Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cYO09CrvEzfs9-P4lyV9ZxOOiSg.roa
File: cYO09CrvEzfs9-P4lyV9ZxOOiSg.roa (raw, json)
Hash identifier: tpTJVEgEF/ZrzC6s1e3zD9MmYDQSMA+V25+UR3n4FQc=
Subject key identifier: 71:83:B4:F4:2A:EF:13:37:EC:F7:E3:F8:97:25:7D:67:13:8E:89:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198BF610E34BBB4BEC1FA3E90FF63456858
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cYO09CrvEzfs9-P4lyV9ZxOOiSg.roa
Signing time: Mon 18 Aug 2025 22:51:05 +0000
ROA not before: Mon 18 Aug 2025 22:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151633
IP address blocks: 2a06:de00:60::/48 maxlen: 48
2a06:de00:61::/48 maxlen: 48
2a06:de00:62::/48 maxlen: 48
2a06:de00:63::/48 maxlen: 48
2a06:de00:64::/48 maxlen: 48
2a06:de00:65::/48 maxlen: 48
2a06:de00:66::/48 maxlen: 48
2a06:de00:67::/48 maxlen: 48
2a06:de00:68::/48 maxlen: 48
2a06:de00:69::/48 maxlen: 48
2a06:de00:6a::/48 maxlen: 48
2a06:de00:6b::/48 maxlen: 48
2a06:de00:6c::/48 maxlen: 48
2a06:de00:6d::/48 maxlen: 48
2a06:de00:6e::/48 maxlen: 48
2a06:de00:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:61:0e:34:bb:b4:be:c1:fa:3e:90:ff:63:45:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 18 22:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7183b4f42aef1337ecf7e3f897257d67138e8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:f1:9e:08:80:ac:87:72:11:e5:69:0b:bb:
9e:da:43:ab:5b:be:93:f7:34:ba:3b:8c:7c:36:8d:
f2:ed:56:5a:28:c2:f3:96:30:66:d0:9d:81:dd:16:
48:ab:ef:a8:c9:f3:79:98:f2:6b:67:90:d4:31:9a:
eb:d6:cb:d0:5e:e3:6e:08:58:97:c4:aa:05:39:17:
f9:82:38:b3:ac:7c:d6:34:db:96:5a:47:02:29:ce:
d0:e5:eb:3b:f9:40:4c:70:04:f8:af:23:e1:2c:d6:
5b:c9:a8:d3:07:cf:39:30:47:0a:54:d6:05:ef:68:
04:42:8b:77:90:89:62:9f:32:58:bf:c6:c8:61:ed:
b7:6e:cb:db:60:c3:ef:ad:15:2b:f5:64:61:a4:95:
10:9c:db:f5:11:e9:8c:21:a4:d3:ec:af:6e:1d:1a:
79:eb:7a:9c:7e:9f:3f:7b:2c:45:56:67:1d:0b:41:
f1:49:e4:bc:1c:59:a4:17:dd:fd:70:7c:21:33:20:
b1:76:cd:65:60:7f:92:06:33:3b:eb:83:59:dd:41:
4a:b3:c0:67:01:6a:be:71:d1:34:a3:0d:f8:b7:3d:
35:b4:60:87:30:48:83:85:fa:f1:cd:72:01:d1:f6:
ce:bc:f8:63:7e:a8:92:ad:f1:7e:16:72:12:7d:fe:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:B4:F4:2A:EF:13:37:EC:F7:E3:F8:97:25:7D:67:13:8E:89:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cYO09CrvEzfs9-P4lyV9ZxOOiSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:60::/44
Signature Algorithm: sha256WithRSAEncryption
ab:68:e9:b9:0e:5f:63:be:6d:76:f5:d7:49:d6:05:17:1b:e0:
c8:ec:16:91:2b:49:cd:fd:9f:a5:ca:4c:e4:65:14:60:79:aa:
c2:25:1a:f0:c8:ff:56:39:ae:7d:7b:98:08:4c:9a:63:b6:4f:
75:4f:3d:19:ac:5f:a4:9f:a8:94:42:67:9e:20:00:1c:88:3c:
9e:9f:ba:31:7b:ce:ee:4c:03:65:92:bb:44:10:34:98:de:0b:
b8:5b:41:08:8d:36:60:dd:f5:04:28:89:e1:96:da:2e:9f:79:
69:b6:2f:63:89:1f:a1:8a:aa:c0:b3:7f:d0:c0:ce:96:ee:22:
4d:d5:d1:93:d5:7b:73:7f:d2:f9:08:a4:07:48:48:6e:c7:c8:
1d:b2:af:36:0f:98:b0:95:0a:8c:c4:49:3e:76:18:48:50:f2:
78:c7:ae:68:7d:f7:c2:e6:2a:04:18:c2:41:46:ad:28:fb:a4:
e1:8b:23:9e:37:b7:2b:4e:d3:96:85:c9:d9:99:f9:43:c1:2b:
02:35:ba:4a:ae:4e:d5:b3:d7:d3:7a:e8:6a:6d:f6:52:c0:71:
01:5b:9b:c8:b0:ad:7b:27:6a:aa:2f:80:7c:ba:00:30:34:59:
9b:a8:1c:ed:0a:45:83:af:d7:9c:c4:4b:2b:fb:ba:51:22:b4:
e2:9b:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:24:22 2025 by rpki-client