Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa
File: fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa (raw, json)
Hash identifier: eNIrQiQ2SfuQFshYez06LL23c6mQrj9GfYgkzxup5Xw=
Subject key identifier: 7D:8F:48:CB:62:58:D4:4F:D3:5E:D6:09:D0:55:78:69:E6:7A:BF:E6
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0199576CDBC9F99DC26FF9BD53CBDA519485
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa
Signing time: Wed 17 Sep 2025 11:26:15 +0000
ROA not before: Wed 17 Sep 2025 11:26:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63801
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:6c:db:c9:f9:9d:c2:6f:f9:bd:53:cb:da:51:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 17 11:26:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8f48cb6258d44fd35ed609d0557869e67abfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:cb:61:fd:83:5e:5c:f8:3e:3e:46:7c:be:
45:91:c7:2e:fd:75:f2:e6:04:1d:98:0b:d6:83:c1:
aa:10:bc:c4:fe:f6:be:de:aa:e9:25:00:35:ea:51:
85:07:d1:4f:cc:18:e6:9a:cf:b7:88:ed:23:6c:42:
14:a9:79:73:a3:4b:0c:83:d8:50:71:20:8d:3c:a1:
dd:ea:0e:8c:97:e0:ff:b9:a6:e6:88:52:86:d1:22:
0f:c3:d3:04:20:37:9b:67:bc:82:12:31:43:c7:e0:
5c:e8:9c:20:07:f6:62:ef:c9:f9:cf:1f:be:05:51:
ea:33:e2:fb:42:96:8f:f7:bf:f0:69:6e:54:94:09:
ff:04:7d:c4:2d:e8:2b:d6:77:41:b5:be:2d:61:45:
98:2b:32:d9:6b:a4:59:97:e4:83:28:80:bf:35:ad:
d7:09:6b:0a:e0:3b:d1:e7:42:ea:3e:6c:b4:35:b8:
7e:35:7a:c6:f0:ac:22:32:ea:b1:58:ac:e8:1a:ef:
91:27:63:c6:69:bc:8e:aa:0e:3a:e9:63:cc:6d:73:
0b:1d:d5:5a:c2:56:7a:05:e2:e4:8a:43:77:02:77:
41:9b:ef:25:dd:f2:d2:d8:35:09:d6:2c:ff:88:20:
3a:14:42:00:bf:35:01:de:88:bf:e3:8b:3e:3c:45:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:48:CB:62:58:D4:4F:D3:5E:D6:09:D0:55:78:69:E6:7A:BF:E6
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/fY9Iy2JY1E_TXtYJ0FV4aeZ6v-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/40
Signature Algorithm: sha256WithRSAEncryption
1f:dd:24:75:17:2e:7e:50:4d:08:ad:5a:f3:74:ba:f2:c0:7f:
e0:37:03:58:28:ed:24:9a:1d:29:95:ce:ed:c9:41:b5:d5:ae:
a9:84:1e:91:ea:91:83:0c:af:f0:57:d1:31:ed:17:16:b5:a4:
12:53:18:ef:ee:11:66:d7:f4:ab:9f:4f:d9:fc:54:84:e7:f6:
33:1e:fa:ef:87:20:92:fa:c0:a4:0a:25:82:87:ec:1c:76:14:
01:ad:8b:84:37:10:5d:2f:73:af:77:b8:af:10:cb:b1:3f:9c:
79:cf:d0:1c:4c:ae:5a:71:67:ac:d1:8a:69:8a:fd:67:fb:20:
de:10:ea:6d:39:e2:18:0b:46:8b:e3:2b:95:3a:62:5d:dc:9c:
4f:f6:75:06:b8:fe:d3:d6:b0:e7:88:08:e9:f2:a4:16:64:df:
21:4c:c3:41:a4:2e:c3:b7:6e:9b:2c:2a:a9:a7:c2:5a:1b:ec:
50:7b:68:5a:ab:42:7f:03:f4:8e:10:d7:31:a7:a3:23:b2:c4:
d6:32:0f:6e:57:b6:3a:29:53:28:b8:cd:0d:e2:80:b7:b5:85:
e6:f5:05:9b:a3:25:bd:f7:07:3d:5c:69:19:fe:72:1f:45:d5:
60:9b:c5:93:57:da:8b:b7:1f:2a:7b:d8:b2:fb:de:19:91:9f:
f8:cf:74:f5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZlXbNvJ+Z3Cb/m9U8vaUZSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwOTE3MTEyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDhmNDhjYjYyNThkNDRmZDM1ZWQ2MDlkMDU1Nzg2OWU2N2FiZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27HLYf2DXlz4Pj5GfL5Fkccu/XXy
5gQdmAvWg8GqELzE/va+3qrpJQA16lGFB9FPzBjmms+3iO0jbEIUqXlzo0sMg9hQ
cSCNPKHd6g6Ml+D/uabmiFKG0SIPw9MEIDebZ7yCEjFDx+Bc6JwgB/Zi78n5zx++
BVHqM+L7QpaP97/waW5UlAn/BH3ELegr1ndBtb4tYUWYKzLZa6RZl+SDKIC/Na3X
CWsK4DvR50LqPmy0Nbh+NXrG8KwiMuqxWKzoGu+RJ2PGabyOqg466WPMbXMLHdVa
wlZ6BeLkikN3AndBm+8l3fLS2DUJ1iz/iCA6FEIAvzUB3oi/44s+PEUUMwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH2PSMtiWNRP017WCdBVeGnmer/mMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvZlk5SXkySlkxRV9UWHRZSjBGVjRhZVo2di1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhL4wgIw
DQYJKoZIhvcNAQELBQADggEBAB/dJHUXLn5QTQitWvN0uvLAf+A3A1go7SSaHSmV
zu3JQbXVrqmEHpHqkYMMr/BX0THtFxa1pBJTGO/uEWbX9KufT9n8VITn9jMe+u+H
IJL6wKQKJYKH7Bx2FAGti4Q3EF0vc693uK8Qy7E/nHnP0BxMrlpxZ6zRimmK/Wf7
IN4Q6m054hgLRovjK5U6Yl3cnE/2dQa4/tPWsOeICOnypBZk3yFMw0GkLsO3bpss
Kqmnwlob7FB7aFqrQn8D9I4Q1zGnoyOyxNYyD25XtjopUyi4zQ3igLe1heb1BZuj
Jb33Bz1caRn+ch9F1WCbxZNX2ou3Hyp72LL73hmRn/jPdPU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:20 2025 by rpki-client