Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/nOpnpLk5NAJl0__AJ-3xslH07XY.roa
File: nOpnpLk5NAJl0__AJ-3xslH07XY.roa (raw, json)
Hash identifier: We/d0dc/Anxfxl6Kd0nGwLns+hE9jp/nOrjRS2Waut0=
Subject key identifier: 9C:EA:67:A4:B9:39:34:02:65:D3:FF:C0:27:ED:F1:B2:51:F4:ED:76
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0197EB3A315349F2DB13A95800BF10F7A136
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/nOpnpLk5NAJl0__AJ-3xslH07XY.roa
Signing time: Tue 08 Jul 2025 18:09:08 +0000
ROA not before: Tue 08 Jul 2025 18:09:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a11:9fc0::/29 maxlen: 29
2a11:c440::/29 maxlen: 29
2a11:c540::/29 maxlen: 29
2a11:e7c0::/29 maxlen: 29
2a12:1880::/29 maxlen: 29
2a12:4500::/29 maxlen: 29
2a12:5580::/29 maxlen: 29
2a12:6600::/29 maxlen: 29
2a12:8800::/29 maxlen: 29
2a12:9700::/29 maxlen: 29
2a12:9e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:eb:3a:31:53:49:f2:db:13:a9:58:00:bf:10:f7:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jul 8 18:09:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cea67a4b939340265d3ffc027edf1b251f4ed76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:26:5b:86:ce:40:1d:a4:95:70:27:25:78:
ce:fb:4f:f0:01:e3:a8:e2:d9:8e:34:cd:c2:35:af:
1b:f8:5a:32:cb:e0:1b:a9:eb:38:2c:f0:69:44:f2:
e1:a7:b2:62:45:95:50:25:ac:ef:38:3f:b6:0d:54:
d9:19:57:8d:a4:01:9f:4d:04:ea:38:73:14:81:c9:
e1:d0:ff:87:ca:14:bc:12:84:23:bd:8d:b2:e3:f9:
42:5c:d6:4c:98:a1:9a:62:45:c0:31:4d:22:6d:38:
2e:73:8b:cf:d0:54:61:dc:df:e1:a7:cd:c5:e3:af:
7e:79:4e:b4:5c:9d:c3:08:07:24:20:96:f0:ea:21:
c4:b4:2e:42:e6:50:44:51:16:fa:20:0f:21:36:24:
67:75:32:6e:3a:27:0e:2d:16:a3:88:8d:f0:38:aa:
21:fe:b7:a3:16:ab:43:1a:f4:ee:9e:ff:dc:ca:3b:
0f:6c:c5:d1:d5:53:f1:f3:0e:b1:b6:a5:45:f4:23:
5a:7e:a7:80:6d:ff:a2:2b:c7:01:e5:e7:3c:8d:6a:
d7:ef:2f:73:77:27:ba:b1:6d:8f:83:1c:ea:e3:05:
ef:b1:f4:eb:ad:cc:42:e5:ca:72:cb:9a:e1:d5:15:
62:eb:96:71:cc:c9:2b:a6:4c:39:bf:52:f0:92:9f:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:67:A4:B9:39:34:02:65:D3:FF:C0:27:ED:F1:B2:51:F4:ED:76
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/nOpnpLk5NAJl0__AJ-3xslH07XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9fc0::/29
2a11:c440::/29
2a11:c540::/29
2a11:e7c0::/29
2a12:1880::/29
2a12:4500::/29
2a12:5580::/29
2a12:6600::/29
2a12:8800::/29
2a12:9700::/29
