Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5zKqr6UDqGwikI9jCkgboh0BQd4.roa
File: 5zKqr6UDqGwikI9jCkgboh0BQd4.roa (raw, json)
Hash identifier: L9SiZv7/wPoH1cUSkcCw00SZkLD8nXCQG8Qy1hpNlK0=
Subject key identifier: E7:32:AA:AF:A5:03:A8:6C:22:90:8F:63:0A:48:1B:A2:1D:01:41:DE
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 01991BA7CAC1BBBF1855D64BD0C6E6EEB2F9
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5zKqr6UDqGwikI9jCkgboh0BQd4.roa
Signing time: Fri 05 Sep 2025 20:53:24 +0000
ROA not before: Fri 05 Sep 2025 20:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215330
IP address blocks: 2a11:c446::/32 maxlen: 32
2a11:c540::/32 maxlen: 32
2a12:8800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:a7:ca:c1:bb:bf:18:55:d6:4b:d0:c6:e6:ee:b2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Sep 5 20:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e732aaafa503a86c22908f630a481ba21d0141de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:b1:e7:a7:37:c2:71:3f:f8:67:e6:46:43:
af:d6:6b:15:6d:71:49:79:d1:91:54:7f:6b:91:35:
46:2d:59:4b:06:f7:e7:f3:52:92:81:08:c4:e1:63:
8d:50:e4:da:6c:b0:c7:e5:4e:58:c5:d1:d4:5b:68:
64:eb:ee:09:36:49:13:d5:32:3e:39:50:a3:ef:d7:
72:ed:39:a8:09:ed:a7:45:ed:3c:a3:ba:f3:20:42:
21:12:4e:cc:9c:a4:59:5c:b6:e8:d4:76:47:2a:3d:
13:27:9c:34:b2:02:27:bd:e1:f6:29:ee:f8:5b:cd:
dd:8f:57:e9:3d:14:e2:4f:0f:e7:03:85:d8:2c:95:
26:8a:99:5e:ab:b1:ab:d5:2c:00:4a:42:35:2e:4b:
8c:90:c8:75:7b:23:16:93:ab:d2:44:a1:d4:15:42:
6d:44:75:2e:4f:c4:f0:40:d4:ea:ac:03:34:32:10:
cd:00:60:85:ff:e8:ec:02:e4:f0:9c:94:d1:72:46:
23:a6:74:06:93:9c:1f:d2:bb:6a:a0:85:bd:f5:a4:
61:b8:9d:59:62:94:fc:9a:c7:6a:cb:96:b8:3e:57:
ee:ab:8f:cf:5f:d6:cf:e9:35:b9:69:b3:bd:f3:b3:
ef:09:09:95:19:b5:98:10:56:d2:0e:3c:5b:5d:45:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:AA:AF:A5:03:A8:6C:22:90:8F:63:0A:48:1B:A2:1D:01:41:DE
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/5zKqr6UDqGwikI9jCkgboh0BQd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c446::/32
2a11:c540::/32
2a12:8800::/32
Signature Algorithm: sha256WithRSAEncryption
5c:b1:6b:5d:3a:ab:23:c2:2c:e0:1c:95:40:bb:db:c0:50:32:
81:26:95:10:31:be:c1:ef:a1:f1:e5:22:9a:c6:91:b7:1a:92:
b8:b1:1d:b5:26:29:cb:eb:67:4e:d7:49:e4:36:db:77:12:74:
57:9e:db:ee:17:41:db:c1:6a:eb:21:d3:4e:83:92:4f:36:e6:
e0:7a:b5:c3:06:d4:be:4a:d6:92:e4:7d:2f:01:73:67:27:ce:
dd:54:3e:2a:ce:ac:b0:d3:8c:5f:bd:f0:91:3d:ac:6a:35:e8:
ac:b4:05:60:bf:6f:8a:4d:29:4e:57:0c:85:ca:73:ff:98:bf:
0d:14:97:a7:96:03:6b:44:6f:56:6e:bd:05:21:8f:e1:d1:7d:
3e:a4:b6:c4:c6:d6:5a:3b:84:84:de:4a:54:ed:a5:14:16:06:
2d:a5:4f:f6:86:70:a8:d1:f7:04:7f:76:98:96:3d:36:0e:22:
97:ba:e8:81:8d:da:d6:3c:58:ec:a8:6d:c3:69:55:18:e0:b2:
a3:29:0d:01:8c:9e:b6:f6:06:34:0d:e5:60:70:64:98:7f:6d:
bd:d8:07:f2:64:46:cd:6f:6d:ae:8c:4f:91:86:cc:bb:2d:d8:
c0:a9:ac:ed:d5:7a:c9:73:71:63:96:ba:12:7d:2d:59:c1:f4:
43:60:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:17:31 2025 by rpki-client