Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/umrsylrtBho53quZUPw9Wvkdy6c.roa
File: umrsylrtBho53quZUPw9Wvkdy6c.roa (raw, json)
Hash identifier: pTnA2blmXpU+wgl29KSBpSdw9G96ngyWQSOiPtFeF/E=
Subject key identifier: BA:6A:EC:CA:5A:ED:06:1A:39:DE:AB:99:50:FC:3D:5A:F9:1D:CB:A7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01992B86E8F2F1FA08AAB4485E75DA1FFAE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/umrsylrtBho53quZUPw9Wvkdy6c.roa
Signing time: Mon 08 Sep 2025 22:51:25 +0000
ROA not before: Mon 08 Sep 2025 22:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49922
IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:86:e8:f2:f1:fa:08:aa:b4:48:5e:75:da:1f:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 8 22:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba6aecca5aed061a39deab9950fc3d5af91dcba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:7d:07:c0:e9:51:a3:45:39:23:32:60:7c:
84:51:df:57:fe:01:13:02:8c:6d:58:89:f7:14:84:
67:4e:78:52:c5:e1:d6:5c:ec:1e:95:33:f4:76:f5:
ed:a8:77:ee:f1:8a:a9:18:41:c0:45:86:00:ea:27:
eb:33:7d:9a:a7:4c:42:b9:e8:2a:d1:91:57:72:a4:
df:33:01:8d:6d:5a:37:b0:b2:35:65:d0:77:96:2e:
b1:60:de:72:41:bd:c5:7e:5a:61:58:45:f6:9d:70:
f6:e3:fe:8b:59:06:b3:b4:ad:2e:7d:bc:42:8d:1e:
6a:ab:a5:22:90:7d:1f:9e:ae:56:2e:04:31:ac:23:
b4:67:bd:51:ff:75:39:f0:7d:20:eb:b7:5f:dc:48:
41:4b:aa:95:21:77:10:3d:57:57:1e:be:44:1f:7c:
95:ac:aa:e5:13:d6:6e:97:22:8e:f1:d9:09:62:71:
cb:81:76:a1:33:cf:c8:e4:d3:51:a0:b5:46:7a:a5:
9b:67:6b:ad:e4:ed:ed:03:71:47:0d:ab:98:6c:36:
47:66:86:b8:d9:cd:49:0d:40:44:d6:97:08:b9:42:
35:22:4d:bf:f2:d8:4c:09:2a:6e:1a:e3:f0:a3:65:
66:b4:e2:c1:fd:e9:3e:9c:ac:a1:76:a8:b2:2b:0c:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:EC:CA:5A:ED:06:1A:39:DE:AB:99:50:FC:3D:5A:F9:1D:CB:A7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/umrsylrtBho53quZUPw9Wvkdy6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b80::/44
Signature Algorithm: sha256WithRSAEncryption
42:e1:cd:0b:3a:34:b9:97:17:92:54:70:c6:b6:5f:c7:67:6c:
3c:e9:dd:04:a1:bb:6a:6d:dc:78:cb:40:f0:5c:20:f9:38:61:
4b:3d:41:1a:69:44:7d:82:ac:df:a7:9f:31:2c:b2:14:ff:58:
d8:9d:05:7b:c4:5d:4e:81:aa:1c:e3:46:a3:97:ec:df:48:7f:
1b:bc:b1:8b:71:58:ab:f7:13:66:aa:0d:9a:7a:d8:26:1f:c4:
67:18:00:d4:fb:f6:1b:bb:a2:2f:b1:87:b4:45:2e:f2:0a:86:
56:6d:af:6f:c7:af:db:58:ed:7e:5e:f0:cc:32:80:e9:80:bb:
f2:60:8d:f0:2c:68:a1:55:59:b0:16:88:a0:9c:9a:c4:4e:44:
31:04:ae:19:b8:e6:9c:94:2a:3d:5a:f3:ec:56:04:85:b2:ca:
04:5e:7c:30:f6:fd:fa:9f:7d:a6:af:eb:4d:c7:0c:11:b4:8e:
a4:79:76:ab:96:69:96:ac:71:ac:aa:d2:17:ae:b6:94:45:ea:
63:fe:25:09:df:3d:9d:29:9c:85:17:c3:c5:10:d8:fa:67:f5:
86:1a:7f:22:f0:b2:eb:e6:7c:f7:ad:e9:dc:85:73:43:40:df:
7d:4a:d2:33:05:4e:f2:93:f4:18:dc:5a:c6:1b:b2:92:99:ee:
65:40:ff:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 23:29:30 2025 by rpki-client