Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GB6mKyeT7IQ3NBN03P0IFu3CVw4.roa
File: GB6mKyeT7IQ3NBN03P0IFu3CVw4.roa (raw, json)
Hash identifier: T6k8VJ451vn3VlwZK1Z+3bPdrZ4MX2kwcGAC1IMdNwo=
Subject key identifier: 18:1E:A6:2B:27:93:EC:84:37:34:13:74:DC:FD:08:16:ED:C2:57:0E
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019A07E473F0E357D8309BD6A5CB75BEA7C7
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GB6mKyeT7IQ3NBN03P0IFu3CVw4.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a11:6586::/32 maxlen: 32
2a11:9f40::/29 maxlen: 29
2a12:2040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:73:f0:e3:57:d8:30:9b:d6:a5:cb:75:be:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=181ea62b2793ec8437341374dcfd0816edc2570e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:16:dd:6b:f2:a6:aa:b7:d5:e6:0e:11:4e:
61:cf:44:8e:62:45:79:0a:33:c5:c0:d0:fa:a5:98:
fb:07:ea:81:f9:bd:e4:1b:21:ac:b1:4e:dd:89:d2:
6c:aa:12:20:11:42:a7:10:e8:cd:0e:a1:7b:54:1d:
1e:16:63:32:09:b4:26:d7:91:ce:de:83:df:77:07:
0e:47:02:c3:f7:be:6e:56:0f:81:4b:38:49:6f:ed:
6c:01:cd:f8:5e:3f:0f:61:3a:a2:fa:b4:05:72:6f:
4d:e1:fd:1f:f7:f8:a4:ac:48:74:02:9a:ed:ac:1c:
e3:72:00:2e:1c:86:78:13:a2:37:b4:f0:21:ce:fc:
77:dc:95:d5:bb:28:73:e1:9f:eb:be:07:23:57:ab:
49:19:6e:af:7b:5a:4c:fa:1e:c4:9a:3e:2f:9f:5f:
1a:44:65:7a:b2:25:c4:89:9a:be:0d:09:3b:ab:6e:
08:ac:06:45:cc:a4:7a:1d:28:a6:0a:ae:cf:2a:57:
4c:d0:d1:7d:27:fd:42:3e:ee:03:1d:04:56:d5:ac:
cb:1c:b2:a5:50:e2:96:a0:b5:f7:3a:c4:c4:74:be:
0b:1d:96:fe:b6:21:f9:6c:06:b3:15:d4:89:b7:bc:
aa:a9:68:05:57:2f:d6:4f:90:e2:36:7d:ac:5f:52:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:A6:2B:27:93:EC:84:37:34:13:74:DC:FD:08:16:ED:C2:57:0E
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/GB6mKyeT7IQ3NBN03P0IFu3CVw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6586::/32
2a11:9f40::/29
2a12:2040::/29
Signature Algorithm: sha256WithRSAEncryption
66:ba:9d:d1:0e:7a:c5:31:79:c2:fd:7d:1b:47:90:66:1f:87:
ce:f2:ad:d0:8b:03:d0:53:21:41:bd:d9:c9:f2:3b:bf:8d:7d:
d0:d8:35:2c:78:f5:40:22:4f:da:0b:15:d4:af:81:ad:47:2d:
48:c1:80:59:77:67:58:1d:fc:72:42:d2:9f:1e:fd:5a:90:c3:
e8:4b:f4:a0:f8:9c:3d:c7:a7:e1:3d:a6:71:36:cf:a7:c9:af:
54:e3:c4:a8:f9:65:a6:8e:03:5e:1d:3b:b0:7c:be:14:83:62:
02:e5:55:8b:b9:73:0f:95:4f:c3:22:1d:f9:e1:3d:16:fb:23:
71:15:f4:67:8f:29:df:f0:a8:3c:64:67:4a:3c:0e:4e:06:04:
b0:59:86:73:01:6e:ac:24:56:d3:8e:ef:4a:7b:44:5c:0e:31:
2f:fe:fe:30:e6:cd:91:5b:80:79:a8:9d:d3:84:2d:ae:39:51:
cf:4a:29:a9:99:00:dd:93:ae:4c:5c:2b:11:ae:6d:4a:c5:c0:
9f:9d:ca:44:bc:0f:bb:57:5d:ab:e6:74:3f:ec:12:cc:38:80:
07:7b:33:e4:5d:11:33:3e:d3:3f:11:2c:fb:af:62:9f:3f:92:
5e:56:a4:9e:b6:98:41:82:39:77:d3:05:70:c3:67:fb:b3:99:
75:81:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:04:48 2025 by rpki-client