 maxlen: 48
2a0e:b107:1c38::/48 maxlen: 48
2a0e:b107:1c39::/48 maxlen: 48
2a0e:b107:1c3a::/48 maxlen: 48
2a0e:b107:1c3b::/48 maxlen: 48
2a0e:b107:1c3c::/48 maxlen: 48
2a0e:b107:1c3d::/48 maxlen: 48
2a0e:b107:1c3e::/48 maxlen: 48
2a0e:b107:1c3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:02:54:3c:b6:d1:eb:4e:40:b0:27:87:d1:eb:26:02:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 31 22:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef642fd773226eb7e8e660b17fb70cc44efc948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:c0:e6:67:75:86:dc:eb:3b:6d:db:bf:aa:
00:75:b5:10:1d:02:b4:f0:99:59:2a:52:68:a8:a3:
97:c6:f5:fd:f4:9b:8e:2e:cc:0f:24:6f:14:7c:53:
d4:ea:62:ec:c2:be:03:a6:c4:b7:76:c0:b3:8a:08:
2b:b0:ca:66:63:44:7b:86:cd:3a:d4:d7:d5:82:2b:
77:29:1b:0c:e5:a2:3d:29:f3:b2:2f:93:9c:c5:4a:
e7:a3:f6:13:3b:b1:77:13:f8:96:ae:65:90:21:88:
5f:78:93:fa:19:a8:7b:1a:cd:8b:77:bd:28:46:ca:
2c:fa:05:d2:a7:a7:e9:d7:05:0a:cc:7a:b5:79:63:
d0:3a:82:9f:8e:63:11:90:a8:a1:eb:0c:6b:08:e5:
bd:6d:93:cc:0c:40:8b:92:bd:59:e2:48:cb:9c:5c:
5c:6d:3b:5d:c2:5a:31:ee:67:70:e8:7c:bc:4c:5c:
0a:4a:0d:75:74:33:aa:d9:13:ae:3e:83:23:d0:ad:
3e:7f:a9:87:20:2f:62:7e:12:8c:22:08:58:00:e2:
ba:c9:7f:ee:f9:ec:aa:05:be:f3:f9:65:e7:97:1f:
62:f0:fa:62:a5:0e:fc:54:82:0c:9f:15:08:86:79:
eb:36:94:7d:bc:9e:5e:77:1c:ac:ba:59:b1:8d:4c:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:42:FD:77:32:26:EB:7E:8E:66:0B:17:FB:70:CC:44:EF:C9:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TvZC_XcyJut-jmYLF_twzETvyUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c31::-2a0e:b107:1c3f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:2c:79:95:7a:09:7c:2a:7f:6d:cb:95:89:a1:f4:d6:68:77:
11:5e:9f:9f:09:13:62:f7:90:75:61:99:6a:8e:75:11:e5:8a:
9f:7b:e2:9b:4f:70:8c:f4:e0:82:3a:b8:80:a0:87:ce:b9:61:
50:5f:74:29:09:1c:f2:25:b5:4b:bb:0e:22:bf:0b:7d:2f:b2:
9d:95:d0:47:da:ec:28:82:c2:91:8c:34:05:3c:a4:e4:27:fe:
85:48:b1:88:1f:04:b1:e7:ef:0b:d0:84:a2:94:2a:b5:9b:d0:
c1:1b:c1:80:30:dc:56:15:31:c9:c7:6b:19:ae:a3:49:a8:26:
6d:64:45:bf:da:b8:cd:9f:21:9b:0b:cd:fa:c0:2f:c0:df:e5:
f9:e4:96:4a:f0:af:4c:61:99:9f:79:22:d1:00:17:95:98:d1:
02:e2:1f:13:c8:55:d0:a2:6f:87:ef:f5:84:42:70:b2:a3:2f:
bd:6a:50:7c:fa:b0:54:0c:b5:17:32:cb:b5:38:d9:e1:12:91:
4d:4d:31:5d:77:a6:34:8c:c0:64:2d:4e:3e:bd:95:b9:24:c0:
21:00:5b:c0:39:0a:19:0d:a5:55:f3:55:45:ae:e2:d2:c4:c2:
85:c7:38:a5:35:cb:e2:d4:41:7c:a5:8a:ad:1f:14:ab:4c:f2:
42:a9:6c:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 15 12:34:21 2025 by rpki-client