Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_XeMYJsdYnh-tCroFcN4185Cnog.roa
File: _XeMYJsdYnh-tCroFcN4185Cnog.roa (raw, json)
Hash identifier: lRokho3C6H0/ZD9ixzsLy5RaU6O3IO14SrXQIptAWtQ=
Subject key identifier: FD:77:8C:60:9B:1D:62:78:7E:B4:2A:E8:15:C3:78:D7:CE:42:9E:88
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0197DB5E5A8DBC60030590D91F7FE2FAA640
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_XeMYJsdYnh-tCroFcN4185Cnog.roa
Signing time: Sat 05 Jul 2025 16:14:43 +0000
ROA not before: Sat 05 Jul 2025 16:14:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216112
IP address blocks: 2a0e:97c0:de0::/44 maxlen: 48
2a0e:97c0:de1::/48 maxlen: 48
2a0e:97c0:de2::/48 maxlen: 48
2a0e:97c0:de3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:5e:5a:8d:bc:60:03:05:90:d9:1f:7f:e2:fa:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 5 16:14:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd778c609b1d62787eb42ae815c378d7ce429e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:39:4c:bc:3e:87:d2:cd:1d:8b:46:df:7c:
c6:2d:cf:d6:f3:44:b6:a1:52:e0:03:5f:94:4a:ff:
d4:8d:69:7c:5f:5c:2f:51:45:7b:91:93:70:5b:2c:
fc:0d:2f:61:06:16:ce:3b:aa:f0:02:40:49:f6:6b:
ce:c9:65:89:34:a0:02:a7:34:3c:b7:33:2a:86:5e:
b7:ed:db:80:57:96:1a:95:92:96:6f:ab:67:b6:49:
9a:68:8a:f2:f6:5a:a6:34:22:0a:d1:cf:fa:0a:fc:
35:41:dc:99:31:9c:87:fa:09:1e:b2:40:ca:22:3c:
03:5a:e8:75:a8:a1:49:a1:ea:bb:50:1a:b8:f9:39:
a2:ae:84:17:a3:61:a5:ba:f6:35:35:db:4f:43:55:
b2:cb:89:75:93:e9:e6:19:91:fd:ac:a2:68:36:24:
a7:e7:f5:c5:4b:25:0b:5d:8f:88:c3:83:3a:27:b1:
f5:c8:89:8b:da:01:68:34:df:ff:76:00:bc:20:a5:
9e:e2:9e:10:2d:99:dc:fd:94:e2:94:47:0d:95:cf:
d4:0b:b1:8d:37:8d:5c:8c:8a:4b:89:54:c7:70:29:
ef:9f:52:cc:b6:5b:09:5e:e8:27:60:51:fd:de:70:
ac:cd:e6:f8:f0:d2:46:93:01:a9:b2:c0:99:50:d5:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:8C:60:9B:1D:62:78:7E:B4:2A:E8:15:C3:78:D7:CE:42:9E:88
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_XeMYJsdYnh-tCroFcN4185Cnog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:de0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:84:50:d5:ff:59:90:4c:e7:50:ad:ba:63:e8:62:7f:bb:20:
bc:db:55:7d:83:d5:4c:5f:5a:52:af:f5:44:71:64:f8:de:b3:
51:d3:95:62:b9:b3:a2:6a:71:34:e0:5f:8a:a0:73:c5:7b:9a:
81:f5:62:ce:15:7d:f3:06:54:0d:eb:75:7d:60:ab:7f:97:7b:
80:38:6b:ec:02:04:b3:bb:ed:bd:75:c7:6b:8c:77:25:08:07:
ff:74:65:b0:cb:1a:7f:8b:21:fa:42:d0:f6:4d:1c:a1:56:4e:
d5:d3:06:ff:3c:5d:23:6d:66:fc:51:dd:2a:25:29:3e:fa:d0:
87:2c:45:94:81:68:a3:38:d3:b3:38:9b:dc:fe:30:86:38:3f:
d7:25:ec:f7:d2:b7:9e:50:61:a3:07:01:54:61:e1:f9:09:bd:
af:25:85:82:8b:7b:11:4d:8c:45:5a:cf:4e:5b:7a:67:ef:43:
33:a6:7e:b9:21:32:8e:6f:44:d7:23:22:52:f1:07:1e:85:7b:
b0:01:14:d0:8d:9e:46:ce:ff:82:96:87:4b:fd:78:a6:96:1b:
92:21:30:d5:bd:59:bb:b9:8f:c1:79:27:74:d9:5a:01:08:78:
7a:f4:14:2e:b2:97:30:5e:dc:a3:c9:ff:17:e7:eb:72:d4:ad:
09:e2:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:24:19 2025 by rpki-client