Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eUvJ_ykH1emvPlTgCX3flV2NdAQ.roa
File: eUvJ_ykH1emvPlTgCX3flV2NdAQ.roa (raw, json)
Hash identifier: CGf8f7MJDeCUth4V9g940XjzKBlzVPoIBaH3VrTNW6A=
Subject key identifier: 79:4B:C9:FF:29:07:D5:E9:AF:3E:54:E0:09:7D:DF:95:5D:8D:74:04
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019A6595F70DCE6C9128356E6568A14A059F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eUvJ_ykH1emvPlTgCX3flV2NdAQ.roa
Signing time: Sat 08 Nov 2025 22:28:38 +0000
ROA not before: Sat 08 Nov 2025 22:28:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
2a10:ccc0:120::/44 maxlen: 48
2a10:ccc0:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:65:95:f7:0d:ce:6c:91:28:35:6e:65:68:a1:4a:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 8 22:28:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794bc9ff2907d5e9af3e54e0097ddf955d8d7404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:99:80:90:6e:f4:2b:23:25:27:b3:ca:dc:
70:b5:d7:93:04:ca:c4:1d:31:67:da:7f:de:ba:0e:
d8:11:cd:59:b6:0e:74:c7:bd:f8:53:78:0c:b9:f1:
6d:2d:51:8f:46:da:d7:67:53:02:a3:3d:ef:e7:a7:
e4:6b:38:c3:41:c0:1a:83:0a:d4:3a:56:99:26:99:
fd:96:f0:2f:0d:e1:54:5c:1e:f4:df:04:4e:06:d5:
1b:8f:14:50:01:94:8c:4d:9f:88:33:fc:62:69:42:
1e:33:d3:37:04:ff:44:83:6e:47:23:b1:7e:ca:27:
3f:89:d4:7b:c6:6b:a1:6d:b7:b1:a7:2e:d4:07:03:
a6:37:7e:16:ba:ca:d1:42:db:53:4c:d7:1c:a0:ae:
cb:0c:82:44:c5:4b:05:61:c1:14:2f:71:4f:93:fd:
08:7c:be:26:bb:64:c4:df:2b:49:13:84:78:87:d7:
17:76:18:a5:11:cd:a3:3b:ce:51:2a:20:20:72:d1:
26:6c:10:18:8e:d3:bc:fd:a3:09:a7:9b:00:28:cb:
f2:5e:9a:9d:4b:47:be:82:af:af:4a:1e:28:cf:ea:
19:bf:03:0b:4f:01:90:ea:47:cf:ae:2a:d2:41:c2:
9b:85:11:a4:4c:c2:38:e7:22:59:d9:36:c0:6e:f2:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:C9:FF:29:07:D5:E9:AF:3E:54:E0:09:7D:DF:95:5D:8D:74:04
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eUvJ_ykH1emvPlTgCX3flV2NdAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
2a10:ccc0:120::/43
Signature Algorithm: sha256WithRSAEncryption
1a:87:ec:7d:ca:5a:8d:16:2b:aa:fa:be:f4:c0:f0:48:8f:83:
d4:36:bd:f4:46:6e:ae:fb:03:7c:8d:0b:d8:1d:d2:9f:d8:bb:
ce:32:f6:53:ef:9d:9c:ce:18:1e:0f:96:4b:4f:ed:ba:40:c4:
6e:93:58:b3:81:a4:9e:22:e0:67:c3:eb:04:9a:bd:c3:ff:10:
17:b1:6e:e4:ff:4d:f3:b3:57:fe:49:80:68:fc:0c:fd:c9:de:
a9:fa:b3:ee:5b:95:44:50:3c:74:6a:6f:c3:1e:a2:05:fc:47:
40:1b:26:e7:e9:d2:10:50:53:3e:87:1e:2e:71:11:9b:98:58:
6a:d1:1e:69:b9:88:78:a6:8e:b9:92:66:07:65:65:a5:5a:46:
1d:17:f7:2f:a0:f6:90:60:91:f8:ee:ac:ce:31:8d:d4:da:80:
27:ec:8c:0d:2b:76:af:d2:bc:64:15:9f:33:0e:f0:43:6a:ae:
59:ae:e2:1e:5e:de:dc:63:2e:c9:1b:49:8e:71:9b:b7:03:de:
a0:b8:ad:e9:98:1f:32:db:72:d4:93:3d:94:2c:9c:72:b7:e8:
8f:eb:1f:aa:38:95:9c:82:8e:5a:70:60:4a:58:e0:4f:77:bc:
fa:79:91:a3:ba:3b:cd:4f:d9:8b:3b:25:80:37:b6:a2:69:66:
5c:94:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:12:33 2025 by rpki-client