Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Gyb8N9C301qSa0IG9gbjbLxMEdU.roa
File: Gyb8N9C301qSa0IG9gbjbLxMEdU.roa (raw, json)
Hash identifier: 4Y9Qbvs3yblIo0Yqohcxrse2Iin1t3H4aNo3+prWbaY=
Subject key identifier: 1B:26:FC:37:D0:B7:D3:5A:92:6B:42:06:F6:06:E3:6C:BC:4C:11:D5
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 0199F314EE138117FD006FE1091AAF2A289E
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Gyb8N9C301qSa0IG9gbjbLxMEdU.roa
Signing time: Fri 17 Oct 2025 16:50:59 +0000
ROA not before: Fri 17 Oct 2025 16:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35704
IP address blocks: 2a02:11ff:400::/46 maxlen: 46
2a02:11ff:404::/46 maxlen: 46
2a02:11ff:408::/46 maxlen: 46
2a02:11ff:40c::/46 maxlen: 46
2a02:11ff:410::/46 maxlen: 46
2a02:11ff:414::/46 maxlen: 46
2a02:11ff:418::/46 maxlen: 46
2a02:11ff:41c::/46 maxlen: 46
2a02:11ff:420::/46 maxlen: 46
2a02:11ff:424::/46 maxlen: 46
2a02:11ff:428::/46 maxlen: 46
2a02:11ff:42c::/46 maxlen: 46
2a02:11ff:430::/46 maxlen: 46
2a02:11ff:434::/46 maxlen: 46
2a02:11ff:438::/46 maxlen: 46
2a02:11ff:43c::/46 maxlen: 46
2a02:11ff:440::/46 maxlen: 46
2a02:11ff:444::/46 maxlen: 46
2a02:11ff:448::/46 maxlen: 46
2a02:11ff:44c::/46 maxlen: 46
2a02:11ff:454::/46 maxlen: 46
2a02:11ff:45c::/46 maxlen: 46
2a02:11ff:460::/46 maxlen: 46
2a02:11ff:464::/46 maxlen: 46
2a02:11ff:468::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:14:ee:13:81:17:fd:00:6f:e1:09:1a:af:2a:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Oct 17 16:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b26fc37d0b7d35a926b4206f606e36cbc4c11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:f9:fe:cf:e7:ca:11:91:ed:f0:80:d9:ae:
11:f4:67:6b:cc:27:4a:6c:79:a1:39:62:6e:a0:f1:
21:03:3e:df:f1:88:5c:6b:a9:f7:97:ab:fb:a3:82:
e3:f3:c7:69:99:3f:8c:21:97:ea:6f:29:0f:a3:75:
ed:63:e5:fd:5a:6b:b5:c1:2d:09:a1:79:42:7e:f1:
3e:06:d7:3d:66:4a:65:b7:0a:04:3f:55:6d:c9:08:
58:87:a7:d0:d9:7a:a0:b2:2a:14:bf:92:1e:e6:20:
3b:18:38:00:a4:11:2b:8d:18:ed:4e:d5:18:ce:83:
55:bc:f8:6d:e3:83:34:c8:15:8d:ec:88:58:bd:f6:
a2:05:31:92:95:47:e1:19:a9:db:79:b0:70:b6:7c:
9a:4b:79:20:b9:78:99:58:cb:57:e8:c1:4b:19:89:
c1:c3:46:c7:41:c0:b9:d2:b2:9f:7e:68:ed:c0:31:
3f:93:c0:42:0d:5b:58:7a:1c:17:66:40:c3:dd:4d:
9c:7b:11:cf:f8:3a:f6:28:66:85:d8:c8:a0:4c:b2:
c8:a3:f5:2e:0a:bc:60:75:d4:df:41:cd:fd:04:4d:
f1:72:e3:16:f7:d4:0d:58:ca:c2:50:1e:45:0d:f9:
ef:f7:18:1d:43:4c:42:6b:47:7e:ff:45:80:e4:47:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:FC:37:D0:B7:D3:5A:92:6B:42:06:F6:06:E3:6C:BC:4C:11:D5
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Gyb8N9C301qSa0IG9gbjbLxMEdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11ff:400::-2a02:11ff:44f:ffff:ffff:ffff:ffff:ffff
2a02:11ff:454::/46
2a02:11ff:45c::-2a02:11ff:46b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
64:37:f1:57:b0:99:e8:f9:7a:f4:60:f1:ef:f6:e7:13:34:46:
45:24:cf:c7:b7:ad:b0:23:75:b6:40:c9:34:97:57:31:d0:57:
1d:51:c0:1f:cd:ed:cd:d4:29:e7:d8:72:77:e6:e3:74:fa:6e:
a5:5d:7a:bb:b2:81:f3:11:1a:e1:25:e1:95:85:cf:6d:8c:33:
16:f4:0a:6b:c5:73:9d:5a:cc:7a:d4:d3:72:56:ee:44:6c:77:
20:a8:f1:e2:7b:67:77:b4:a6:b9:27:7d:61:85:99:6e:3f:3d:
f1:b9:37:54:97:e5:2b:b5:50:a1:63:90:4b:7b:43:5e:77:51:
3f:9a:0f:c2:b6:3c:84:5e:a0:a7:84:31:b5:cf:78:92:a5:d0:
68:0f:01:08:23:b7:61:c5:3b:47:b2:e0:f0:60:36:77:21:ff:
ab:55:4b:6a:bd:ca:e5:41:66:68:66:2b:ab:2f:c5:74:27:58:
04:6f:e1:f1:1c:2a:9b:1b:5d:78:53:56:11:40:a7:50:78:84:
b4:5f:4d:84:03:c5:1c:76:68:75:7b:2d:da:27:f6:a3:7d:2f:
fc:95:c2:85:03:a6:e1:73:c1:93:61:f0:2f:fe:3c:d6:b8:87:
da:98:ca:e1:a7:58:6a:76:2d:c1:9e:d9:90:bc:ce:66:e4:db:
5c:f1:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:48 2025 by rpki-client