Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m91vBXgqo8Tc8kBumpyclT3B4D8.roa
File: m91vBXgqo8Tc8kBumpyclT3B4D8.roa (raw, json)
Hash identifier: 68FEWWnttBYHJaDdDUygWOB3avzCb8OQXDzuyU3Yd7A=
Subject key identifier: 9B:DD:6F:05:78:2A:A3:C4:DC:F2:40:6E:9A:9C:9C:95:3D:C1:E0:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01995BE19F1A515C6E65F6A2DA899F3231D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m91vBXgqo8Tc8kBumpyclT3B4D8.roa
Signing time: Thu 18 Sep 2025 08:12:16 +0000
ROA not before: Thu 18 Sep 2025 08:12:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:de05:6000::/38 maxlen: 48
2a0e:97c2:dc00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 19:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:e1:9f:1a:51:5c:6e:65:f6:a2:da:89:9f:32:31:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 18 08:12:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bdd6f05782aa3c4dcf2406e9a9c9c953dc1e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:21:88:9b:91:2c:aa:47:85:b2:1c:f6:a1:
96:11:41:37:53:13:39:ad:b4:83:2d:fc:13:f2:54:
27:5c:3f:b1:69:fe:3e:20:fe:ae:41:ad:f4:c1:c3:
b4:45:3d:3d:56:d3:22:c1:36:f8:1b:de:d4:a5:5b:
57:60:d5:14:2d:99:5d:e6:00:77:85:b7:e5:43:ac:
91:a7:ea:eb:50:08:ac:22:da:e8:96:14:c7:76:ed:
fa:83:96:a9:8f:44:19:31:e4:cf:31:d0:fa:01:2e:
8e:5f:25:35:70:77:7e:af:c6:ff:ab:b2:de:3a:c3:
42:c7:12:b6:77:b9:05:c6:41:8b:12:27:0e:07:09:
f1:7f:3d:aa:11:6c:ef:8a:50:b6:5b:85:0d:18:c0:
6a:76:cc:ca:98:60:57:0f:5c:e0:b7:a5:dd:a7:ed:
39:c3:ad:58:69:96:be:17:7c:0e:40:e8:ec:c5:8a:
5f:76:70:65:ae:a9:44:ec:5e:09:3a:12:94:b3:50:
b7:97:dc:e6:5e:f8:23:0e:f4:42:3b:c0:83:c5:e3:
1c:45:ee:90:92:cf:71:e8:a3:5f:c9:f5:36:4b:c1:
e0:fe:c3:a9:fd:4f:89:64:bb:a1:dc:45:e2:47:c2:
fa:bc:8f:7e:ff:16:2b:3a:0e:1e:20:19:e0:0d:2b:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:6F:05:78:2A:A3:C4:DC:F2:40:6E:9A:9C:9C:95:3D:C1:E0:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m91vBXgqo8Tc8kBumpyclT3B4D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de05:6000::/38
2a0e:97c2:dc00::/38
Signature Algorithm: sha256WithRSAEncryption
9c:5e:61:63:dd:ba:dc:ff:36:1d:0b:3b:3d:83:5f:87:27:f6:
7f:7b:fb:b7:33:31:8a:4e:e3:cd:08:ff:9b:38:26:36:82:4a:
76:5e:6e:90:eb:d0:52:ea:a1:e3:79:9e:15:9d:39:9e:32:76:
34:89:8a:62:3e:b3:16:a6:86:6e:36:50:c6:29:d3:72:14:7f:
fe:5d:fb:f7:a3:d9:02:76:2a:f0:a2:ea:ff:fb:37:c9:ab:6b:
af:3f:cd:e4:df:c0:17:09:70:1c:a3:3a:7c:10:29:44:5d:52:
3f:15:d8:93:92:ae:ae:02:e1:84:86:e7:2a:48:19:7b:de:89:
a1:eb:c2:9c:a6:4f:9e:51:03:94:42:32:dd:13:78:12:d5:a7:
9e:b4:55:4d:cc:49:38:d5:c3:d8:07:b4:f9:1c:6e:d4:4e:0d:
74:9a:28:ff:a2:5c:02:e6:54:0a:0d:4a:3a:8c:82:b4:4d:d6:
ef:ae:bc:1d:89:9c:74:b6:9c:96:97:25:bd:cd:d4:3c:b9:ac:
9a:c1:5c:f0:d5:d2:6d:ef:6c:69:be:26:f3:8c:0e:d0:07:59:
db:16:e3:95:66:14:f4:3d:85:b4:56:a6:95:f7:7b:6e:88:3b:
f8:ca:e5:a7:00:a3:38:99:24:99:c1:ea:2a:f9:35:fa:1e:82:
bd:81:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:00 2025 by rpki-client