Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa
File: YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa (raw, json)
Hash identifier: na/c6NWSHkDjhmZUiY/WjKrk6y+DwMkb2h5xDcgHESc=
Subject key identifier: 60:18:81:B6:99:93:87:05:6C:2A:B3:0A:E9:9F:64:84:69:91:CB:54
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019A602485748011EF8B58E6065DFCB5FD3E
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa
Signing time: Fri 07 Nov 2025 21:06:37 +0000
ROA not before: Fri 07 Nov 2025 21:06:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214456
IP address blocks: 2a14:ae00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:24:85:74:80:11:ef:8b:58:e6:06:5d:fc:b5:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Nov 7 21:06:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=601881b6999387056c2ab30ae99f64846991cb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:77:31:50:2c:d3:1d:14:07:8c:9a:f2:f1:
9c:7c:e6:20:2c:24:21:55:d5:f7:ed:3b:5e:3f:a3:
14:21:3d:3e:f1:8b:76:65:39:91:68:66:30:de:28:
f7:b1:ee:c9:93:c1:ba:d0:68:c9:22:a4:8d:8b:da:
cd:0e:1b:ed:9a:88:77:a6:8c:a2:0a:8e:11:a9:4f:
2e:d2:6a:c2:f2:2a:21:ab:9e:9c:48:fb:00:97:09:
96:9c:52:0b:5d:e7:42:2a:bb:63:70:3a:07:ad:0f:
f6:7c:58:f4:b0:2c:8a:35:83:86:4f:75:28:fa:94:
fd:29:ac:2d:8a:8b:92:1b:ec:16:d6:6b:bc:0f:bc:
d2:9d:65:7f:c2:00:40:7d:bf:65:a3:da:ed:2f:e0:
1a:d8:e8:59:1e:8a:19:e4:b4:0a:7c:0a:a2:e4:12:
62:2a:30:59:2e:f6:f1:a7:2a:f9:7a:3d:fd:49:b5:
b6:73:eb:c3:e6:6d:55:03:28:05:7c:c1:bb:52:4c:
cd:16:7e:a4:6a:8a:60:6f:4f:8f:79:b9:c0:ff:4f:
cf:c7:cf:80:c0:17:41:20:40:4b:e4:c5:77:db:32:
71:95:43:07:7f:55:5d:10:12:15:74:07:24:8f:28:
5d:9b:1f:cc:80:3f:18:60:35:27:5a:0f:15:d1:97:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:81:B6:99:93:87:05:6C:2A:B3:0A:E9:9F:64:84:69:91:CB:54
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/YBiBtpmThwVsKrMK6Z9khGmRy1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:4::/48
Signature Algorithm: sha256WithRSAEncryption
5a:f8:f4:f5:57:1a:3a:f4:44:9e:59:75:db:c5:e2:ca:13:85:
80:84:24:af:1f:ee:66:83:c1:11:3f:30:89:c3:f7:0a:fa:b1:
60:4f:36:4c:2a:2b:fe:ad:85:a3:38:65:83:c8:a5:4a:42:0d:
d9:7d:b6:41:94:06:c9:13:80:c2:46:99:eb:3b:d1:32:6e:b3:
3a:94:e8:96:d0:32:f3:15:e4:3f:53:4d:ce:86:8d:b2:45:24:
1a:5e:ae:c9:2a:8e:82:5a:8e:d5:d1:62:27:24:db:4d:57:92:
67:bd:8d:78:ec:89:6c:56:d4:7b:d3:32:3b:8f:60:4a:05:f3:
1a:29:61:d6:84:ad:ad:8f:9f:82:8a:61:35:a9:a5:52:34:86:
95:c4:b0:ca:48:17:a3:4d:1d:38:a1:ae:85:73:ec:0c:43:de:
10:21:68:00:58:ae:42:fa:65:d9:f9:c7:02:af:12:bb:df:51:
8a:29:bf:78:f4:fe:12:9c:f4:7c:28:3b:78:aa:1a:99:0f:28:
3c:1d:d2:e4:f9:29:a4:54:35:f5:40:5c:66:0c:6b:64:2c:ed:
8a:47:1c:20:bd:32:b2:b9:6b:c6:ae:54:8c:1a:6a:08:40:76:
ab:6b:a6:ae:ea:9e:f5:ea:28:7b:4a:7b:24:56:0f:6d:7f:7f:
e2:1a:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 10:15:07 2025 by rpki-client