Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/M7kLPSjrj8qhOiEue3nlGsUFhMc.roa
File: M7kLPSjrj8qhOiEue3nlGsUFhMc.roa (raw, json)
Hash identifier: JJOuN5kjXGblbC3jm4hWAxzRtRPg4evN0bZEZMWP+es=
Subject key identifier: 33:B9:0B:3D:28:EB:8F:CA:A1:3A:21:2E:7B:79:E5:1A:C5:05:84:C7
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019A62F076FB3F7E0F07680F4598FB242AA2
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/M7kLPSjrj8qhOiEue3nlGsUFhMc.roa
Signing time: Sat 08 Nov 2025 10:08:37 +0000
ROA not before: Sat 08 Nov 2025 10:08:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203938
IP address blocks: 2a11:3a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:62:f0:76:fb:3f:7e:0f:07:68:0f:45:98:fb:24:2a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Nov 8 10:08:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b90b3d28eb8fcaa13a212e7b79e51ac50584c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:e1:5c:b8:00:e0:3e:32:da:8a:59:a8:41:
02:b1:ba:6b:67:84:eb:f8:64:41:16:8b:e5:12:5c:
24:e2:09:2c:d2:4f:2f:a8:17:9c:c3:27:54:fd:61:
e8:5f:df:4b:96:b7:7a:b4:0b:b5:90:c2:ab:d5:a2:
a6:f9:dc:6b:7e:89:ff:69:27:3e:81:be:23:c8:10:
7f:a6:88:12:35:f1:ed:5e:9a:c9:0e:63:9d:e9:5e:
7c:5f:65:8c:7b:e8:14:0d:d6:9b:c8:6b:78:32:08:
07:02:77:0e:63:5b:52:2b:bd:e2:a5:fd:76:d6:6e:
2e:cc:8b:eb:45:04:72:53:cb:dd:70:f4:9f:b6:9c:
8f:b8:a7:36:0f:33:22:9e:28:c0:ab:59:38:30:4b:
be:33:b4:79:64:93:03:89:85:fd:63:9f:10:11:ae:
c8:75:e8:54:e3:c6:f7:58:b2:31:6b:35:0a:83:ae:
22:c1:e9:2a:10:83:ce:59:79:5c:de:74:0a:a9:34:
b2:08:85:75:c3:fa:6f:c4:08:bb:3a:39:8a:25:80:
c4:9c:f4:d5:a4:9b:67:58:be:3b:9e:53:30:f7:6a:
a5:52:c3:73:9e:99:1c:f9:c3:c0:81:f1:99:a5:2e:
14:6d:b8:93:8f:87:79:8d:42:1a:33:26:82:0d:99:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B9:0B:3D:28:EB:8F:CA:A1:3A:21:2E:7B:79:E5:1A:C5:05:84:C7
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/M7kLPSjrj8qhOiEue3nlGsUFhMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
25:8b:0f:b3:20:a0:78:19:df:10:a6:05:e8:f5:d4:2e:84:14:
ac:8e:de:2b:cd:b5:40:c5:86:a8:8c:9e:9c:60:7d:2c:87:0e:
0d:48:c8:61:21:c0:d4:5f:61:4c:58:a4:42:06:ff:56:5e:21:
8c:e1:e1:55:aa:dc:36:9e:b9:9c:f7:8a:c1:fd:83:52:d5:78:
c5:3d:cf:66:21:84:d6:1e:0d:8b:0b:f9:f5:eb:8a:1a:d0:ef:
2f:e2:0f:7c:7b:7e:26:b6:33:47:ab:72:9c:57:52:55:44:19:
53:d6:75:b4:46:f5:65:a7:4e:c7:f7:26:87:c1:ed:34:97:c9:
e2:57:25:48:31:93:99:35:77:cf:4f:47:65:4f:4a:9c:89:7b:
45:fb:e6:16:ce:e3:71:00:93:f2:e1:e1:25:b1:60:69:f5:25:
7f:81:d2:68:3c:01:b1:75:a9:84:e0:a5:e3:4c:1e:ae:f6:d7:
51:94:e9:99:85:53:98:e1:20:48:96:c0:6f:e6:62:4d:a8:11:
6b:fe:c6:d5:a4:d8:95:a5:11:ee:29:7c:8c:ed:8d:00:45:24:
d7:e4:9a:4d:b3:28:02:2e:7c:71:6b:c5:7a:69:d1:3d:89:57:
e0:72:54:65:9f:d3:c3:90:a7:de:66:dd:32:fb:c5:e5:2a:3f:
68:3d:07:19
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZpi8Hb7P34PB2gPRZj7JCqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl
NGYyYzYwHhcNMjUxMTA4MTAwODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I5MGIzZDI4ZWI4ZmNhYTEzYTIxMmU3Yjc5ZTUxYWM1MDU4NGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrzhXLgA4D4y2opZqEECsbprZ4Tr
+GRBFovlElwk4gks0k8vqBecwydU/WHoX99Llrd6tAu1kMKr1aKm+dxrfon/aSc+
gb4jyBB/pogSNfHtXprJDmOd6V58X2WMe+gUDdabyGt4MggHAncOY1tSK73ipf12
1m4uzIvrRQRyU8vdcPSftpyPuKc2DzMinijAq1k4MEu+M7R5ZJMDiYX9Y58QEa7I
dehU48b3WLIxazUKg64iwekqEIPOWXlc3nQKqTSyCIV1w/pvxAi7OjmKJYDEnPTV
pJtnWL47nlMw92qlUsNznpkc+cPAgfGZpS4UbbiTj4d5jUIaMyaCDZlrXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDO5Cz0o64/KoTohLnt55RrFBYTHMB8GA1UdIwQY
MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt
NzRkOTFjZGJlMTk1LzEvTTdrTFBTanJqOHFoT2lFdWUzbmxHc1VGaE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1
LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhE6ADAN
BgkqhkiG9w0BAQsFAAOCAQEAJYsPsyCgeBnfEKYF6PXULoQUrI7eK821QMWGqIye
nGB9LIcODUjIYSHA1F9hTFikQgb/Vl4hjOHhVarcNp65nPeKwf2DUtV4xT3PZiGE
1h4Niwv59euKGtDvL+IPfHt+JrYzR6tynFdSVUQZU9Z1tEb1ZadOx/cmh8HtNJfJ
4lclSDGTmTV3z09HZU9KnIl7RfvmFs7jcQCT8uHhJbFgafUlf4HSaDwBsXWphOCl
40wervbXUZTpmYVTmOEgSJbAb+ZiTagRa/7G1aTYlaUR7il8jO2NAEUk1+SaTbMo
Ai58cWvFemnRPYlX4HJUZZ/Tw5Cn3mbdMvvF5So/aD0HGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:27 2025 by rpki-client