
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lh3RaXVE0UPyyIOsIV_KSOP5Lao.roa
File: Lh3RaXVE0UPyyIOsIV_KSOP5Lao.roa (raw, json)
Hash identifier: 5AxTVIIo8cWCjxCtdv1XuH8MoIMRB2lKsi/SmUU9beE=
Subject key identifier: 2E:1D:D1:69:75:44:D1:43:F2:C8:83:AC:21:5F:CA:48:E3:F9:2D:AA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01983789AA9F706859173595A0971B9AECD8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lh3RaXVE0UPyyIOsIV_KSOP5Lao.roa
Signing time: Wed 23 Jul 2025 13:47:05 +0000
ROA not before: Wed 23 Jul 2025 13:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209552
IP address blocks: 2a06:de01:c0::/44 maxlen: 48
2a06:de01:c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:89:aa:9f:70:68:59:17:35:95:a0:97:1b:9a:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 23 13:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e1dd1697544d143f2c883ac215fca48e3f92daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:55:b6:08:b7:9c:0e:df:e7:87:e3:23:e7:
62:c3:66:95:62:4f:8b:e6:1e:7d:16:e7:fd:ce:94:
4c:49:7e:b9:93:42:78:23:64:cb:dc:16:0b:0e:58:
be:80:60:a0:ea:de:3e:d0:62:75:c1:38:cc:54:80:
48:ba:3d:c6:47:de:25:e6:bf:0e:cf:6c:67:ba:06:
f2:88:30:90:91:1e:b5:9b:9d:8e:26:87:8a:56:b5:
90:c8:a9:59:46:86:e5:ad:66:f6:02:b1:b3:f7:64:
d6:c1:90:92:b9:f5:99:96:7d:c9:c8:e5:54:8c:bc:
e1:0a:94:f1:d4:18:91:8c:24:57:59:a7:b9:3a:a5:
9c:12:37:d0:14:82:0f:e6:28:90:56:07:2e:4c:14:
1b:d7:d8:66:06:76:49:08:67:f4:db:17:91:fb:ff:
d6:44:c3:f5:d0:f7:79:c3:3f:d3:f2:de:a8:86:ca:
f3:af:16:e7:c4:87:a8:3f:ea:79:7f:48:01:b6:66:
39:5b:6e:49:fb:88:70:7e:ea:59:45:68:97:2f:8c:
09:7e:62:00:79:f1:09:a1:41:27:58:c1:ce:3e:73:
fd:c1:57:98:d4:6c:b0:3c:0b:dd:6b:be:17:c1:a6:
15:61:18:e2:84:ee:01:8c:0c:23:06:37:90:c0:59:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:D1:69:75:44:D1:43:F2:C8:83:AC:21:5F:CA:48:E3:F9:2D:AA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Lh3RaXVE0UPyyIOsIV_KSOP5Lao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:c0::/44
Signature Algorithm: sha256WithRSAEncryption
1e:b8:88:e2:e2:15:aa:0c:29:64:34:ff:46:e0:ea:4c:6d:1d:
04:0f:81:c6:38:07:31:c4:f2:f5:00:b5:dd:e4:80:bd:64:4f:
76:50:7c:6f:ab:d4:f3:27:cc:37:07:b4:9a:25:d9:17:d2:dc:
dc:af:87:77:62:25:c5:93:24:a2:db:f2:91:7e:c7:28:4a:a6:
a2:e4:23:cd:74:e0:31:86:54:aa:04:b1:9a:d2:c1:53:e9:e5:
b5:2a:9c:16:a7:f7:cb:3d:66:e4:28:96:62:41:a8:77:a1:df:
7a:bc:3c:f0:39:08:90:bf:4e:e8:ca:f8:43:9c:0f:97:48:90:
9d:7f:cf:99:31:76:8b:de:9d:29:70:32:53:8d:df:de:bf:4e:
ad:27:7c:39:a5:82:4c:74:dc:97:ad:06:3c:3d:11:6c:1e:2c:
16:f6:d5:c3:2b:ae:b3:57:80:7b:15:c0:24:b0:28:3b:d3:9f:
c3:c1:b7:32:41:3a:dd:e6:cc:bd:cd:50:2a:20:dc:c8:cd:57:
80:b6:3f:1e:68:23:ce:36:ed:ff:f5:82:23:81:9d:dc:48:f3:
42:56:c4:f7:82:09:ee:22:d1:e4:d7:6d:57:34:e7:fd:0f:15:
bb:ec:f9:f0:08:7c:26:74:d6:cb:62:11:56:c6:19:40:0f:10:
61:15:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:08 2025 by rpki-client