Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/63AfX9tGzLI8rOFx7JtlMNOTY9k.roa
File: 63AfX9tGzLI8rOFx7JtlMNOTY9k.roa (raw, json)
Hash identifier: MhOy0HHNjwbzh6TENPcem2eo6wIFhE2BTgKzC1N8oTk=
Subject key identifier: EB:70:1F:5F:DB:46:CC:B2:3C:AC:E1:71:EC:9B:65:30:D3:93:63:D9
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 019977C5EBB9BF169E065A9E3673E49544AB
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/63AfX9tGzLI8rOFx7JtlMNOTY9k.roa
Signing time: Tue 23 Sep 2025 18:11:23 +0000
ROA not before: Tue 23 Sep 2025 18:11:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212433
IP address blocks: 195.35.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:c5:eb:b9:bf:16:9e:06:5a:9e:36:73:e4:95:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Sep 23 18:11:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb701f5fdb46ccb23cace171ec9b6530d39363d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:de:c9:b5:4e:75:ec:ab:e7:20:39:57:c0:
92:da:dd:fc:be:a5:49:b3:2f:37:6e:e6:d0:df:87:
31:33:b6:da:f6:d9:86:70:7c:32:39:a0:20:bb:7f:
2b:9c:0e:d8:13:a7:34:42:60:bc:b9:af:c4:27:ee:
69:f7:1e:e6:11:e1:39:25:c0:5d:ea:50:6a:12:56:
dd:28:c5:82:68:91:15:36:a7:1e:38:5c:36:fd:1a:
82:ed:73:a9:b2:33:e3:87:17:b6:96:ec:3c:0a:43:
e1:ed:2b:18:1d:ae:b8:75:41:89:b0:e5:9f:01:04:
1e:e8:7a:6d:e3:45:ce:ec:15:11:ff:2c:83:41:a2:
be:06:63:b0:3a:77:f9:ba:f3:f2:aa:8e:13:ba:48:
aa:eb:55:5a:04:ba:fc:54:bf:46:84:af:21:50:9b:
e0:c7:91:b9:9e:64:1f:cd:b9:3c:f2:87:26:be:e3:
5c:3c:4d:7d:8a:d5:4d:9e:2a:0a:c4:48:7e:8c:8c:
17:d1:2b:cc:52:0c:19:36:00:fb:a5:14:74:d9:1b:
16:32:5d:7b:f5:1b:24:71:44:3f:b5:0f:c8:4f:ad:
ad:ca:e7:0c:3a:d4:a6:48:65:7b:4a:57:4b:d7:df:
05:ba:4f:f4:78:59:0c:1f:9c:e7:32:7f:aa:32:af:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:1F:5F:DB:46:CC:B2:3C:AC:E1:71:EC:9B:65:30:D3:93:63:D9
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/63AfX9tGzLI8rOFx7JtlMNOTY9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b0:e0:fe:c7:5a:b9:eb:3a:51:95:05:1f:63:a8:85:eb:b8:
1c:21:6a:e0:71:21:9b:ac:9b:49:e2:80:78:56:03:f5:7c:dd:
42:3a:fd:35:df:d0:30:44:2e:4d:1e:0f:34:fd:5a:47:02:85:
0e:bb:38:cc:56:4e:58:c0:1a:41:60:27:2a:67:e3:16:7a:80:
1b:d4:a2:3c:f2:d7:9e:1a:08:c1:4b:76:e0:0f:79:09:ce:79:
c0:29:61:71:dd:85:c6:e3:cf:ba:b6:73:94:95:61:8b:ed:c6:
a7:54:10:cc:aa:74:e9:14:28:8f:46:95:4e:8b:01:27:e1:26:
40:54:65:37:34:c5:2d:ab:f0:ff:4e:2d:6f:b3:d8:b2:35:52:
93:f2:7b:fc:92:ae:d2:64:fe:6c:c6:20:a2:cf:38:f7:6d:f8:
2d:84:c8:3f:de:54:d4:fe:f4:73:2d:6c:a7:07:58:7e:36:23:
6e:33:20:2c:ff:88:d3:1d:e3:5f:76:a0:1e:96:d0:51:a6:3c:
7e:68:5c:62:15:aa:3e:98:28:7f:ac:d1:01:8d:2c:7b:a9:f9:
b0:11:20:e9:5c:16:99:79:c7:76:e1:fc:dc:79:62:88:c3:06:
78:ba:64:be:00:07:90:46:a1:de:8c:82:e3:6c:42:bf:62:68:
ca:43:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:38 2025 by rpki-client