Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFMO_a0VBzOj62Wse2iA2iUrfHQ.roa
File: sFMO_a0VBzOj62Wse2iA2iUrfHQ.roa (raw, json)
Hash identifier: G44IiCwSP04cNzBA/RnLW6mVOkDapcgrhiX2dv8aNQQ=
Subject key identifier: B0:53:0E:FD:AD:15:07:33:A3:EB:65:AC:7B:68:80:DA:25:2B:7C:74
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0199ED0B87B2E4FCA3DC48500CE7B44E5AF0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFMO_a0VBzOj62Wse2iA2iUrfHQ.roa
Signing time: Thu 16 Oct 2025 12:42:59 +0000
ROA not before: Thu 16 Oct 2025 12:42:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216418
IP address blocks: 2a10:ccc0:110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:0b:87:b2:e4:fc:a3:dc:48:50:0c:e7:b4:4e:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 16 12:42:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0530efdad150733a3eb65ac7b6880da252b7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:8b:68:6d:69:9e:7f:b2:e3:4d:bd:8f:ce:
ed:08:b4:5d:eb:6c:df:6e:12:d5:40:8a:1f:82:a8:
d8:c6:66:33:0c:89:93:e9:d5:05:5d:a6:01:b2:eb:
2b:ec:d2:8c:48:c9:66:03:5b:5f:94:17:b6:3e:f6:
cb:17:85:6c:cf:35:21:4a:63:20:5e:68:d0:6e:f2:
a3:65:1f:9e:14:02:58:96:c2:b3:b9:b2:d6:ac:97:
b5:f2:64:ce:26:7d:c3:9f:5e:ff:34:85:80:d5:b0:
e9:0b:54:c4:a6:bb:29:82:ca:65:86:10:9f:09:09:
b2:47:11:de:70:b3:53:14:32:00:50:cb:91:f4:16:
42:5a:d6:36:bb:59:be:17:da:b2:2e:b7:2e:d3:f8:
dc:1f:67:01:27:a3:65:db:bc:70:78:ef:72:8f:88:
1a:da:3e:e6:ce:46:02:8d:bf:fa:54:b1:7d:30:93:
ca:69:cf:26:97:87:7d:f5:75:89:fd:92:b7:e2:42:
cf:7f:b6:cb:82:9d:91:25:a8:78:d6:d2:c8:13:85:
82:ba:4a:f0:17:5c:ab:f0:45:cf:46:00:26:74:73:
0c:4d:1c:32:be:15:9d:c9:f3:35:44:82:07:2b:ce:
b1:f1:2e:5f:31:63:7d:82:ac:32:40:df:67:42:2a:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:0E:FD:AD:15:07:33:A3:EB:65:AC:7B:68:80:DA:25:2B:7C:74
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFMO_a0VBzOj62Wse2iA2iUrfHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:110::/44
Signature Algorithm: sha256WithRSAEncryption
4e:39:0d:df:07:57:91:80:af:8d:0f:79:db:6c:31:2a:a0:fb:
f8:e6:fd:10:a8:d9:51:04:b1:24:e0:d0:1e:4c:21:b8:ef:fe:
b9:63:ea:84:46:40:a5:fb:4f:07:76:5c:10:46:32:ea:af:fd:
68:df:40:50:03:3a:ad:16:e2:65:e3:cc:b8:bb:22:03:7b:47:
0f:41:b1:cc:e8:a3:83:2c:82:cf:59:72:d3:9e:6e:e4:f1:a6:
ad:93:f1:b3:e1:8a:b3:13:47:d9:4d:ab:b6:82:6e:9f:e6:e1:
f6:1e:1b:3f:b3:b6:92:cc:a5:10:d0:c2:80:18:f4:41:67:b8:
e0:cd:a6:cc:03:de:ff:f6:f7:59:d9:8f:2c:fb:ae:de:e6:83:
b2:ef:0f:54:a9:e0:11:b1:39:81:61:a3:84:e6:b7:57:85:e3:
7f:69:f5:e1:ed:e9:07:63:d6:26:88:3b:9c:7f:1b:b1:24:13:
b8:5f:2e:99:84:44:2f:c1:08:bf:6d:95:52:24:52:34:f6:8c:
15:a4:63:f6:88:51:6f:0f:3f:46:ce:0e:d5:05:94:fe:b9:fe:
f8:15:82:d1:b5:c5:0d:b2:9e:ab:0f:44:ba:2c:43:8c:f9:87:
c2:2f:20:c5:3d:3a:6f:aa:e7:14:e7:2b:19:34:7d:6a:55:2d:
d9:ee:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:15 2025 by rpki-client