Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yzdw13ERngLxMH4RxKJtVWevaSU.roa
File: Yzdw13ERngLxMH4RxKJtVWevaSU.roa (raw, json)
Hash identifier: LijRADMKjY/qGHhD6e5k7aUbcxLJEFQKhjAq+M5gsfc=
Subject key identifier: 63:37:70:D7:71:11:9E:02:F1:30:7E:11:C4:A2:6D:55:67:AF:69:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198C4876ABB73BDC61688C9A8178B7AA72F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yzdw13ERngLxMH4RxKJtVWevaSU.roa
Signing time: Tue 19 Aug 2025 22:51:05 +0000
ROA not before: Tue 19 Aug 2025 22:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202256
IP address blocks: 2a06:de01:800::/38 maxlen: 48
2a06:de02:400::/38 maxlen: 48
2a0e:97c7:400::/38 maxlen: 48
2a10:ccc1:400::/38 maxlen: 48
2a10:ccc6:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c4:87:6a:bb:73:bd:c6:16:88:c9:a8:17:8b:7a:a7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 19 22:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633770d771119e02f1307e11c4a26d5567af6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:5f:f8:33:af:e3:33:28:3f:6f:fe:f4:db:
0b:59:28:1c:0d:51:d2:56:b3:e1:a0:57:1d:33:a2:
51:d3:ce:b7:3a:85:d4:5a:1a:ca:39:d7:c1:5a:f6:
50:1d:03:7a:3e:e6:ee:06:b4:37:2a:df:2e:7b:d5:
1d:da:98:38:88:2d:ff:9f:c8:d3:db:ff:95:64:bc:
aa:e9:94:40:26:18:63:21:d9:fe:99:b0:43:ae:37:
0f:1e:a1:82:65:bc:9d:d5:2d:bc:ca:0e:72:c7:47:
46:21:b0:1d:23:9d:ef:d4:d0:16:ae:4e:f3:67:09:
f3:0f:f4:33:73:cf:8e:a0:ad:4d:a2:ab:1a:14:2c:
d7:66:f0:e5:40:27:dc:52:fc:d3:5b:69:c3:f0:10:
a4:c5:e3:ec:e7:b5:95:17:66:bb:d6:19:35:0b:8b:
a8:c7:a1:0e:67:a9:3a:14:f7:47:ad:97:b2:f8:29:
fd:c0:b0:25:1d:ef:46:d6:ec:ed:64:9e:f4:17:ac:
8f:67:88:07:e2:c2:e9:b9:31:67:fb:34:fc:8e:fa:
f1:97:eb:e9:40:08:d2:da:35:bd:e0:2a:71:2c:f9:
47:32:80:70:eb:3d:1a:d7:76:55:01:e6:43:b3:4f:
39:56:de:bc:99:2f:a3:12:e8:5f:a9:86:01:71:75:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:70:D7:71:11:9E:02:F1:30:7E:11:C4:A2:6D:55:67:AF:69:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Yzdw13ERngLxMH4RxKJtVWevaSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a06:de02:400::/38
2a0e:97c7:400::/38
2a10:ccc1:400::/38
2a10:ccc6:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:18:af:40:14:b9:ab:36:4d:da:94:80:2b:82:9c:fb:e0:47:
d2:dd:34:65:14:9b:11:60:d1:f7:bc:1b:ae:fb:c2:31:bd:45:
e0:1b:b6:27:24:16:61:16:a0:08:0e:bc:b2:ec:fd:16:98:48:
fc:d6:b1:6c:1d:19:3d:77:c1:c9:9f:47:1c:19:71:0a:4c:53:
c9:44:44:9d:e7:4b:ee:23:b2:59:7f:2f:14:01:89:05:0e:2c:
c8:be:10:a7:f1:ab:d9:7e:9c:59:98:1b:f7:b2:e3:57:b5:dd:
8d:6b:85:9c:95:17:d3:1f:68:cd:3a:06:7d:f1:7f:8f:27:3c:
fc:d0:fb:63:d2:b3:10:d2:8e:44:64:0a:55:44:67:e9:c5:2d:
75:31:7c:f6:00:e8:24:45:31:a8:d3:cb:68:ca:f6:75:95:65:
22:35:23:8b:7c:82:03:5a:19:2d:1f:33:bf:c1:bc:45:9f:4e:
44:95:79:cb:4d:c8:0b:aa:25:c4:35:a9:b2:98:85:9f:c1:13:
5f:d2:8a:9d:03:6c:48:e2:db:eb:b3:e9:a2:f4:e0:47:c6:d9:
11:fc:36:6a:d9:52:55:00:89:5d:e1:11:bb:14:92:1f:bf:68:
43:7f:73:19:36:c9:3f:6b:d4:03:74:34:7c:e0:ac:eb:36:5b:
a3:83:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:30:10 2025 by rpki-client