Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6JF_gdmuFei8xVFSbJS0MVCiDf0.roa
File: 6JF_gdmuFei8xVFSbJS0MVCiDf0.roa (raw, json)
Hash identifier: URTn6C2196pK5HQjAySD4RzHvPuQH4tb04vCKWXfiFI=
Subject key identifier: E8:91:7F:81:D9:AE:15:E8:BC:C5:51:52:6C:94:B4:31:50:A2:0D:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019902543B542725EDF1A0FA37FC3A526CEE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6JF_gdmuFei8xVFSbJS0MVCiDf0.roa
Signing time: Sun 31 Aug 2025 22:51:38 +0000
ROA not before: Sun 31 Aug 2025 22:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:02:54:3b:54:27:25:ed:f1:a0:fa:37:fc:3a:52:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 31 22:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8917f81d9ae15e8bcc551526c94b43150a20dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:ee:d5:9e:73:52:b9:c3:2f:33:af:0d:38:
98:78:da:80:ef:13:4b:e8:4d:45:a9:b4:6f:db:a1:
51:4d:4b:18:10:61:8d:2f:f0:17:a0:6d:6d:32:ec:
ac:8a:82:30:d3:47:b9:c5:49:1a:7c:14:f4:cd:64:
e7:94:a4:d3:5b:6d:67:0a:6c:b6:e5:79:c4:f7:70:
55:53:55:60:4f:cb:c5:ae:8c:db:9f:58:51:fc:ae:
b9:03:d2:ee:4b:d9:03:d1:9e:30:ca:8b:09:d8:ac:
2d:5c:5d:b1:05:15:d1:4c:74:5b:b4:20:64:fc:1c:
d9:2e:a7:62:8c:a7:c6:48:b9:42:5b:5a:72:7c:24:
14:08:bf:1a:73:0b:1f:55:71:fe:cb:88:11:41:57:
50:47:88:38:db:20:25:ac:14:5c:3a:a1:76:42:2d:
0b:ff:6b:a4:9c:a3:55:0b:4e:3c:f5:f7:53:fb:75:
69:5e:ce:dd:71:f2:f5:7f:f0:7b:f6:80:f6:15:ec:
9f:1f:02:5b:87:e8:a5:43:45:de:b1:e6:ba:0c:9e:
f9:18:e6:de:80:b6:73:97:30:8f:da:05:cd:18:49:
df:a4:9a:55:be:f9:d0:fe:9a:7d:87:bc:3a:64:73:
db:1b:c7:e3:f2:53:14:b3:25:06:2d:f0:1a:27:d9:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:7F:81:D9:AE:15:E8:BC:C5:51:52:6C:94:B4:31:50:A2:0D:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6JF_gdmuFei8xVFSbJS0MVCiDf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:140::/44
2a0c:3b87:ff00::/40
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
Signature Algorithm: sha256WithRSAEncryption
63:16:9a:6a:20:9c:b6:a7:5b:d9:d0:12:6c:89:94:65:d8:e2:
e0:8b:4b:60:2e:cc:87:29:2d:9f:90:1c:b8:5a:05:63:77:01:
28:f8:1e:ca:c5:4f:a3:b6:10:cb:d1:03:21:7a:ae:71:8a:86:
71:23:c0:4e:49:a2:d0:44:e5:e7:12:fd:3d:9c:c0:98:bc:b0:
2d:a6:0b:d2:e0:f1:cb:c5:38:f5:ab:f4:88:a0:7c:65:c3:ad:
1e:c9:8e:18:39:05:4c:2c:e2:62:c0:40:96:37:d7:78:70:73:
8c:e8:e6:4c:e9:df:a5:f2:f2:13:a1:8f:c7:0d:2d:2b:a1:49:
b5:d0:81:44:34:60:bf:96:8f:56:2a:00:e1:02:ca:e1:92:00:
32:ea:57:c6:31:78:0b:69:20:3e:5c:c8:a4:a1:eb:c2:35:7d:
75:e0:dc:06:38:dc:bd:02:99:1d:59:f6:dc:b7:ff:69:b6:07:
4a:94:fd:48:b8:70:9c:c9:13:16:9f:65:f5:da:60:96:30:e4:
c2:0f:7f:28:aa:5d:8f:75:aa:3e:87:29:21:f8:8b:09:34:45:
42:7b:01:0f:e6:71:42:1e:28:54:23:bc:7e:73:a3:e5:f1:81:
ee:93:bd:09:13:f3:d4:cc:af:8d:b0:1b:84:1a:43:cd:7e:a6:
d9:c2:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:15 2025 by rpki-client