Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uuXGHACgPAOAMcaTIjUcW6tDG6w.roa
File: uuXGHACgPAOAMcaTIjUcW6tDG6w.roa (raw, json)
Hash identifier: LcZdKmuPwkJ4XMoJjMZOUBdEi2nrG8UlIAfUEGfEhWE=
Subject key identifier: BA:E5:C6:1C:00:A0:3C:03:80:31:C6:93:22:35:1C:5B:AB:43:1B:AC
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019A07E4730CADDC262071C0F8F540F91B88
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uuXGHACgPAOAMcaTIjUcW6tDG6w.roa
Signing time: Tue 21 Oct 2025 17:50:03 +0000
ROA not before: Tue 21 Oct 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205828
IP address blocks: 2a11:4043::/32 maxlen: 32
2a11:6584::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:e4:73:0c:ad:dc:26:20:71:c0:f8:f5:40:f9:1b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Oct 21 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bae5c61c00a03c038031c69322351c5bab431bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:7f:57:29:d2:b6:71:2f:c7:36:5c:00:cb:
80:4e:8e:21:0d:6f:ea:3b:17:e0:63:64:68:fa:be:
03:c2:bc:9c:cf:8d:f1:56:b7:b7:5e:34:bc:21:0b:
2b:57:ef:3a:81:77:68:84:75:cb:70:da:9e:ec:d8:
a5:99:e5:81:c5:6d:cb:b3:11:51:20:fe:25:0e:94:
cd:d0:ff:7b:da:4e:77:bc:5f:7a:d5:fa:98:9a:b5:
e1:bf:1b:06:5c:fc:89:0b:ef:43:66:e0:4e:83:c8:
a2:b8:36:19:94:85:fb:e1:61:e9:dd:2d:13:22:02:
2c:4b:4a:8d:9d:bc:d6:a1:e6:e8:8f:f0:dd:56:33:
12:0d:6c:76:8f:d8:6b:a8:65:b3:65:cb:5f:09:be:
a0:6e:f9:20:ce:fc:05:d4:bc:5a:34:5e:7e:5d:95:
04:70:1a:ee:5e:de:73:0e:52:92:cd:b8:b5:3c:02:
fb:2a:11:b9:55:6e:76:c2:40:d2:28:c1:60:a3:c6:
9d:85:c2:64:cf:a2:cf:f4:8f:53:2e:75:b3:23:bd:
de:99:5a:ac:b8:c2:04:f9:32:f4:74:62:56:b0:27:
f8:3c:62:3d:39:56:a1:c6:90:64:02:9e:49:3b:33:
af:dc:5c:eb:59:ac:14:f6:b7:d4:a4:ce:f4:a1:a8:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E5:C6:1C:00:A0:3C:03:80:31:C6:93:22:35:1C:5B:AB:43:1B:AC
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uuXGHACgPAOAMcaTIjUcW6tDG6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4043::/32
2a11:6584::/32
Signature Algorithm: sha256WithRSAEncryption
62:69:0e:ab:45:77:73:69:8a:e7:b2:2b:74:a3:9b:33:71:b3:
99:c6:7b:15:1a:ea:40:79:05:e9:8e:23:d3:b8:2f:3d:7b:c6:
f0:1d:79:ca:5a:42:16:cc:bb:b0:55:0b:a7:5b:89:8d:77:7e:
08:2d:06:5a:3c:1f:c4:38:e5:fa:b6:3a:02:1c:f5:ad:74:50:
da:73:3b:c3:cb:ba:fe:ab:07:c3:b8:e1:a9:ec:02:dd:a8:c4:
c8:b0:91:f3:e8:e6:51:98:74:60:52:55:b0:5f:d9:65:96:43:
a7:bf:4d:16:75:5e:4e:a4:0e:cc:2f:b2:4a:40:6a:7e:76:ac:
35:50:43:f4:61:af:de:ec:8f:7f:c5:31:27:93:71:09:da:4a:
20:8e:71:19:a2:81:c4:41:ca:6e:bc:57:bf:26:1e:28:f6:66:
5e:46:02:a7:a5:9c:02:e8:27:4c:13:20:a6:ad:0e:7d:01:2f:
75:58:e7:76:17:07:72:2f:d2:93:a3:5b:86:82:39:b5:fb:78:
e1:5c:c9:f2:05:fa:8d:30:37:a8:ce:19:0a:4b:de:13:18:3a:
0e:cb:2a:5a:53:7e:d2:32:86:51:30:85:6c:6b:b7:86:0e:d8:
b7:cc:15:e3:b6:c6:44:71:30:04:5d:bf:05:6d:42:ee:87:88:
14:c1:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:52:55 2025 by rpki-client