Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa
File: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (raw, json)
Hash identifier: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=
Subject key identifier: E1:89:7F:DD:53:3E:91:DA:E8:44:1B:33:EE:73:DC:6F:F3:1F:4D:8A
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0199DEF4F16D3177C0ADDCEB35ADDB535282
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa
Signing time: Mon 13 Oct 2025 19:03:38 +0000
ROA not before: Mon 13 Oct 2025 19:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a11:f40::/29 maxlen: 29
2a11:1a80::/29 maxlen: 29
2a11:2140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:f4:f1:6d:31:77:c0:ad:dc:eb:35:ad:db:53:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Oct 13 19:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1897fdd533e91dae8441b33ee73dc6ff31f4d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:1a:1e:d0:d7:e6:a5:1c:d9:b7:92:30:5b:
43:eb:54:15:70:12:c9:68:c2:fa:d7:0c:d6:f0:a0:
b1:32:d7:ed:ec:53:51:67:c3:89:8a:c2:2f:7a:e3:
fa:d8:3e:63:05:9c:f3:e0:ef:52:fe:92:db:f7:0a:
bd:8a:51:b2:52:fd:31:1a:72:4a:26:5b:76:19:37:
25:47:80:bd:55:28:6a:23:5f:eb:f7:42:59:77:b0:
5e:32:b9:09:04:df:4c:77:03:4c:12:4e:7a:aa:29:
70:b1:16:f0:7c:c8:a8:46:b2:de:81:2e:83:70:49:
5e:a8:32:59:ec:df:af:44:ac:d3:c2:be:d7:29:ba:
17:49:9b:5f:88:03:52:a1:92:04:7e:ed:c2:dc:1a:
2e:0e:d1:9c:83:21:9a:c6:ee:a8:55:1b:ff:97:18:
60:93:f4:23:73:ab:62:68:ca:79:de:42:5b:b8:d7:
24:5a:36:35:8e:2c:d9:08:bf:89:39:3b:f2:a3:3b:
a8:7d:18:05:f1:ea:39:91:e2:21:f1:8b:5a:35:68:
49:6c:b0:00:fa:e8:1b:9a:ca:a2:13:f5:3a:9c:27:
6b:9a:de:05:55:29:8b:11:2d:9b:ef:ba:dd:0c:ad:
af:4c:27:ab:3a:b9:ef:8d:0d:c8:ce:a5:f4:d1:9d:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:7F:DD:53:3E:91:DA:E8:44:1B:33:EE:73:DC:6F:F3:1F:4D:8A
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f40::/29
2a11:1a80::/29
2a11:2140::/29
Signature Algorithm: sha256WithRSAEncryption
62:fe:69:37:7e:62:5d:56:5d:b0:cd:d2:b8:c9:d1:66:63:60:
63:dd:d3:42:7f:9e:dc:f0:ad:b5:18:83:b8:43:17:85:e1:e6:
d8:98:7e:1c:3f:a6:41:19:50:78:50:24:79:fd:4e:6f:87:21:
9d:6a:e8:a2:a5:21:24:8a:c0:d0:b9:1c:9f:3c:63:50:68:fa:
80:61:d0:00:31:39:fa:39:57:e8:ff:64:71:7e:70:cc:ae:d2:
ff:17:d5:50:6e:c7:c3:41:84:40:b4:48:1a:46:81:42:b1:8f:
f5:06:64:78:72:9c:7d:81:b3:30:b2:22:4a:68:a1:79:45:3e:
4a:c1:6c:4a:16:10:60:37:20:b0:0c:66:fa:cb:60:f8:2e:10:
5b:65:a3:7b:be:d3:2a:ec:93:5e:f7:29:a4:97:2d:9d:14:9d:
45:94:74:17:ca:52:0b:8c:e8:d8:f2:a2:e4:df:1a:80:d3:29:
0b:bb:2f:4f:35:e3:4f:16:87:4a:4b:46:8d:c5:bf:d8:05:df:
f5:6a:6d:21:05:3d:1f:f6:e3:12:a6:61:25:f6:13:12:11:d9:
02:10:86:3d:1d:cc:a6:1f:64:9b:31:30:b0:ab:7b:cd:d7:5d:
5c:a1:25:e1:4f:c2:32:69:a4:b4:72:f5:05:44:0a:21:0b:d5:
62:92:bb:00
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZne9PFtMXfArdzrNa3bU1KCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz
Mjc3N2YwHhcNMjUxMDEzMTkwMzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTg5N2ZkZDUzM2U5MWRhZTg0NDFiMzNlZTczZGM2ZmYzMWY0ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrEaHtDX5qUc2beSMFtD61QVcBLJ
aML61wzW8KCxMtft7FNRZ8OJisIveuP62D5jBZzz4O9S/pLb9wq9ilGyUv0xGnJK
Jlt2GTclR4C9VShqI1/r90JZd7BeMrkJBN9MdwNMEk56qilwsRbwfMioRrLegS6D
cEleqDJZ7N+vRKzTwr7XKboXSZtfiANSoZIEfu3C3BouDtGcgyGaxu6oVRv/lxhg
k/Qjc6tiaMp53kJbuNckWjY1jizZCL+JOTvyozuofRgF8eo5keIh8YtaNWhJbLAA
+ugbmsqiE/U6nCdrmt4FVSmLES2b77rdDK2vTCerOrnvjQ3IzqX00Z2cMwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOGJf91TPpHa6EQbM+5z3G/zH02KMB8GA1UdIwQY
MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct
ZWU5Yjk1MTdmMmVjLzEvNFlsXzNWTS1rZHJvUkJzejduUGNiX01mVFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj
LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhEPQAMF
AyoRGoADBQMqESFAMA0GCSqGSIb3DQEBCwUAA4IBAQBi/mk3fmJdVl2wzdK4ydFm
Y2Bj3dNCf57c8K21GIO4QxeF4ebYmH4cP6ZBGVB4UCR5/U5vhyGdauiipSEkisDQ
uRyfPGNQaPqAYdAAMTn6OVfo/2RxfnDMrtL/F9VQbsfDQYRAtEgaRoFCsY/1BmR4
cpx9gbMwsiJKaKF5RT5KwWxKFhBgNyCwDGb6y2D4LhBbZaN7vtMq7JNe9ymkly2d
FJ1FlHQXylILjOjY8qLk3xqA0ykLuy9PNeNPFodKS0aNxb/YBd/1am0hBT0f9uMS
pmEl9hMSEdkCEIY9HcymH2SbMTCwq3vN111coSXhT8IyaaS0cvUFRAohC9VikrsA
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:30 2025 by rpki-client