Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_nhJlKXz7BdzXM9V2so0ulXYdQ8.roa
File: _nhJlKXz7BdzXM9V2so0ulXYdQ8.roa (raw, json)
Hash identifier: zbx8UKqbSkWGDOnlDHibU4j+KrjwQxd5U1nrDqZ13ro=
Subject key identifier: FE:78:49:94:A5:F3:EC:17:73:5C:CF:55:DA:CA:34:BA:55:D8:75:0F
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0199E97D7BBAA7AB702455AD9EB3326C03CB
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_nhJlKXz7BdzXM9V2so0ulXYdQ8.roa
Signing time: Wed 15 Oct 2025 20:08:59 +0000
ROA not before: Wed 15 Oct 2025 20:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213294
IP address blocks: 2a11:3442::/32 maxlen: 32
2a11:3443::/32 maxlen: 32
2a11:3445::/32 maxlen: 32
2a11:8944::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e9:7d:7b:ba:a7:ab:70:24:55:ad:9e:b3:32:6c:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Oct 15 20:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe784994a5f3ec17735ccf55daca34ba55d8750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:8e:69:d7:00:50:ff:fc:9a:34:d8:0a:41:
da:05:6b:71:ab:20:59:ce:ec:b1:7a:ab:53:bc:57:
43:25:c9:06:62:e5:c5:c0:ce:48:cc:f1:91:a6:cf:
e3:fd:fe:3d:12:77:6f:a4:cb:c6:27:e5:e2:4e:a6:
fb:15:a3:b1:c4:09:c7:2a:9b:d2:15:25:fe:10:5b:
82:53:95:42:c3:8c:20:10:6c:d8:25:7b:2f:a0:79:
c7:52:2c:99:9e:42:76:82:c5:db:7c:0e:93:08:08:
fb:c5:49:fa:cb:d1:ea:3b:c8:e5:ec:73:7a:53:a5:
10:09:a2:09:9a:e9:74:62:58:3a:d0:89:18:60:0d:
3b:b6:f2:f9:d1:8f:22:45:5d:24:cd:eb:97:63:f1:
02:06:59:10:c0:0a:1e:8b:c9:67:fc:01:28:60:1b:
55:76:34:f4:ee:46:ed:77:7f:71:24:ba:ef:98:df:
1b:ad:f0:69:fb:56:d8:af:0a:20:12:53:98:2c:d3:
80:de:b2:44:f0:a0:62:51:f3:cf:0b:e1:90:40:b8:
4c:42:55:b7:e0:15:e8:b9:7c:66:17:6d:20:65:53:
ca:21:2e:05:1a:65:0f:fe:35:e3:20:be:1a:7c:52:
dc:7e:d8:38:66:63:c0:a7:98:eb:e8:f3:c6:f7:c3:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:49:94:A5:F3:EC:17:73:5C:CF:55:DA:CA:34:BA:55:D8:75:0F
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/_nhJlKXz7BdzXM9V2so0ulXYdQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3442::/31
2a11:3445::/32
2a11:8944::/32
Signature Algorithm: sha256WithRSAEncryption
4d:99:e8:66:61:2b:ba:3e:86:83:01:75:4c:99:48:d4:8e:b7:
ab:18:fd:35:92:c1:69:26:0e:5e:dd:f5:0c:7b:34:7e:13:59:
bc:16:40:b3:f8:2a:0e:01:51:04:19:ab:d6:8e:56:1a:5b:17:
32:15:11:9e:bb:5c:90:f5:0f:2d:5c:1b:30:1b:32:3f:37:5a:
a0:70:26:82:58:b2:1b:c6:02:f5:f2:98:9e:62:87:45:eb:f1:
08:2a:f5:fd:63:b4:6a:6b:31:e4:24:a4:91:25:48:28:bf:76:
66:64:67:25:d3:00:dc:78:f0:54:d4:f6:44:bb:d5:03:90:93:
e5:1b:c5:c3:82:22:01:c6:64:93:17:db:1c:e5:cc:74:0a:72:
12:ab:76:d7:a7:be:55:6c:d0:9b:4c:46:b7:cc:2f:88:2b:1b:
46:1b:a3:23:f8:59:5a:79:43:b5:6c:7c:f9:24:5f:5e:51:12:
a3:7e:74:6b:96:13:5b:a5:28:5f:70:46:f5:1a:56:ab:29:ce:
59:c1:36:08:3d:c8:da:98:91:1c:05:5f:84:93:f3:0f:22:19:
61:14:93:94:b7:27:73:27:81:f0:1a:e5:61:32:cb:8f:87:7a:
7c:36:6c:6e:b7:ef:17:77:19:d0:25:e7:a8:e1:14:ac:ce:1c:
66:da:4e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:58 2025 by rpki-client