Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75vgzgEJEQ9FS4yH9v1RFg1FhLo.roa
File: 75vgzgEJEQ9FS4yH9v1RFg1FhLo.roa (raw, json)
Hash identifier: TEk199dzZke7OyGbOSSMlJCTSDmAoAb/AxjYa8icW9Y=
Subject key identifier: EF:9B:E0:CE:01:09:11:0F:45:4B:8C:87:F6:FD:51:16:0D:45:84:BA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0197518D374395F3E6748553CB821159333F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75vgzgEJEQ9FS4yH9v1RFg1FhLo.roa
Signing time: Sun 08 Jun 2025 21:58:18 +0000
ROA not before: Sun 08 Jun 2025 21:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
2a10:ccc2:1330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8d:37:43:95:f3:e6:74:85:53:cb:82:11:59:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 8 21:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9be0ce0109110f454b8c87f6fd51160d4584ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:26:d0:66:8a:b7:46:f8:d3:ee:d7:73:de:
6d:cb:94:00:86:31:9f:9e:6b:db:1c:b6:3b:d2:db:
6f:f8:62:8b:a3:ad:21:b2:01:dd:c3:1a:4d:b7:c5:
65:b8:71:84:03:28:45:c6:e3:32:9a:ba:a9:89:08:
4a:83:b0:d2:39:c8:d1:42:81:30:0d:cb:29:e1:fc:
f5:44:ea:5b:84:61:43:df:fe:45:76:e3:23:ef:c6:
4a:a2:1c:b9:c8:d2:fc:6e:4e:c4:e1:cd:4c:4b:ef:
b0:16:8f:8b:f6:80:9a:9e:c0:f8:cf:e3:ae:8f:03:
6c:9b:dd:3d:4a:03:68:19:07:4f:25:cc:79:dc:df:
f4:f1:cf:1e:01:da:63:90:cb:d3:03:06:a0:32:65:
6e:74:dc:91:be:89:c3:31:b5:f1:eb:ab:94:a1:b6:
9f:c8:c2:fb:c5:c7:ca:11:a6:71:49:f4:29:d8:f9:
b8:d5:5a:53:3a:7b:78:c7:b7:8e:d8:78:fe:13:bf:
ce:47:e7:c5:82:b9:fc:f9:e1:74:45:54:98:c0:69:
f1:76:d3:06:7f:f4:83:4b:e7:a6:24:a6:1d:1d:a3:
27:58:64:1a:8a:4d:71:69:f9:a7:50:ad:34:12:6b:
39:52:da:f2:09:b1:53:67:3b:a2:6b:38:75:d5:ce:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:E0:CE:01:09:11:0F:45:4B:8C:87:F6:FD:51:16:0D:45:84:BA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/75vgzgEJEQ9FS4yH9v1RFg1FhLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc2:10::/44
2a10:ccc2:1330::/44
Signature Algorithm: sha256WithRSAEncryption
5e:9e:58:5f:c2:c5:d7:cd:3f:ab:a4:cb:01:5d:71:ac:3c:55:
0d:c7:f8:52:58:fb:27:71:ea:77:f8:c4:eb:ea:f6:be:3b:5c:
f2:9e:06:98:ed:7c:2d:2e:9a:4a:38:f5:5e:49:b5:32:03:91:
33:91:71:ea:e4:39:cb:87:a8:de:f3:8d:c6:98:36:8d:2f:94:
e5:e4:1c:d4:db:07:ef:48:40:d2:b7:64:55:c9:28:9c:a7:0e:
57:9d:3f:1c:79:9f:9d:59:25:b0:a1:c3:90:a6:fc:6d:ce:45:
a3:b5:c0:77:9e:5e:48:c3:65:d0:a3:53:2c:d6:0d:de:34:70:
04:04:aa:45:10:e6:14:9a:1f:80:07:0b:ae:85:a8:74:32:f1:
86:ca:39:83:4e:5f:4c:16:00:da:a8:b0:d1:87:a6:e3:75:5c:
b5:d2:a4:9e:00:a0:d6:f7:d1:83:c1:84:3c:f4:c7:7d:0f:12:
73:eb:c5:04:2a:75:d9:45:7b:ab:2d:db:6f:39:22:bc:72:57:
6a:5a:d4:70:d2:04:9d:a5:64:a2:3c:8d:35:22:db:29:d2:dd:
66:0d:f3:48:99:dc:1d:5e:b9:26:58:59:e1:22:b5:62:b0:84:
28:33:16:64:19:ba:cc:9b:d3:02:c3:de:24:7d:2f:ff:15:a4:
d2:b8:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:33 2025 by rpki-client