Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6JplhpA1yqOrTh0Rhs-pRqI0wh8.roa
File: 6JplhpA1yqOrTh0Rhs-pRqI0wh8.roa (raw, json)
Hash identifier: DlN3gxNh05H5lMHITmDFKfx9ZVRweoZh2gmw+pb11yM=
Subject key identifier: E8:9A:65:86:90:35:CA:A3:AB:4E:1D:11:86:CF:A9:46:A2:34:C2:1F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0198805EEA837B2233764A7E60C04F518E3B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6JplhpA1yqOrTh0Rhs-pRqI0wh8.roa
Signing time: Wed 06 Aug 2025 17:12:40 +0000
ROA not before: Wed 06 Aug 2025 17:12:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e5c0::/29 maxlen: 48
2a09:96c0::/29 maxlen: 48
2a09:ae80::/29 maxlen: 48
2a09:b440::/48 maxlen: 48
2a13:4bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:5e:ea:83:7b:22:33:76:4a:7e:60:c0:4f:51:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 6 17:12:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89a65869035caa3ab4e1d1186cfa946a234c21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:ae:7f:98:63:a4:c9:f1:2e:aa:a6:f0:fc:
6c:24:5e:1d:85:96:4c:3d:e0:cd:86:7a:36:f5:17:
d0:18:a9:2a:76:76:f9:01:6d:95:00:c0:92:85:25:
42:91:f6:2a:87:6a:6a:ef:ff:06:6e:83:14:87:11:
3b:e5:65:a4:b0:d0:2f:3b:ee:26:40:b4:0e:41:03:
98:25:2c:0c:a8:26:29:ee:6d:c5:50:55:45:35:5f:
49:4f:0f:12:7e:c0:46:79:19:3b:7b:6d:ed:6c:7a:
88:22:07:aa:51:b5:17:e1:ce:1b:16:b4:d6:38:5b:
c8:db:b1:35:71:23:43:8c:7a:28:e1:97:7f:c3:c8:
49:9d:6a:00:50:04:03:24:b5:11:15:68:a0:de:fe:
ae:56:fb:3c:82:9f:8b:a9:28:6e:36:33:68:57:15:
60:e9:9f:ca:ff:f3:11:20:05:fb:64:30:28:9b:f2:
ed:5f:06:ba:5c:b9:2d:ab:c8:0e:66:8b:05:62:17:
74:df:50:55:18:80:c9:20:fb:4d:04:98:24:bb:53:
7d:d6:0c:cf:d5:81:db:1e:70:82:0d:39:13:e5:ac:
94:be:4c:9f:68:0f:9a:c4:72:48:3e:1c:76:38:c3:
7f:e2:0f:2a:36:1c:7b:38:98:a2:19:5b:e3:a6:49:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:65:86:90:35:CA:A3:AB:4E:1D:11:86:CF:A9:46:A2:34:C2:1F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6JplhpA1yqOrTh0Rhs-pRqI0wh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e5c0::/29
2a09:96c0::/29
2a09:ae80::/29
2a09:b440::/48
2a13:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
32:29:b4:c7:eb:fc:dd:0a:e7:09:e2:49:56:9c:76:5c:14:4e:
cc:05:85:c5:02:2e:80:ad:76:2d:ea:97:cc:5f:12:19:57:46:
da:73:06:55:58:05:d1:f6:fb:48:9a:60:c3:81:2b:50:cf:a2:
41:32:7d:a2:03:a5:29:9e:ff:b6:fa:c0:29:e9:4b:ef:79:e2:
37:c5:a6:f3:69:3f:01:3e:c3:c2:a1:ec:01:60:58:ee:dd:d6:
e0:95:11:48:79:fc:9a:83:50:d3:86:8f:42:be:0a:66:03:53:
66:04:22:dc:ab:7c:67:1e:ad:ca:cf:fd:db:20:5a:3c:c2:08:
87:21:04:f7:be:8e:f8:bd:97:55:01:f8:fb:b4:f2:16:da:cf:
b0:30:7d:66:28:09:0a:94:2f:e0:9f:9b:2d:ec:93:ba:ee:8b:
86:15:7e:93:7b:b6:45:a2:76:a4:4d:75:24:a9:35:f1:25:2c:
7e:91:d2:5a:e6:dc:31:3b:38:47:07:46:20:1f:be:ea:b2:e9:
fb:16:5b:b9:6f:36:64:2d:79:20:0f:eb:10:97:fb:41:72:b9:
61:be:9d:6f:91:27:dd:12:12:4d:77:f6:c0:73:02:71:2d:6f:
57:f0:16:34:2a:8b:98:56:f1:08:84:d3:f8:d5:f1:7a:d8:a7:
20:1f:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:11:55 2025 by rpki-client