Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/1cg-3g0Asieg2TWgGUi9Y895K4c.roa
File: 1cg-3g0Asieg2TWgGUi9Y895K4c.roa (raw, json)
Hash identifier: O3gWsrzJY8YUGE1T9qZmAqra639XkrSHFO3BGJAYbMQ=
Subject key identifier: D5:C8:3E:DE:0D:00:B2:27:A0:D9:35:A0:19:48:BD:63:CF:79:2B:87
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019A07E47493B3A24220D48EF2FFD8695B1C
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/1cg-3g0Asieg2TWgGUi9Y895K4c.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215330
IP address blocks: 2a11:4045::/32 maxlen: 32
2a11:6545::/32 maxlen: 32
2a11:6583::/32 maxlen: 32
2a11:6d05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:74:93:b3:a2:42:20:d4:8e:f2:ff:d8:69:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c83ede0d00b227a0d935a01948bd63cf792b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6a:c9:fc:a0:fc:c8:c2:a3:e4:62:a7:1f:47:
20:01:58:38:8b:58:e3:00:56:46:47:cc:2d:e9:e8:
d9:81:ff:4e:dd:70:3f:f0:47:61:83:bb:c9:62:8a:
68:f3:1c:82:c3:c0:94:f0:0a:b5:fc:2e:23:6c:e2:
2c:c5:65:9d:27:1e:5a:7e:6f:da:a5:d2:4f:60:83:
6c:8e:ca:43:59:e8:1c:c9:3c:9a:c2:7e:89:37:7b:
2b:98:4f:22:a4:7c:03:4b:95:e7:c9:72:04:ee:9a:
e3:09:8b:5d:28:7d:46:4e:f6:7c:37:3d:c8:bd:98:
f1:51:d6:3d:f1:65:7f:db:f4:1d:8a:9c:8a:39:5e:
dd:0e:2a:52:a9:e2:4f:d9:90:91:bf:3f:2b:e1:8b:
01:b9:c9:8c:13:dc:3a:72:7f:ec:b3:07:ef:15:2b:
cb:dd:8c:0e:55:98:74:08:20:42:fe:d3:44:3e:bc:
89:6f:f9:b7:70:ac:d3:4b:dd:ce:52:8c:e9:52:96:
f7:9b:3f:56:2b:a6:11:b9:b0:e7:ae:5e:14:16:34:
af:b3:fc:fe:71:83:e9:4a:19:14:2e:9b:08:a2:3b:
9d:d1:b4:b3:04:de:29:34:b3:66:d4:52:45:89:5a:
1c:a6:a1:c2:6b:1e:c4:16:da:76:be:46:37:43:72:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:3E:DE:0D:00:B2:27:A0:D9:35:A0:19:48:BD:63:CF:79:2B:87
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/1cg-3g0Asieg2TWgGUi9Y895K4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4045::/32
2a11:6545::/32
2a11:6583::/32
2a11:6d05::/32
Signature Algorithm: sha256WithRSAEncryption
8d:fd:89:58:a5:87:aa:a5:6b:48:73:33:df:96:1c:eb:23:ad:
49:64:53:76:17:75:3e:97:4c:e2:b2:ce:16:0e:d1:e6:56:70:
ed:ab:0b:82:25:a4:05:84:ee:13:a4:c4:f3:c0:a9:29:9c:4e:
fb:f0:56:d8:e0:cd:a5:5a:99:57:c0:de:b1:ea:84:72:4c:4f:
05:22:d9:4d:37:db:62:c4:e5:72:a7:f6:c9:10:90:76:7f:a1:
8b:19:4a:00:be:6c:cb:05:d0:4a:45:55:e2:ca:ff:9c:3a:ee:
96:f6:46:39:fd:2b:f6:21:1a:8d:6e:31:34:bf:98:88:ef:7f:
31:d9:35:c4:64:ea:27:87:dc:b3:18:7f:79:b6:53:4c:27:0c:
83:77:c6:b4:13:1f:3f:9a:c5:f3:b1:2c:b1:a6:40:27:2a:b2:
c5:52:32:49:b4:87:3b:96:c8:c5:e8:63:b6:3b:c2:0a:88:7e:
0f:db:ce:82:88:8b:07:49:54:d6:b7:9d:04:34:d4:5e:07:41:
12:f1:98:18:29:fd:c0:20:c8:76:11:e5:83:69:59:0c:c8:6d:
74:41:15:9c:06:1c:a7:85:53:0d:bd:0f:eb:b1:ba:d2:9a:da:
43:f2:77:4c:ba:cb:89:38:f1:a0:a7:28:f6:aa:13:99:64:a3:
1f:79:e7:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZoH5HSTs6JCINSO8v/YaVscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx
ODhlYTcwHhcNMjUxMDIxMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWM4M2VkZTBkMDBiMjI3YTBkOTM1YTAxOTQ4YmQ2M2NmNzkyYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WrJ/KD8yMKj5GKnH0cgAVg4i1jj
AFZGR8wt6ejZgf9O3XA/8Edhg7vJYopo8xyCw8CU8Aq1/C4jbOIsxWWdJx5afm/a
pdJPYINsjspDWegcyTyawn6JN3srmE8ipHwDS5XnyXIE7prjCYtdKH1GTvZ8Nz3I
vZjxUdY98WV/2/QdipyKOV7dDipSqeJP2ZCRvz8r4YsBucmME9w6cn/sswfvFSvL
3YwOVZh0CCBC/tNEPryJb/m3cKzTS93OUozpUpb3mz9WK6YRubDnrl4UFjSvs/z+
cYPpShkULpsIojud0bSzBN4pNLNm1FJFiVocpqHCax7EFtp2vkY3Q3KknQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFNXIPt4NALInoNk1oBlIvWPPeSuHMB8GA1UdIwQY
MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt
ZTU3NjhkNmIxODJjLzEvMWNnLTNnMEFzaWVnMlRXZ0dVaTlZODk1SzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj
LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhFARQMF
ACoRZUUDBQAqEWWDAwUAKhFtBTANBgkqhkiG9w0BAQsFAAOCAQEAjf2JWKWHqqVr
SHMz35Yc6yOtSWRTdhd1PpdM4rLOFg7R5lZw7asLgiWkBYTuE6TE88CpKZxO+/BW
2ODNpVqZV8DeseqEckxPBSLZTTfbYsTlcqf2yRCQdn+hixlKAL5sywXQSkVV4sr/
nDrulvZGOf0r9iEajW4xNL+YiO9/Mdk1xGTqJ4fcsxh/ebZTTCcMg3fGtBMfP5rF
87EssaZAJyqyxVIySbSHO5bIxehjtjvCCoh+D9vOgoiLB0lU1redBDTUXgdBEvGY
GCn9wCDIdhHlg2lZDMhtdEEVnAYcp4VTDb0P67G60praQ/J3TLrLiTjxoKco9qoT
mWSjH3nntg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 22:52:51 2025 by rpki-client