Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wRWXnWq0JeXR-u5LVmmIygE3e3c.roa
File: wRWXnWq0JeXR-u5LVmmIygE3e3c.roa (raw, json)
Hash identifier: HrxNN3jzSEDnR2amd5dNvHAGzVr1asxdZ+A3zOh9GNg=
Subject key identifier: C1:15:97:9D:6A:B4:25:E5:D1:FA:EE:4B:56:69:88:CA:01:37:7B:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019765C859CE614038C44A3F80416E39D657
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wRWXnWq0JeXR-u5LVmmIygE3e3c.roa
Signing time: Thu 12 Jun 2025 20:15:18 +0000
ROA not before: Thu 12 Jun 2025 20:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:b107:2691::/48 maxlen: 48
2a0e:b107:278a::/48 maxlen: 48
2a10:ccc1:1333::/48 maxlen: 48
2a10:ccc1:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 15:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:c8:59:ce:61:40:38:c4:4a:3f:80:41:6e:39:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 12 20:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c115979d6ab425e5d1faee4b566988ca01377b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:aa:62:67:3b:39:64:e1:43:85:ac:99:91:
94:ca:be:87:4b:81:8b:95:9a:83:89:2f:7c:80:e4:
4f:3a:cd:df:cd:a4:05:dc:88:ee:c9:ca:cb:37:db:
ea:ef:5c:81:13:e3:92:e2:e1:e1:1d:30:d8:80:29:
f1:1c:ef:9d:d1:2e:ba:38:51:f5:4a:9e:a1:69:83:
65:8a:b1:c0:69:44:1b:89:5e:5e:99:13:78:30:4c:
98:43:2a:0a:1b:48:e6:7f:a8:63:b7:d4:7b:8b:be:
40:26:04:d7:72:67:a3:8f:e9:16:20:6a:67:ca:d0:
2f:9c:6a:0a:29:d8:a4:63:73:c0:ef:75:a6:02:9b:
bb:a2:97:67:e7:a4:98:bf:8a:96:8d:17:16:93:c3:
7f:16:e5:b5:1e:ec:19:02:58:72:5a:2b:9f:88:d9:
f8:37:b8:ca:25:56:38:30:68:38:a3:bf:5c:79:1f:
49:94:be:58:03:4b:bb:1d:af:49:95:77:c9:00:b9:
f9:65:26:e3:80:e8:12:29:c2:ec:c7:50:58:23:90:
ec:24:a6:ac:e4:ce:10:5d:6c:e1:d4:3e:c6:ec:84:
a8:b3:1b:f4:36:ce:b9:5c:80:07:74:d9:84:3b:d5:
1c:42:38:c2:c5:5d:b7:e1:27:50:ce:23:95:94:9f:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:97:9D:6A:B4:25:E5:D1:FA:EE:4B:56:69:88:CA:01:37:7B:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wRWXnWq0JeXR-u5LVmmIygE3e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2691::/48
2a0e:b107:278a::/48
2a10:ccc1:1333::/48
2a10:ccc1:1337::/48
Signature Algorithm: sha256WithRSAEncryption
a6:5a:e2:95:09:36:93:ce:f1:c7:2e:9c:45:4e:8c:84:9b:b7:
61:61:d4:ec:0b:b1:e0:5f:7c:40:45:92:42:0d:90:dc:33:56:
75:af:a9:12:d9:35:e4:bb:fe:df:b1:ba:77:4c:91:15:eb:e2:
6d:92:ba:3d:b3:1c:f2:83:a9:77:1f:46:cb:5d:dc:1f:31:59:
51:e7:76:63:81:bd:e8:ab:4a:30:8d:da:ef:4e:f6:e5:e9:c0:
05:0b:fa:0c:ae:04:56:af:10:af:81:cd:54:00:34:4a:7c:20:
37:2b:dd:e0:0a:63:ed:57:66:f7:aa:cd:94:37:b0:f5:93:81:
e5:35:67:87:6d:a5:53:13:06:bb:e9:75:f2:0e:f8:c7:69:ac:
c4:2a:f3:52:b4:5c:bf:7a:c6:29:12:c7:81:fd:cb:75:22:5c:
83:fb:13:78:4b:3c:3d:9f:c7:07:40:a6:de:9b:51:8c:fe:64:
2c:40:57:d3:ca:18:39:d1:de:0d:e5:17:2e:ae:5d:c4:d3:1b:
32:33:40:19:c3:e4:a0:24:0d:b4:21:2e:a9:7f:55:83:65:eb:
6d:d8:9a:45:66:57:9a:45:29:c4:2d:74:fe:ad:bc:33:c8:87:
11:4e:c8:bb:e8:9a:3e:32:0e:e3:05:f7:55:83:9d:75:20:bc:
21:27:c7:a2
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZdlyFnOYUA4xEo/gEFuOdZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNjEyMjAxNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTE1OTc5ZDZhYjQyNWU1ZDFmYWVlNGI1NjY5ODhjYTAxMzc3Yjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/eqYmc7OWThQ4WsmZGUyr6HS4GL
lZqDiS98gORPOs3fzaQF3IjuycrLN9vq71yBE+OS4uHhHTDYgCnxHO+d0S66OFH1
Sp6haYNlirHAaUQbiV5emRN4MEyYQyoKG0jmf6hjt9R7i75AJgTXcmejj+kWIGpn
ytAvnGoKKdikY3PA73WmApu7opdn56SYv4qWjRcWk8N/FuW1HuwZAlhyWiufiNn4
N7jKJVY4MGg4o79ceR9JlL5YA0u7Ha9JlXfJALn5ZSbjgOgSKcLsx1BYI5DsJKas
5M4QXWzh1D7G7ISosxv0Ns65XIAHdNmEO9UcQjjCxV234SdQziOVlJ9eewIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFMEVl51qtCXl0fruS1ZpiMoBN3t3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvd1JXWG5XcTBKZVhSLXU1TFZtbUl5Z0UzZTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKg6xByaR
AwcAKg6xByeKAwcAKhDMwRMzAwcAKhDMwRM3MA0GCSqGSIb3DQEBCwUAA4IBAQCm
WuKVCTaTzvHHLpxFToyEm7dhYdTsC7HgX3xARZJCDZDcM1Z1r6kS2TXku/7fsbp3
TJEV6+Jtkro9sxzyg6l3H0bLXdwfMVlR53Zjgb3oq0owjdrvTvbl6cAFC/oMrgRW
rxCvgc1UADRKfCA3K93gCmPtV2b3qs2UN7D1k4HlNWeHbaVTEwa76XXyDvjHaazE
KvNStFy/esYpEseB/ct1IlyD+xN4Szw9n8cHQKbem1GM/mQsQFfTyhg50d4N5Rcu
rl3E0xsyM0AZw+SgJA20IS6pf1WDZett2JpFZleaRSnELXT+rbwzyIcRTsi76Jo+
Mg7jBfdVg511ILwhJ8ei
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:27 2025 by rpki-client