Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6jbWoT5aybGRoPppA4uKhHpi51M.roa
File: 6jbWoT5aybGRoPppA4uKhHpi51M.roa (raw, json)
Hash identifier: gFs+gENc2btBVx1dWOs1qACWff52MJLlO91fJMzppAE=
Subject key identifier: EA:36:D6:A1:3E:5A:C9:B1:91:A0:FA:69:03:8B:8A:84:7A:62:E7:53
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019A07E473B1E119DAC3672B04E74590097A
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6jbWoT5aybGRoPppA4uKhHpi51M.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213294
IP address blocks: 2a11:6543::/32 maxlen: 32
2a11:6546::/32 maxlen: 32
2a11:6585::/32 maxlen: 32
2a11:6587::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:73:b1:e1:19:da:c3:67:2b:04:e7:45:90:09:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea36d6a13e5ac9b191a0fa69038b8a847a62e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:f9:d3:58:8f:f4:aa:e9:a1:5d:62:50:80:
db:50:b3:66:71:57:2c:13:cd:2d:c5:c2:43:4d:a3:
cc:d1:e0:ba:92:6e:57:7e:53:1a:b7:62:bf:ff:dc:
4d:76:0f:67:54:f5:b4:2a:88:56:f6:ce:eb:1e:d6:
53:67:ed:45:36:71:3b:3b:d7:a7:8a:d2:4a:8f:6c:
11:2e:11:77:45:72:7e:6a:71:e9:87:ba:ad:21:ef:
43:fb:7a:97:64:1c:f8:ae:0e:ff:91:fe:24:b4:11:
b3:93:1e:cf:3f:04:a4:c8:b5:a7:6f:2f:75:2c:19:
b2:b5:f0:66:b9:17:81:57:c7:4e:6c:3e:fb:6c:16:
6b:14:c7:94:30:04:80:40:99:96:99:f7:c1:0c:f0:
8b:fd:37:a1:90:ff:87:6d:c2:0a:96:46:1a:e3:59:
cd:5f:0b:a9:a3:cc:58:ee:fa:51:51:7e:d9:2a:96:
3f:d9:e1:38:45:ee:c3:f7:ec:b3:04:8f:e7:0b:fa:
ea:63:96:0a:89:f8:8c:a2:15:c6:c9:63:fe:da:3e:
0d:68:3c:35:28:67:ca:46:80:7e:af:39:22:f7:21:
46:b4:a5:3b:50:3c:ab:22:15:96:1a:35:b8:68:99:
03:30:1f:ec:ce:a4:29:e2:55:21:c2:4d:1f:cc:b8:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:D6:A1:3E:5A:C9:B1:91:A0:FA:69:03:8B:8A:84:7A:62:E7:53
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/6jbWoT5aybGRoPppA4uKhHpi51M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6543::/32
2a11:6546::/32
2a11:6585::/32
2a11:6587::/32
Signature Algorithm: sha256WithRSAEncryption
bb:ac:33:d5:2e:7e:e2:da:63:08:a7:59:b7:13:fa:b7:8a:df:
d7:53:3d:8c:b6:1b:47:34:ce:4d:be:6e:24:27:9b:97:e9:16:
5b:f3:17:bf:9a:98:92:85:22:f9:eb:a9:ea:fd:6d:37:7a:70:
93:8c:ef:24:35:02:a8:ce:61:f9:35:5e:ed:ef:ed:3b:f5:22:
5f:53:9a:4a:ff:3a:57:39:d5:7f:f5:b7:6b:aa:3e:ac:21:86:
f4:ba:c5:94:fb:fe:33:6c:05:1a:bd:4d:6c:b1:1b:c8:ba:e3:
8f:a2:90:1d:70:e9:2b:75:ed:bf:8a:7d:1b:2d:24:35:4a:d2:
f8:4b:ef:24:10:17:7e:be:67:8b:8d:10:a2:b9:4b:44:f0:8b:
ff:42:67:0f:93:69:b7:7e:26:b8:09:61:7a:2f:2b:a1:a8:9a:
46:a9:14:72:f9:ff:6e:15:3d:24:7a:b9:04:73:80:1d:b2:ef:
af:31:5a:90:a2:f4:b8:6a:a9:7b:c8:93:1f:5b:d0:57:19:1c:
67:5c:c7:79:97:2f:bb:34:f1:c7:b1:08:f4:f2:bf:92:a7:8f:
a7:3f:90:bb:d1:b2:4e:93:15:bf:65:38:b6:7e:4c:bb:61:70:
1b:7b:29:d8:d6:66:9b:1d:7f:d3:9b:8a:d1:ee:a6:5d:24:75:
e0:3e:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:52:49 2025 by rpki-client