Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oOPJ1LF7HU2-lHRWs7Nm43ODVsU.roa
File: oOPJ1LF7HU2-lHRWs7Nm43ODVsU.roa (raw, json)
Hash identifier: QuK6jhYrf+MylTAj34OfcMh1vDRxJp84+Y/c2r01GfI=
Subject key identifier: A0:E3:C9:D4:B1:7B:1D:4D:BE:94:74:56:B3:B3:66:E3:73:83:56:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0199C0BE9181BFF43CCC0E347F522D589132
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oOPJ1LF7HU2-lHRWs7Nm43ODVsU.roa
Signing time: Tue 07 Oct 2025 22:15:38 +0000
ROA not before: Tue 07 Oct 2025 22:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213579
IP address blocks: 2a10:ccc0:eee0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:be:91:81:bf:f4:3c:cc:0e:34:7f:52:2d:58:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 7 22:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0e3c9d4b17b1d4dbe947456b3b366e3738356c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:53:db:b2:75:97:04:10:32:de:dd:5a:ef:
8f:18:4e:aa:cd:f0:75:9f:21:71:f4:bb:0d:b4:96:
5b:f0:2c:d9:54:60:16:89:1f:6d:ed:89:8a:d1:a5:
75:c5:eb:7f:a6:da:eb:0a:83:4c:6b:d5:1e:f1:06:
9f:63:c5:a2:05:21:17:d5:8d:dd:fd:7a:54:53:5a:
36:a2:c6:dc:d7:cc:8d:64:54:6c:e1:f8:8c:33:38:
9d:7e:4a:66:eb:19:3e:6b:d0:d2:6e:eb:43:f6:9b:
2a:e2:8c:f7:77:f4:76:38:70:49:c2:23:be:e6:4a:
06:a8:ec:e9:ba:da:cd:e1:d5:d7:c8:5e:c3:48:58:
1a:10:97:6f:9e:8d:ac:d0:1a:09:b6:0e:ce:62:37:
81:f2:91:75:ed:69:72:b7:0e:50:d7:4e:8b:b5:bd:
b9:76:ab:f9:6a:0a:6d:97:ef:bb:14:d4:5e:6c:29:
5f:bb:60:7c:6d:27:df:ba:52:c5:1d:82:dc:e4:9e:
ec:27:bb:d0:95:46:4b:53:3a:c9:c4:13:d6:05:8c:
a3:86:12:2a:c8:76:e9:49:35:9c:6f:4d:bb:c3:ee:
27:cf:10:06:1b:66:b6:96:b7:2f:ab:42:0d:a2:d0:
7d:6b:a2:8c:d6:5a:29:cd:8f:1d:af:b9:53:f9:a6:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E3:C9:D4:B1:7B:1D:4D:BE:94:74:56:B3:B3:66:E3:73:83:56:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oOPJ1LF7HU2-lHRWs7Nm43ODVsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:eee0::/44
Signature Algorithm: sha256WithRSAEncryption
bc:51:93:e7:f1:11:4f:3b:9c:d7:2e:fc:73:89:08:dc:9e:45:
cc:69:10:6e:03:f8:8e:b3:d9:f0:b1:ba:7c:98:44:f6:35:45:
02:11:e0:05:15:44:7f:d4:68:2a:0c:e6:60:c8:63:c5:40:38:
68:14:8d:9b:76:16:e1:2e:0c:89:3b:70:16:66:d2:11:29:b7:
eb:7e:5d:98:95:26:f2:54:67:ff:73:ff:b0:ae:9f:4a:bb:96:
ed:6c:bf:45:b4:c6:0a:ad:86:4f:0f:59:0a:c3:53:8c:0d:2d:
88:6f:0f:34:03:59:64:06:9b:fd:96:1a:ce:9e:00:62:0c:ee:
34:07:30:d6:c0:32:ec:c4:31:df:2f:6f:34:ab:e6:63:e1:be:
1d:e8:9b:6f:d2:ee:55:1f:97:e3:85:f9:3e:a6:93:f5:97:c8:
4e:48:b3:4f:21:23:fa:29:34:36:df:0e:9e:32:76:7a:7a:c3:
f9:1f:82:a8:cc:92:3a:53:e3:b1:e6:f4:8f:77:e8:e7:49:e1:
8c:13:e8:1a:99:6d:b7:ce:3a:34:0f:3a:42:f5:f3:0d:3b:06:
7e:e6:b1:18:58:b8:dd:cc:12:20:20:65:b1:81:d5:ed:24:9d:
8a:5a:a4:1c:96:ff:0c:11:7a:26:bf:05:fb:e8:3a:c0:56:ef:
a4:82:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:09 2025 by rpki-client