Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xubNt2Plu9ybuQ7r7pX_43LaCbA.roa
File: xubNt2Plu9ybuQ7r7pX_43LaCbA.roa (raw, json)
Hash identifier: VKxDUPQfiN80XPGVtns65ZpLHuscFkn/KbHyHFEe0gk=
Subject key identifier: C6:E6:CD:B7:63:E5:BB:DC:9B:B9:0E:EB:EE:95:FF:E3:72:DA:09:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01999ED995C167101ADB341D600B565A9431
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xubNt2Plu9ybuQ7r7pX_43LaCbA.roa
Signing time: Wed 01 Oct 2025 08:18:03 +0000
ROA not before: Wed 01 Oct 2025 08:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 2a06:de00:100::/44 maxlen: 48
2a0e:97c0:3e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:d9:95:c1:67:10:1a:db:34:1d:60:0b:56:5a:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 1 08:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e6cdb763e5bbdc9bb90eebee95ffe372da09b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:c3:24:b4:51:65:19:59:fa:cc:ee:ac:2b:
4d:c2:4e:d4:c1:2a:48:55:db:1b:df:cc:85:8d:1c:
52:54:0d:89:c1:a5:b3:04:59:36:a8:70:2a:25:2e:
ae:15:9f:45:2b:68:18:6b:7c:6b:dc:38:f5:63:00:
cc:94:97:ca:d2:d5:e6:78:04:d6:6a:8b:e7:94:16:
fd:62:d0:ad:d6:c4:48:38:0a:97:97:7b:7c:08:ec:
ae:3a:f1:d9:f9:93:d7:fb:0a:f1:6a:59:6e:e3:2e:
d8:61:04:9f:15:d6:aa:0b:b8:ac:c3:16:37:96:6d:
d7:93:46:f7:95:0c:d7:a4:f5:37:32:da:e5:26:a7:
06:65:c8:22:68:8f:74:37:49:54:b1:cf:74:c2:23:
8d:0d:3e:e1:6d:15:6f:ac:f7:be:3d:3f:c1:07:88:
43:20:7a:1c:6d:a5:e9:f5:06:0d:4d:b7:02:83:8c:
e8:80:5b:86:22:71:24:56:8d:f4:86:91:f7:93:bf:
b1:90:64:f6:98:a3:4a:84:33:ab:8f:75:bc:56:da:
a2:94:1b:53:ce:ee:7e:9f:3d:6d:11:99:7b:49:8a:
7a:c0:f7:cb:4f:8c:b8:8b:95:39:99:92:2c:8f:4d:
44:03:05:5b:2c:aa:54:86:a9:06:c7:ea:72:47:91:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:CD:B7:63:E5:BB:DC:9B:B9:0E:EB:EE:95:FF:E3:72:DA:09:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xubNt2Plu9ybuQ7r7pX_43LaCbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:100::/44
2a0e:97c0:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
01:cb:b6:6a:3f:4f:5f:b4:f4:8f:0f:8b:ae:41:9e:9d:f9:d9:
db:03:c7:2e:c0:6f:a4:9d:0b:40:39:64:ba:29:eb:10:ec:fc:
c9:11:29:e7:03:22:f1:4f:e0:9c:89:37:cb:c7:45:8f:c2:2b:
4a:c4:54:33:09:af:86:71:f5:76:27:63:f2:36:dc:08:81:da:
38:b8:af:c1:31:14:63:43:d3:27:f4:41:04:e5:4f:23:82:91:
32:72:25:5e:46:ed:6e:68:09:16:37:b7:5d:ec:4d:ea:8c:39:
d0:2e:40:84:24:f5:7e:0e:d1:a9:ae:11:f1:61:2e:5b:8a:0f:
21:24:18:8c:31:75:03:18:6b:af:b8:e3:24:3d:a1:b5:ec:b8:
85:3c:fb:87:c5:21:93:91:fe:d7:f7:df:8a:e7:4c:a0:c0:35:
a4:0c:a8:b0:04:a6:57:cf:1a:a1:c5:08:4a:7b:40:23:e2:f4:
63:34:fa:0a:75:1b:dc:b3:5f:4c:6f:31:99:40:cb:34:58:3a:
ec:fd:2a:21:02:f3:f4:10:88:92:99:a6:30:a7:17:53:71:58:
12:c0:09:4f:e1:b2:ff:1e:50:ad:b3:01:ef:10:07:4b:7e:93:
ec:7c:37:00:b1:b4:fb:c3:15:b4:48:50:63:83:28:6e:4b:fe:
d0:eb:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:10 2025 by rpki-client