Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/GXq52zortkTMXamzVUBLy_xGpNw.roa
File: GXq52zortkTMXamzVUBLy_xGpNw.roa (raw, json)
Hash identifier: cyICPHidNSQcy/ecKrJOg/A7bnSndME430MzJ2HxoSw=
Subject key identifier: 19:7A:B9:DB:3A:2B:B6:44:CC:5D:A9:B3:55:40:4B:CB:FC:46:A4:DC
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 01991BA8B09D067DFF594C3F95FFB0AFCFF9
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/GXq52zortkTMXamzVUBLy_xGpNw.roa
Signing time: Fri 05 Sep 2025 20:54:24 +0000
ROA not before: Fri 05 Sep 2025 20:54:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a11:c542::/32 maxlen: 32
2a11:e7c7::/32 maxlen: 32
2a12:8804::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:a8:b0:9d:06:7d:ff:59:4c:3f:95:ff:b0:af:cf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Sep 5 20:54:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=197ab9db3a2bb644cc5da9b355404bcbfc46a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:aa:dd:f8:af:c6:80:55:6d:e3:67:8a:76:
3c:af:e4:42:42:75:26:fb:ba:d1:b2:9a:dd:2f:1b:
1d:59:6d:f3:34:37:56:70:5a:68:bb:87:57:9c:6c:
85:7d:9d:64:67:96:c2:4e:62:9a:a7:68:cd:f7:92:
a2:40:27:5e:95:cc:67:1f:aa:bc:31:cd:67:fa:ff:
03:a9:52:50:01:15:3a:b2:c7:88:14:f2:45:05:6b:
15:55:c5:98:f3:4d:db:a9:a3:ce:61:c9:71:a5:c9:
ff:a4:77:5b:7a:8d:db:c3:79:c4:c6:72:d8:c7:35:
27:d3:8c:d0:e5:6d:fa:74:b9:67:15:6c:3c:d5:72:
f9:11:29:43:f4:99:21:a9:54:f0:7d:54:7e:04:5f:
4b:56:6a:95:8a:5f:16:84:03:42:76:0d:d6:c7:21:
ac:28:60:a2:71:67:fc:ec:3d:11:98:f5:28:94:78:
d1:13:b6:bb:06:49:b6:bc:d6:99:c9:19:54:55:4b:
2e:1f:8e:96:ee:ff:f4:bc:40:1a:9d:01:6d:13:b1:
0a:1d:8b:f5:4d:6b:cc:bb:9d:3d:1d:43:c2:1c:a3:
d3:88:13:dc:64:d3:70:4e:3e:e1:2d:a2:18:24:5e:
a6:b6:0e:00:c8:02:6c:e0:c7:6d:94:75:fc:4c:1b:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:B9:DB:3A:2B:B6:44:CC:5D:A9:B3:55:40:4B:CB:FC:46:A4:DC
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/GXq52zortkTMXamzVUBLy_xGpNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c542::/32
2a11:e7c7::/32
2a12:8804::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b8:6d:3a:45:ea:38:d9:c0:f8:38:ab:6e:e4:34:e5:81:60:
c8:4e:98:fa:7f:fa:b4:1a:05:b7:7b:1d:03:9a:79:ba:82:11:
32:5b:3a:dc:d6:63:90:60:4c:61:71:d1:a9:54:d8:b4:e1:0c:
54:6b:69:d0:22:50:f0:a0:c3:7b:1d:e2:9c:a7:0a:d8:d4:96:
2a:44:2c:a2:2a:f8:24:f3:23:ae:d0:40:0a:7b:4a:c7:3b:9c:
cb:23:7f:6b:65:6b:4b:4f:c0:dc:ca:cc:99:fb:05:1c:d1:8e:
82:b4:5b:fc:02:e0:d3:80:ab:c8:86:25:1a:4c:da:fb:c2:a4:
c0:db:b2:6a:71:c3:ff:5d:c7:b3:2f:50:b8:71:ec:3a:87:af:
d1:eb:f7:6c:3f:3e:7e:97:28:a7:3b:45:25:53:b2:6c:d2:1a:
4e:dd:45:95:26:de:8f:d3:28:31:be:dc:58:d6:05:52:3e:43:
c6:8b:78:68:77:11:14:d1:07:ee:0b:15:90:b4:02:47:18:11:
96:b8:40:83:9a:a0:81:af:83:74:77:f0:47:9e:5d:98:e9:60:
f3:fe:64:c9:11:e4:74:f8:ea:df:ad:e7:c2:b6:59:91:58:76:
6b:67:71:96:b8:15:38:f1:b2:21:f6:8f:16:6f:e1:71:38:c4:
70:3e:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:50:42 2025 by rpki-client