Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa
File: 3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa (raw, json)
Hash identifier: o5RR2TRtRzcRa0YfGrHmPuJva8oqLvh6B+TCKQNcc+4=
Subject key identifier: DF:23:3A:B4:CE:46:EC:C2:66:5B:E2:9E:87:79:50:26:94:C3:62:64
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01997B28EE6B78E2287234B2046A06BC563B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa
Signing time: Wed 24 Sep 2025 09:58:23 +0000
ROA not before: Wed 24 Sep 2025 09:58:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214419
IP address blocks: 212.80.11.0/24 maxlen: 24
2a00:7d80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:28:ee:6b:78:e2:28:72:34:b2:04:6a:06:bc:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 24 09:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df233ab4ce46ecc2665be29e8779502694c36264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:0d:06:80:cc:1d:c2:48:5d:8c:fa:3b:c6:
2b:14:a9:df:23:55:b5:92:71:a3:42:b3:6f:dc:e8:
b2:ed:bd:da:2e:3a:2f:42:12:10:25:a3:bc:64:6b:
bc:e1:8e:58:21:ff:4d:79:00:92:a5:c4:c3:5f:bf:
32:5d:7e:21:2e:a1:0c:a6:e2:38:80:2b:c2:e1:7f:
cf:87:58:3d:72:68:0d:98:c0:4f:c1:78:d2:d8:8b:
0a:db:5e:55:d4:c9:1d:b6:34:ee:dc:07:53:9f:8e:
74:6e:e5:32:6d:df:83:78:d7:7a:86:45:a6:2e:1b:
ed:de:d6:5f:e2:28:f8:de:f4:9e:a3:15:0f:6b:8f:
b0:9c:9b:1e:af:47:f0:0b:91:ad:c2:59:e9:2d:69:
58:7f:6f:6a:bd:5b:e5:bb:56:66:b6:df:9c:84:27:
80:3b:44:e2:c1:5a:8c:f4:fa:9e:ed:ae:d5:fa:72:
a7:22:55:1f:a6:bf:09:32:b0:36:a6:d1:25:da:f1:
ac:78:a4:da:6d:19:fd:66:af:97:a8:ec:33:e7:62:
40:50:de:d5:54:21:a0:21:32:9f:91:29:02:70:35:
9a:a0:8f:51:49:c1:8c:02:bb:bb:75:d7:3a:34:b2:
e3:40:f3:6b:9a:04:50:af:16:ff:3b:0a:b9:a4:c1:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:23:3A:B4:CE:46:EC:C2:66:5B:E2:9E:87:79:50:26:94:C3:62:64
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3yM6tM5G7MJmW-Keh3lQJpTDYmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.11.0/24
IPv6:
2a00:7d80:11::/48
Signature Algorithm: sha256WithRSAEncryption
03:b7:ed:28:58:86:ca:c5:59:bc:2c:aa:af:b2:88:e1:71:ed:
62:a6:00:ea:10:0f:d0:d4:b6:5f:ed:47:6a:ef:0d:e8:c3:d7:
f2:d0:9b:f5:e0:8a:9c:38:b4:c5:c9:10:fd:ff:d8:87:dd:cd:
71:d3:c0:9a:91:22:75:f2:d9:7a:00:e1:7a:68:79:ba:98:93:
15:b9:32:a0:98:f3:fb:f7:00:5e:b0:f1:01:1a:4e:e2:f8:cf:
5a:02:3d:9b:f7:f5:ed:54:0e:93:77:3c:51:1a:e9:90:61:f8:
27:22:16:93:ae:cf:fb:26:cc:15:8d:9d:aa:d6:10:4b:15:76:
5a:16:37:ef:50:35:ea:41:20:39:b8:74:cf:9e:19:1c:af:c5:
f0:05:f0:9b:b9:f4:4a:63:b6:5a:5a:4b:c0:ec:41:c0:1f:96:
f4:68:54:97:95:f4:b6:81:df:d1:f8:0b:4f:d0:24:4e:be:d3:
28:94:a0:d2:78:df:2c:20:b0:77:07:49:2f:91:72:7e:18:29:
0e:33:fd:54:f4:fd:c5:81:28:6e:31:fc:24:27:c1:25:50:1b:
d2:74:d5:90:97:ce:f2:5c:86:e8:de:db:a2:6e:3c:3b:dd:e6:
8a:af:fb:9b:a4:23:c4:c1:f9:96:ac:d0:0d:06:3c:d5:c0:bf:
5b:0a:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:29 2025 by rpki-client