Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7t0ruCwwheWDY1iuc2ABz5OkuLU.roa
File: 7t0ruCwwheWDY1iuc2ABz5OkuLU.roa (raw, json)
Hash identifier: Wsc9jgqPgNqZ76JLps6IqRa7nxD3XGEuiy4WXzWnIxU=
Subject key identifier: EE:DD:2B:B8:2C:30:85:E5:83:63:58:AE:73:60:01:CF:93:A4:B8:B5
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0199A5C348670D4147A24515DFFC3DD80632
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7t0ruCwwheWDY1iuc2ABz5OkuLU.roa
Signing time: Thu 02 Oct 2025 16:31:02 +0000
ROA not before: Thu 02 Oct 2025 16:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10104
IP address blocks: 2a12:f8c0::/32 maxlen: 48
2a12:f8c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:c3:48:67:0d:41:47:a2:45:15:df:fc:3d:d8:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Oct 2 16:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eedd2bb82c3085e5836358ae736001cf93a4b8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:53:b5:57:7e:1f:23:86:1f:89:8e:60:4b:
dc:49:55:5f:d9:e9:2a:e5:7d:e0:b1:d2:2f:5a:ba:
f4:c7:65:be:cb:bd:7f:d4:24:ab:2d:f7:7b:47:48:
fe:f2:01:0f:a6:d5:1f:25:1c:6a:b8:17:cc:1c:8d:
dd:af:e8:1b:08:eb:d2:37:49:c5:67:62:7e:d2:fd:
0c:99:a4:f4:9e:17:aa:d7:1b:28:fe:50:ba:da:f4:
80:07:6a:e8:10:e4:20:83:69:3a:99:34:64:1d:c6:
c3:66:5c:d2:cf:6b:5d:03:09:f0:40:9f:4c:a8:5d:
8f:94:18:2d:ec:ba:2e:72:1d:eb:f8:97:d7:38:00:
4f:25:63:51:09:36:22:76:72:60:f6:f5:02:ef:77:
0b:39:6c:4a:95:fa:d9:c6:8e:e3:f9:2e:fa:6d:b6:
ec:e6:93:24:ee:9e:93:57:fc:20:84:06:ee:01:07:
41:22:aa:c9:6c:75:19:ff:4c:5c:50:bd:7c:9b:71:
2c:07:76:72:a0:c3:76:cd:22:da:8a:7e:50:d7:1f:
24:eb:ca:72:b2:c8:2a:cc:6a:52:68:a5:a9:9a:1c:
6f:82:2b:54:27:95:8e:fa:e6:a1:5e:38:8f:9f:36:
ea:39:45:f0:c9:3b:c3:9f:59:e3:9a:45:b2:ba:de:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DD:2B:B8:2C:30:85:E5:83:63:58:AE:73:60:01:CF:93:A4:B8:B5
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7t0ruCwwheWDY1iuc2ABz5OkuLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::-2a12:f8c1:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:99:62:7c:cc:34:63:c6:9f:ed:31:34:f2:02:34:ff:72:47:
db:96:39:70:bf:61:7e:14:41:74:0b:1a:4b:a0:6e:73:95:69:
b9:01:73:26:3f:b8:7e:63:b6:1d:84:01:d7:60:c4:a5:9f:e7:
b2:5d:81:ea:93:f5:be:87:15:73:30:a4:eb:3f:34:9c:9c:96:
0e:26:b1:f5:b0:26:94:07:c3:85:60:99:28:bc:31:f4:92:c1:
b4:d1:1f:f1:aa:90:6d:95:1c:61:4c:03:22:4d:d4:43:5e:ee:
e9:58:b8:21:00:d5:7e:d0:10:fb:c8:19:7b:6e:55:86:99:67:
ab:ca:57:d2:a4:7f:cf:eb:f6:5b:cc:e0:be:f1:9b:3a:86:cf:
c1:ba:67:02:8d:cc:c5:7c:d1:37:e3:aa:2c:e1:eb:21:fa:05:
1c:f4:29:05:fb:67:0c:e8:64:8e:d4:12:ef:8d:b9:b4:11:eb:
b7:4f:a6:af:be:9e:92:4e:57:6d:6b:56:91:b2:e7:24:b4:f9:
49:a8:a0:5c:5d:1b:67:04:7c:67:6c:16:d7:fe:cf:b6:70:57:
6c:3c:e5:cd:0f:67:cd:b9:9b:e1:d5:3d:cd:19:5d:b4:85:f3:
49:8a:14:e2:12:a0:01:9c:88:1b:2a:56:fc:a9:01:7a:3e:42:
a7:03:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:27 2025 by rpki-client