
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/w-kDsP50J75PL4Ya6eQkdiS7MmA.roa
File: w-kDsP50J75PL4Ya6eQkdiS7MmA.roa (raw, json)
Hash identifier: e/heTB6HI2crd/P6O3UvBg+yFEyLCizumo10MAmv0a0=
Subject key identifier: C3:E9:03:B0:FE:74:27:BE:4F:2F:86:1A:E9:E4:24:76:24:BB:32:60
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0199576CDB69D7A89CE1959E657269AD3ADA
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/w-kDsP50J75PL4Ya6eQkdiS7MmA.roa
Signing time: Wed 17 Sep 2025 11:26:15 +0000
ROA not before: Wed 17 Sep 2025 11:26:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60445
IP address blocks: 2a12:f8c2:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:6c:db:69:d7:a8:9c:e1:95:9e:65:72:69:ad:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 17 11:26:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3e903b0fe7427be4f2f861ae9e4247624bb3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:13:77:f4:9b:27:91:a0:cb:0e:3f:fc:76:
80:28:3d:03:c7:60:6e:c4:64:ef:26:0a:2b:91:7d:
b5:2b:62:10:f4:5f:ad:37:b5:ef:8d:0b:25:f4:f2:
93:18:f8:2d:1a:05:ed:5c:94:15:96:af:33:b5:c6:
9a:20:e9:40:3d:71:f2:31:6a:d1:f0:e6:8f:ee:e8:
8c:46:37:3d:f2:7e:92:c8:07:9b:de:6e:0f:17:38:
6e:bb:0f:e7:f4:19:80:d0:21:58:dc:d4:db:62:d3:
3c:48:51:18:0c:9e:e9:67:19:f7:1a:7c:ae:15:73:
ff:cf:c4:9f:1b:7c:f1:fe:20:d1:d5:89:92:26:f0:
a3:df:dc:ef:84:d1:9d:3f:fe:a9:50:c0:d7:11:ee:
b1:e6:d6:a5:3f:ff:8f:44:3e:d7:4f:6c:1b:3e:52:
2c:4b:37:07:12:a0:09:cf:1b:2b:66:f1:0d:83:3a:
f8:aa:6a:d0:f7:3d:89:12:ed:fb:ed:4d:6e:ba:0b:
be:e4:ab:23:ac:d9:96:4b:ba:1b:d3:a1:7f:d7:4d:
37:67:40:2e:69:39:a4:2e:bd:06:e3:99:81:09:e0:
c6:b2:be:a2:bf:99:22:39:05:e1:bf:1b:81:45:dd:
35:b7:08:8d:45:c7:03:89:10:ae:06:ed:5d:db:41:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:03:B0:FE:74:27:BE:4F:2F:86:1A:E9:E4:24:76:24:BB:32:60
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/w-kDsP50J75PL4Ya6eQkdiS7MmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:600::/40
Signature Algorithm: sha256WithRSAEncryption
14:9b:8e:58:35:5c:75:9f:b5:88:04:47:76:78:3a:3c:2a:34:
cf:ae:b6:fe:03:d5:45:e9:e6:c1:32:38:43:c1:92:5b:ee:d2:
e2:ef:e0:e7:84:db:7d:ee:fe:8e:5d:46:84:2c:ad:34:3a:66:
73:17:eb:c6:09:d3:29:96:f3:c0:0e:ae:06:d0:c2:15:de:35:
3e:4b:93:83:f8:c0:78:89:8a:7b:ae:61:19:8a:53:37:28:40:
de:43:e5:02:77:9a:1f:48:17:6f:25:d0:e6:4b:3f:ee:00:27:
20:ac:37:cc:a5:a2:54:9e:3c:a4:be:55:cc:f5:6e:7b:cc:ea:
41:39:94:82:89:b0:b7:cd:1f:c6:c1:f1:54:41:74:02:80:8c:
da:a9:62:53:5e:33:65:63:5f:42:19:5b:12:b7:8c:23:a1:be:
80:3e:52:f4:78:42:a8:55:67:43:a1:73:07:bf:61:99:17:00:
2a:5b:43:6f:1c:ab:80:1f:f4:b0:84:09:fa:e9:43:21:fd:8e:
cf:aa:76:ee:3e:94:51:e1:f8:f2:9c:b3:5d:d8:e4:a4:cb:15:
75:d6:ca:cb:99:0b:de:3c:9f:d3:ef:fe:60:49:9c:5c:5a:a1:
cc:d7:ef:14:a7:e4:0b:33:e5:70:73:7d:38:0f:7d:7b:e9:0f:
6d:03:9c:5f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZlXbNtp16ic4ZWeZXJprTraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwOTE3MTEyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2U5MDNiMGZlNzQyN2JlNGYyZjg2MWFlOWU0MjQ3NjI0YmIzMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI8Td/SbJ5Ggyw4//HaAKD0Dx2Bu
xGTvJgorkX21K2IQ9F+tN7XvjQsl9PKTGPgtGgXtXJQVlq8ztcaaIOlAPXHyMWrR
8OaP7uiMRjc98n6SyAeb3m4PFzhuuw/n9BmA0CFY3NTbYtM8SFEYDJ7pZxn3Gnyu
FXP/z8SfG3zx/iDR1YmSJvCj39zvhNGdP/6pUMDXEe6x5talP/+PRD7XT2wbPlIs
SzcHEqAJzxsrZvENgzr4qmrQ9z2JEu377U1uugu+5KsjrNmWS7ob06F/1003Z0Au
aTmkLr0G45mBCeDGsr6iv5kiOQXhvxuBRd01twiNRccDiRCuBu1d20GVLQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMPpA7D+dCe+Ty+GGunkJHYkuzJgMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvdy1rRHNQNTBKNzVQTDRZYTZlUWtkaVM3TW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhL4wgYw
DQYJKoZIhvcNAQELBQADggEBABSbjlg1XHWftYgER3Z4OjwqNM+utv4D1UXp5sEy
OEPBklvu0uLv4OeE233u/o5dRoQsrTQ6ZnMX68YJ0ymW88AOrgbQwhXeNT5Lk4P4
wHiJinuuYRmKUzcoQN5D5QJ3mh9IF28l0OZLP+4AJyCsN8ylolSePKS+Vcz1bnvM
6kE5lIKJsLfNH8bB8VRBdAKAjNqpYlNeM2VjX0IZWxK3jCOhvoA+UvR4QqhVZ0Oh
cwe/YZkXACpbQ28cq4Af9LCECfrpQyH9js+qdu4+lFHh+PKcs13Y5KTLFXXWysuZ
C948n9Pv/mBJnFxaoczX7xSn5Asz5XBzfTgPfXvpD20DnF8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:07 2025 by rpki-client