Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa
File: Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa (raw, json)
Hash identifier: upxdgtTwbpkR0XgQ85zaD7BvaiRt7M2499aUCky2ako=
Subject key identifier: 41:FD:F1:B8:F8:C2:A1:31:10:2D:F2:E8:FD:4A:00:6F:28:A1:38:18
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0199576CDC15632181732ADD30DF68493EB7
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa
Signing time: Wed 17 Sep 2025 11:26:16 +0000
ROA not before: Wed 17 Sep 2025 11:26:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a12:f8c1:40::/48 maxlen: 48
2a12:f8c1:41::/48 maxlen: 48
2a12:f8c1:42::/48 maxlen: 48
2a12:f8c1:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:6c:dc:15:63:21:81:73:2a:dd:30:df:68:49:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 17 11:26:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41fdf1b8f8c2a131102df2e8fd4a006f28a13818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:d3:11:fe:98:cd:79:c2:45:19:be:b9:07:
e3:c5:9c:fa:da:f3:a2:6e:d3:a6:84:68:30:0e:b4:
ae:ee:79:c8:a7:3a:9d:a9:50:59:0a:17:bc:3e:36:
b0:18:b6:73:63:32:73:86:f8:a6:73:b1:fd:2b:b8:
19:18:79:e1:92:5a:3e:ca:b9:3c:50:27:47:7d:19:
90:04:56:0e:62:96:bf:46:a4:f6:62:77:fa:7c:97:
ec:fb:37:38:2e:33:dc:27:0f:38:59:a4:c7:0e:db:
06:66:b8:d7:5d:05:33:fd:38:17:1b:62:7b:61:d6:
f7:6f:73:07:7f:15:48:f7:ac:fb:2c:0b:e2:14:14:
96:46:48:b8:97:88:ad:87:bb:ee:00:16:f6:a1:bc:
12:ab:f0:c2:19:d9:86:43:7f:2f:71:d4:57:0a:e2:
73:c8:a8:43:94:b2:83:00:70:e7:3d:4b:3e:14:20:
8f:b4:c9:53:b5:a4:8a:da:6e:d7:3b:f8:73:5a:c7:
4d:58:81:5f:03:b4:56:55:9b:79:3f:94:ee:57:53:
17:69:2f:71:c7:b6:57:49:19:dc:94:8e:76:54:39:
c6:e6:2d:b9:6b:99:5c:98:93:8b:02:b7:42:9b:fb:
2e:44:9d:a9:a5:a6:fb:99:a7:19:ec:8d:37:67:e0:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:F1:B8:F8:C2:A1:31:10:2D:F2:E8:FD:4A:00:6F:28:A1:38:18
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Qf3xuPjCoTEQLfLo_UoAbyihOBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:40::/46
Signature Algorithm: sha256WithRSAEncryption
11:ca:28:ac:6e:55:3b:85:7c:b7:5f:12:30:02:0e:4b:62:b8:
0c:aa:83:fb:65:88:cc:bf:c1:c9:d3:fd:a5:9d:c8:ce:10:02:
ef:02:6b:00:49:f3:33:2c:0e:d1:05:98:31:8b:70:c6:45:18:
02:be:25:80:25:ac:e0:9d:d3:04:c9:31:39:2d:c9:b7:cc:39:
3a:b9:fb:69:54:3b:a3:da:e6:83:63:ae:b6:66:4e:3d:b7:2e:
7b:39:c3:34:6b:56:c7:4a:be:5d:70:62:30:1b:36:bd:1c:2a:
33:a7:41:c3:52:e7:f5:56:9d:c2:58:be:eb:b3:be:82:cf:f2:
15:98:a7:7f:60:7a:0c:57:0b:4f:ae:8c:64:94:b8:05:85:23:
92:39:d1:83:55:be:ab:d4:ab:0b:9c:68:7f:b5:9d:96:78:fc:
03:01:13:bb:50:7e:b0:05:b9:10:b2:fd:eb:b6:8a:f0:92:ba:
cb:3d:6f:d8:bc:d4:d2:cd:23:33:a6:0a:dd:e5:a3:b9:28:b7:
82:8c:b9:77:01:8b:4b:3b:1b:77:3a:38:41:c0:fc:f1:16:ae:
1c:0f:fe:26:b5:2a:b8:44:3e:48:d7:59:7b:11:5e:61:8d:cd:
dc:af:3a:ba:f6:a3:33:d6:a3:35:c2:19:63:4d:fa:dc:0d:c6:
68:0f:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:17 2025 by rpki-client