Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Yq6xFNe0p4Z7eyn6iZAdhEk7qu0.roa
File: Yq6xFNe0p4Z7eyn6iZAdhEk7qu0.roa (raw, json)
Hash identifier: c+3k9RalSTwf9I359bxSTvWtjt15+bVPvskVm2IyNWE=
Subject key identifier: 62:AE:B1:14:D7:B4:A7:86:7B:7B:29:FA:89:90:1D:84:49:3B:AA:ED
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01991A248342F43588B9313D8B684B311C27
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Yq6xFNe0p4Z7eyn6iZAdhEk7qu0.roa
Signing time: Fri 05 Sep 2025 13:50:24 +0000
ROA not before: Fri 05 Sep 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 2a12:bec4:1560::/44 maxlen: 44
2a12:bec4:16f0::/44 maxlen: 44
2a12:bec4:1910::/44 maxlen: 44
2a12:bec4:1ab0::/44 maxlen: 44
2a12:bec4:1b10::/44 maxlen: 44
2a12:bec4:1b70::/44 maxlen: 44
2a12:bec4:1c00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:24:83:42:f4:35:88:b9:31:3d:8b:68:4b:31:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 5 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62aeb114d7b4a7867b7b29fa89901d84493baaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:7f:f8:a4:e8:ba:ca:2d:61:ec:64:b8:10:
24:e6:46:6d:39:98:8b:66:90:3c:0e:89:e2:65:0d:
81:3c:eb:8c:c8:ca:21:a8:c6:29:2b:20:13:87:23:
ab:0e:6d:56:27:ba:f3:aa:0d:76:f0:04:64:50:2a:
96:af:4d:9a:8b:20:6d:0e:a5:52:d1:f4:56:77:48:
8f:8b:28:ba:fe:5f:b5:55:d9:bf:41:cd:dd:d6:00:
4f:a4:17:26:5e:b6:d0:12:bb:b9:cb:1b:1c:b8:a9:
97:e2:91:42:46:ed:b6:3b:50:ad:ee:f9:33:49:79:
b0:44:49:9c:d4:9e:25:05:6e:7e:25:1b:28:2e:5c:
22:2f:68:5a:9c:02:51:b4:c7:10:0b:ff:fe:fe:50:
d8:07:c4:1e:05:f3:67:f6:62:03:03:a9:d7:6b:f7:
33:3d:3e:3f:78:de:58:5a:b0:30:f8:16:02:25:8d:
f0:06:f0:19:3c:9d:b6:9a:28:05:64:db:a1:25:d7:
b4:14:ec:af:65:97:4d:45:40:79:03:3b:74:0e:af:
f8:66:51:80:98:c4:f2:0c:c8:7a:54:81:d0:8b:03:
6f:d8:6c:73:b2:d5:61:cd:7e:b6:81:89:46:6f:75:
d2:1c:43:ab:d3:80:c3:13:4c:52:b5:70:7e:5a:20:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:B1:14:D7:B4:A7:86:7B:7B:29:FA:89:90:1D:84:49:3B:AA:ED
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Yq6xFNe0p4Z7eyn6iZAdhEk7qu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1560::/44
2a12:bec4:16f0::/44
2a12:bec4:1910::/44
2a12:bec4:1ab0::/44
2a12:bec4:1b10::/44
2a12:bec4:1b70::/44
2a12:bec4:1c00::/44
Signature Algorithm: sha256WithRSAEncryption
04:39:57:f5:44:bd:34:82:0f:80:78:e1:52:80:27:d2:60:89:
5b:97:77:f9:68:eb:04:08:f3:96:f9:bd:5a:2c:0f:e8:dc:cc:
7b:6f:8f:72:25:93:56:ea:bc:57:7d:65:3a:4b:46:4f:0a:f9:
72:77:04:1b:49:23:e6:bd:eb:5c:20:c6:56:eb:b2:ce:f7:77:
01:f6:ac:8c:34:a0:2b:f1:05:73:21:89:3e:23:88:d4:e4:93:
44:a2:77:36:8e:e3:2c:0e:b2:db:c6:e7:54:96:79:ee:30:74:
68:10:6e:64:0b:ac:c5:d8:50:6d:ea:e0:71:41:b2:59:78:18:
c3:42:18:5b:f7:36:e8:2a:00:bb:52:ba:9a:2b:da:68:23:b0:
84:8d:51:fc:af:81:1a:2f:14:3d:2f:c4:e3:19:d0:d9:d2:66:
c7:48:e1:79:64:99:21:90:97:38:fa:b4:66:e3:e2:68:95:f7:
e9:24:2b:4f:f1:55:5c:76:a2:de:33:a8:47:ac:5f:5d:e7:72:
6b:12:c5:77:97:6e:7d:34:98:fd:8e:21:61:7a:ca:1f:ed:b9:
59:b4:83:ed:c5:83:f8:12:37:b6:c6:49:c3:05:f2:3e:7b:e8:
e0:85:e9:a6:35:a9:2c:d7:e0:1a:06:26:c0:38:ee:ed:37:d1:
38:99:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:10:06 2025 by rpki-client