Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/qR3RdSbRRb7JtoPItdAFVcmOfm4.roa
File: qR3RdSbRRb7JtoPItdAFVcmOfm4.roa (raw, json)
Hash identifier: 0YUFu35h0q7ZeWw1RWxv5JvuYja078PVd4Tt+tY/B3M=
Subject key identifier: A9:1D:D1:75:26:D1:45:BE:C9:B6:83:C8:B5:D0:05:55:C9:8E:7E:6E
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0199E71B98385925F7289304EB8797E36A0A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/qR3RdSbRRb7JtoPItdAFVcmOfm4.roa
Signing time: Wed 15 Oct 2025 09:02:49 +0000
ROA not before: Wed 15 Oct 2025 09:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40403
IP address blocks: 2a11:dcc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:1b:98:38:59:25:f7:28:93:04:eb:87:97:e3:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 15 09:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a91dd17526d145bec9b683c8b5d00555c98e7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:4f:bf:c8:22:9c:7f:86:ab:d0:17:f7:9c:
c0:27:f6:f8:0c:4e:86:8e:82:b2:8b:32:f1:16:c2:
7a:ac:4e:80:0c:30:da:af:90:dd:9f:5f:e3:a3:1c:
b5:4f:bb:e1:0f:9c:da:40:20:7e:6f:8f:8f:ce:c8:
9a:b7:1d:69:d5:3d:ee:c9:4d:cf:02:eb:68:ac:ea:
a1:c6:fa:02:ad:10:30:d7:ba:37:75:2f:56:88:65:
b2:8b:a7:bd:0b:d6:07:55:07:53:97:47:08:5b:de:
59:34:93:a8:e8:a0:75:a7:00:00:ff:91:e0:57:bd:
10:05:d7:43:b0:9d:44:40:14:37:c6:99:ae:45:f3:
fa:2d:05:4e:f5:27:95:07:55:b3:87:80:57:b9:5a:
11:bd:d7:4e:b1:45:97:79:bc:d3:71:67:d6:c9:98:
d5:01:69:0a:07:a3:4a:73:d5:82:d0:1c:e3:73:f7:
c1:ce:35:fc:c6:0f:ce:e0:5b:66:4e:8f:40:25:dd:
78:91:7f:df:41:33:1c:35:0a:a7:a7:ef:6e:4c:88:
9a:a9:b6:b7:9e:07:9f:37:d4:6b:64:4a:0d:c8:16:
10:84:f5:17:e0:f1:90:18:85:61:cb:f3:df:4a:b0:
62:fc:71:68:da:35:b6:5f:53:e3:5d:38:88:fe:58:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:D1:75:26:D1:45:BE:C9:B6:83:C8:B5:D0:05:55:C9:8E:7E:6E
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/qR3RdSbRRb7JtoPItdAFVcmOfm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:dcc7::/32
Signature Algorithm: sha256WithRSAEncryption
32:a1:df:2e:89:5a:3a:27:42:c3:e9:76:21:6b:6f:64:19:d7:
ec:0c:e9:bd:45:69:24:27:5e:d6:92:13:ef:d4:de:33:9c:88:
8d:e0:09:6f:d7:56:18:c1:9a:28:53:c8:b7:49:61:71:1b:09:
3e:e0:e0:9a:82:5a:33:db:6b:e1:aa:ad:d3:34:d5:55:73:d1:
c1:d7:11:87:67:8f:3b:95:9d:64:a0:fb:31:ee:ca:46:6b:7d:
a4:41:c2:ab:66:9d:09:32:01:32:68:d1:53:5d:3c:f2:f2:47:
53:e1:57:31:d6:dd:53:66:0d:46:2c:b7:9d:0c:cc:e8:2f:f5:
de:31:2e:d7:9a:88:63:6d:46:d8:0f:f4:8c:5f:9f:13:f9:cb:
07:f7:38:38:c7:45:ff:b7:5a:e8:d8:4d:73:5f:dd:5a:90:31:
eb:f7:53:dd:9b:04:8b:3e:62:16:be:5f:63:45:2c:c9:91:28:
d6:2a:8d:4a:72:f9:e2:32:af:5c:34:ae:df:b6:4e:ca:4a:44:
55:e2:22:07:5e:d6:21:8d:6d:14:42:81:0a:c3:35:30:89:30:
27:8d:9c:de:80:d0:f4:71:8c:34:2f:e6:24:e4:3f:2f:c7:42:
bd:38:19:82:53:54:6d:ab:01:99:50:35:55:f7:17:75:f0:ba:
b8:97:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:26 2025 by rpki-client