2a12:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
d6:df:45:fb:93:03:0f:f2:02:81:db:3d:f7:4a:15:91:0e:f5:
2c:4d:1e:86:09:8c:fe:da:26:a3:b7:c0:06:2b:2f:5b:08:50:
00:49:d7:92:8b:f1:53:eb:ca:a3:99:06:53:b4:cc:6b:1b:a5:
67:d5:61:a9:23:e6:55:c6:4e:dc:2a:11:7c:11:22:f3:71:bb:
94:66:5e:c0:1c:1a:4e:9e:54:ba:73:94:f4:3c:fa:77:f8:e3:
02:bd:f7:a4:9c:17:65:2a:3f:37:b7:de:d6:2d:69:7c:36:af:
0d:c8:48:c4:4b:cd:4d:01:b3:95:5a:d9:61:9d:53:78:63:1e:
f9:8d:f4:1f:d9:13:f0:2f:88:03:f9:1b:72:60:52:d7:d6:1a:
37:18:a0:2a:2a:82:89:41:42:c3:82:4c:ca:a2:b8:0a:31:5b:
f8:5e:90:12:13:c7:d8:bb:18:36:05:9b:05:98:9d:a7:33:42:
5c:28:b8:e9:61:5f:91:94:bd:7c:84:c4:d4:6f:60:12:99:d8:
77:60:26:bc:5f:c3:00:bd:c9:04:ce:ba:bd:7d:f0:b0:cd:fd:
30:da:e8:74:00:d1:81:3d:b4:58:09:13:4d:7b:36:27:2f:40:
97:28:ed:a3:d3:a0:ce:20:8d:4b:bf:91:72:98:9e:b6:76:76:
fe:61:9a:96
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAZfrOjFTSfLbE6lYAL8Q96E2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2
MDJmYmYwHhcNMjUwNzA4MTgwOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2VhNjdhNGI5MzkzNDAyNjVkM2ZmYzAyN2VkZjFiMjUxZjRlZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59wmW4bOQB2klXAnJXjO+0/wAeOo
4tmONM3CNa8b+Foyy+Abqes4LPBpRPLhp7JiRZVQJazvOD+2DVTZGVeNpAGfTQTq
OHMUgcnh0P+HyhS8EoQjvY2y4/lCXNZMmKGaYkXAMU0ibTguc4vP0FRh3N/hp83F
469+eU60XJ3DCAckIJbw6iHEtC5C5lBEURb6IA8hNiRndTJuOicOLRajiI3wOKoh
/rejFqtDGvTunv/cyjsPbMXR1VPx8w6xtqVF9CNafqeAbf+iK8cB5ec8jWrX7y9z
dye6sW2Pgxzq4wXvsfTrrcxC5cpyy5rh1RVi65ZxzMkrpkw5v1Lwkp/hnQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFJzqZ6S5OTQCZdP/wCft8bJR9O12MB8GA1UdIwQY
MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt
NTUxMDQxNzNiMTgwLzEvbk9wbnBMazVOQUpsMF9fQUotM3hzbEgwN1hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw
LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAAjBNAwUDKhGfwAMF
AyoRxEADBQMqEcVAAwUDKhHnwAMFAyoSGIADBQMqEkUAAwUDKhJVgAMFAyoSZgAD
BQMqEogAAwUDKhKXAAMFAyoSngAwDQYJKoZIhvcNAQELBQADggEBANbfRfuTAw/y
AoHbPfdKFZEO9SxNHoYJjP7aJqO3wAYrL1sIUABJ15KL8VPryqOZBlO0zGsbpWfV
Yakj5lXGTtwqEXwRIvNxu5RmXsAcGk6eVLpzlPQ8+nf44wK996ScF2UqPze33tYt
aXw2rw3ISMRLzU0Bs5Va2WGdU3hjHvmN9B/ZE/AviAP5G3JgUtfWGjcYoCoqgolB
QsOCTMqiuAoxW/hekBITx9i7GDYFmwWYnaczQlwouOlhX5GUvXyExNRvYBKZ2Hdg
JrxfwwC9yQTOur198LDN/TDa6HQA0YE9tFgJE017NicvQJco7aPToM4gjUu/kXKY
nrZ2dv5hmpY=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:15:30 2025 by rpki-client