Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hfjstmu6yZ983Iia3up0dJfNANI.roa
File: hfjstmu6yZ983Iia3up0dJfNANI.roa (raw, json)
Hash identifier: gxGjsWuKXrLNXElDOEufPBNcOH1sGczV+retJVLcV9c=
Subject key identifier: 85:F8:EC:B6:6B:BA:C9:9F:7C:DC:88:9A:DE:EA:74:74:97:CD:00:D2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198C9A3B4BC9BCF04BDAD33BA263653FCF8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hfjstmu6yZ983Iia3up0dJfNANI.roa
Signing time: Wed 20 Aug 2025 22:40:05 +0000
ROA not before: Wed 20 Aug 2025 22:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211729
IP address blocks: 2a10:ccc0:d00::/44 maxlen: 48
2a10:ccc6:66c0::/44 maxlen: 48
2a10:ccc6:66ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:a3:b4:bc:9b:cf:04:bd:ad:33:ba:26:36:53:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 20 22:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f8ecb66bbac99f7cdc889adeea747497cd00d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:61:96:b1:27:e3:49:32:af:84:91:cb:62:
ed:c3:0c:01:1d:6b:32:20:f8:92:8b:b4:ed:37:98:
58:fa:4e:c2:6e:b6:c6:fe:84:2a:e6:a6:a7:09:52:
1c:1d:d1:de:9b:db:d6:1f:02:62:86:82:a7:9e:c8:
8a:0c:88:88:d2:c6:0c:ea:30:15:0b:0a:82:39:ec:
04:46:83:54:1b:ad:c6:6b:53:3b:f2:d3:b0:57:09:
39:da:0e:1e:7e:03:83:70:d8:6d:67:f4:80:a2:9c:
b0:40:a4:78:1c:45:9d:63:e4:f9:c7:63:ed:9f:89:
db:b4:fe:2f:0b:a5:e0:7d:06:a6:30:80:fd:21:c1:
40:01:f1:ca:0a:3f:2d:55:79:15:53:48:57:3c:af:
6c:17:fe:c5:80:f2:17:f6:d3:4b:fb:a2:60:c0:da:
1c:6e:70:3d:50:7e:0e:9f:a9:eb:70:d8:fa:8c:c2:
8b:37:e5:f8:28:1e:96:42:4c:b8:43:fe:02:db:ed:
38:9b:8c:b5:c4:1c:e3:72:03:05:c7:9e:21:de:25:
7b:52:e9:81:5a:27:2c:4b:51:bb:ac:d6:75:2f:62:
34:d5:76:aa:41:90:bd:a2:1b:e8:99:bc:97:94:c2:
6c:11:ed:b0:bd:0b:f4:36:63:5d:b7:36:fe:11:7f:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:EC:B6:6B:BA:C9:9F:7C:DC:88:9A:DE:EA:74:74:97:CD:00:D2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hfjstmu6yZ983Iia3up0dJfNANI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:d00::/44
2a10:ccc6:66c0::/44
Signature Algorithm: sha256WithRSAEncryption
a4:86:96:ec:ab:7e:fb:15:e9:14:2c:3d:cf:e1:02:1d:b5:e8:
a2:35:b6:dc:50:cb:43:c8:08:a9:10:be:8b:23:72:e0:2c:64:
17:e0:c8:31:6d:bb:f3:31:fb:50:8d:20:46:b2:d8:14:d6:f2:
c8:63:01:18:c7:7a:2e:42:11:54:46:b1:5a:22:6d:2e:ba:95:
4c:82:13:a7:73:f4:7b:37:4e:3e:0e:be:65:3a:3d:0d:19:37:
42:3b:cd:39:9a:b2:b1:e5:35:5b:a7:7b:7a:d7:23:2c:84:dc:
50:b4:55:7c:24:3e:b0:47:13:cc:d8:eb:b3:fe:1d:d3:c4:91:
8c:59:36:8a:57:f8:56:2f:22:3f:bb:4b:cc:98:98:6d:60:40:
ee:a1:fa:c8:e8:5c:ea:fd:f0:b3:70:be:97:fc:b2:79:1c:18:
df:ad:54:99:96:ff:ab:8b:e5:8b:06:cd:a0:3e:d3:fa:35:cf:
6d:df:9c:e1:ef:58:f4:2d:e2:7a:c7:b2:c8:6c:27:9c:9c:2f:
12:c5:99:21:c0:d8:86:67:db:cc:04:9e:e1:ec:aa:82:63:a2:
bf:80:f6:71:67:c6:9f:42:cb:4d:69:85:04:c3:4f:e4:d4:aa:
8e:3b:9a:0e:08:09:31:ad:8f:d7:7c:b8:a6:42:24:df:76:d1:
cc:f5:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:26:02 2025 by rpki-client