Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_sZDnOjwV_Y2WPCHnt6GzXYy8v8.roa
File: _sZDnOjwV_Y2WPCHnt6GzXYy8v8.roa (raw, json)
Hash identifier: Pbk/Jl2oPdmyUBRebKPH4JHoPP2CNaUjsjn2Jfob7hk=
Subject key identifier: FE:C6:43:9C:E8:F0:57:F6:36:58:F0:87:9E:DE:86:CD:76:32:F2:FF
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 01991BB5819155677B09CA899DC2EAAAE2EC
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_sZDnOjwV_Y2WPCHnt6GzXYy8v8.roa
Signing time: Fri 05 Sep 2025 21:08:23 +0000
ROA not before: Fri 05 Sep 2025 21:08:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a11:1480::/32 maxlen: 32
2a11:6304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:b5:81:91:55:67:7b:09:ca:89:9d:c2:ea:aa:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Sep 5 21:08:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fec6439ce8f057f63658f0879ede86cd7632f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:5d:ca:64:c5:9a:c6:03:c0:07:c5:1f:e1:
fe:51:b1:93:ef:b2:31:83:00:1d:b0:70:24:60:15:
b8:4f:95:e8:26:e0:34:7e:0a:e2:79:1b:c4:68:a7:
75:99:e3:e2:2f:6e:7c:e1:53:47:95:88:b4:b5:45:
3c:08:7f:41:d5:f9:e6:c9:e0:14:f4:7b:80:12:33:
20:06:1b:3e:65:ba:ed:7b:2f:0b:07:c4:f0:70:9e:
51:01:a6:4f:0c:de:85:3b:5c:c2:39:df:78:84:b7:
e1:39:8b:84:fc:39:25:95:e6:73:24:15:f6:1e:82:
ad:c5:cc:b7:79:08:fe:53:c7:5a:cc:de:db:21:03:
ed:0b:88:4a:48:cd:08:97:e8:69:70:3c:bf:ab:39:
c6:16:26:e7:ff:65:e8:5f:93:6f:1d:4c:0f:a6:2f:
0a:35:36:ff:a3:1c:ad:21:2c:16:17:4e:1b:16:4e:
6b:91:b3:c2:c5:bb:e2:8a:10:40:24:7a:8e:9b:cc:
a1:04:b5:2c:17:7c:da:84:92:42:4a:0a:1d:ba:3b:
35:de:98:d4:e6:d6:27:54:9c:b2:bb:03:7d:71:0b:
68:2a:c4:a2:a8:1b:16:68:8a:02:a4:48:45:b6:71:
d3:41:78:7f:4e:e1:f2:71:86:19:61:b9:fd:d8:db:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:43:9C:E8:F0:57:F6:36:58:F0:87:9E:DE:86:CD:76:32:F2:FF
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_sZDnOjwV_Y2WPCHnt6GzXYy8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1480::/32
2a11:6304::/32
Signature Algorithm: sha256WithRSAEncryption
63:3d:d4:11:f5:e0:57:54:01:14:63:a1:6a:03:22:4e:4f:c4:
8b:e4:19:61:99:2f:4c:75:c0:f3:76:57:2f:74:48:8f:29:99:
00:82:c9:63:ab:22:31:99:9d:b9:84:7c:55:d3:81:12:20:37:
d9:3a:ed:77:26:7c:b0:7a:43:2d:48:e5:42:03:cd:50:b6:6f:
96:3e:1d:c9:73:14:60:ba:0c:6e:29:ff:eb:d5:11:53:7f:80:
66:67:eb:0d:ed:00:f2:9c:d3:73:25:e2:df:e7:0f:5d:5b:51:
c8:f8:f5:2b:14:7c:2e:b9:b9:46:cb:a1:58:09:f3:bd:a9:23:
bf:70:ff:ae:93:7a:e0:bb:84:ca:9c:1c:80:73:72:64:e4:17:
46:53:f1:8f:e0:f5:d0:82:a8:25:7a:4b:35:dc:0d:b6:79:f6:
8d:d5:59:76:2c:b0:82:92:64:b7:fd:c5:af:84:7c:6b:41:86:
2b:86:fb:3e:76:b9:2c:91:26:5f:68:73:77:b7:03:e0:a9:50:
3b:2a:f4:23:27:7d:b0:db:54:5c:b8:38:0a:bf:a9:da:4e:2a:
52:29:83:47:49:67:50:80:a7:fb:07:ae:d3:02:7a:00:04:04:
44:ff:85:dd:86:b6:ec:aa:b8:88:f0:ac:37:e1:a3:d5:55:43:
d7:24:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:54:05 2025 by rpki-client