
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa
File: rySq0elv3nKgzzBUgG2WJKXBTdw.roa (raw, json)
Hash identifier: 7V4fk9Lk2Il9VjP0Gksc4pn+aLvYyRSsqaeA9AfQ0jI=
Subject key identifier: AF:24:AA:D1:E9:6F:DE:72:A0:CF:30:54:80:6D:96:24:A5:C1:4D:DC
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0199EC613ACEF063DB6C08B9FD4415F495B1
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa
Signing time: Thu 16 Oct 2025 09:36:59 +0000
ROA not before: Thu 16 Oct 2025 09:36:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206560
IP address blocks: 2a09:6281::/32 maxlen: 32
2a10:4102::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:61:3a:ce:f0:63:db:6c:08:b9:fd:44:15:f4:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 16 09:36:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af24aad1e96fde72a0cf3054806d9624a5c14ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:00:eb:83:46:12:56:ea:18:91:b5:a9:90:
d8:dd:a1:05:fa:85:57:1c:ae:7e:5a:e0:19:f0:93:
4a:72:50:33:1f:d4:35:e0:40:04:1e:0b:32:e9:c9:
e7:6b:11:85:a5:03:f1:ff:0d:a9:a7:92:78:60:77:
4a:c5:1f:39:c6:01:4f:4e:dd:f8:f0:27:66:d0:01:
b4:d0:cd:8a:29:72:d9:0a:56:6b:83:49:8e:aa:2b:
71:b9:9d:2d:a1:74:79:c3:bd:a0:a1:a4:08:49:d0:
dc:99:6a:a7:71:d5:b4:77:b1:70:46:0f:81:ea:3b:
16:bb:70:9b:e8:20:e7:6b:fb:b1:b7:d6:72:96:99:
a2:a2:10:ac:4e:d0:50:33:de:aa:0b:b3:01:45:20:
d0:20:a4:94:01:9c:e2:5b:78:75:56:f4:bb:7b:80:
cf:27:e1:49:70:22:b9:88:18:80:4d:b9:98:28:b8:
df:30:7b:d3:5e:08:90:63:69:81:00:8e:b9:ce:f7:
e7:bf:66:da:ef:28:e4:4e:70:47:a9:52:f5:16:47:
dc:a3:c0:86:ac:e1:89:24:d4:1e:7e:f2:75:a4:4a:
85:d5:1a:e7:6f:14:59:fe:79:5e:7a:f5:71:b7:59:
a6:6b:44:8d:c9:db:94:e3:e6:84:7e:b0:bc:de:e1:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:AA:D1:E9:6F:DE:72:A0:CF:30:54:80:6D:96:24:A5:C1:4D:DC
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/rySq0elv3nKgzzBUgG2WJKXBTdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6281::/32
2a10:4102::/32
Signature Algorithm: sha256WithRSAEncryption
19:21:a1:6e:ea:fa:4c:d8:d2:94:40:9e:b9:df:7c:2d:90:b4:
2f:91:e3:46:41:eb:62:b2:6f:6c:6e:ec:0b:6a:d1:00:6a:44:
21:db:4d:2d:3c:89:a6:5a:39:15:bf:b5:db:0c:00:87:64:a1:
f5:fe:d1:d8:1b:17:7e:42:01:1d:1b:26:91:3c:55:cf:b0:46:
82:ef:40:5e:a5:a6:6f:72:7f:2a:c8:84:cd:b0:32:3b:11:f0:
54:82:bb:1c:23:c9:78:91:a7:15:8c:92:a2:59:f3:01:69:b8:
35:c4:21:a9:63:01:d3:a0:b1:9d:3d:de:2d:ff:aa:18:43:7b:
b9:c6:9d:6c:56:6a:ee:4a:cf:4a:e4:47:85:19:6b:69:6c:a7:
6c:19:92:eb:e2:e5:c0:2a:56:87:ca:25:83:b6:a2:45:87:cb:
b2:59:71:b9:76:28:e2:0f:68:cb:f2:d4:32:5b:6e:8d:37:ca:
f5:68:1f:89:2a:3a:fe:ec:8b:7a:bb:27:1e:3a:c5:ae:53:94:
83:66:18:ef:0d:a5:b6:b1:01:5a:3b:9c:5d:df:67:21:31:83:
84:bd:c8:99:7c:de:b0:db:a0:c2:02:be:ef:8c:f7:c9:84:6a:
0d:7a:d1:cc:2b:f4:a7:df:a7:71:a7:e7:f9:04:0d:3b:44:63:
89:e9:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:01 2025 by rpki-client