Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JlsFviENh8N1RP1E916dIGDptKg.roa
File: JlsFviENh8N1RP1E916dIGDptKg.roa (raw, json)
Hash identifier: +Dvi0mBx115ZEIRNwTH/ZirDP0Z77O0cSwhZfqnusv0=
Subject key identifier: 26:5B:05:BE:21:0D:87:C3:75:44:FD:44:F7:5E:9D:20:60:E9:B4:A8
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0198D349C728D482F00B81CE0A39DF202E36
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JlsFviENh8N1RP1E916dIGDptKg.roa
Signing time: Fri 22 Aug 2025 19:38:04 +0000
ROA not before: Fri 22 Aug 2025 19:38:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a11:6506::/32 maxlen: 32
2a11:7685::/32 maxlen: 32
2a11:8300::/32 maxlen: 32
2a11:b783::/32 maxlen: 32
2a11:c106::/32 maxlen: 32
2a11:c445::/32 maxlen: 32
2a11:cd00::/32 maxlen: 32
2a11:d084::/32 maxlen: 32
2a12:1147::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:49:c7:28:d4:82:f0:0b:81:ce:0a:39:df:20:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Aug 22 19:38:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265b05be210d87c37544fd44f75e9d2060e9b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:22:f9:23:eb:2b:81:d7:df:52:3b:31:03:
29:a7:a1:7c:f2:f4:79:5e:2b:c8:de:d2:7d:d7:69:
d0:a2:a9:44:fa:ad:4a:24:3a:c0:ba:4f:ad:66:e4:
0d:d6:72:5b:66:e2:ca:f6:38:c6:12:db:7b:5a:03:
e2:73:da:c1:5d:89:ad:09:54:0b:de:1a:8d:b4:ae:
27:a8:52:d1:54:4c:7c:76:d3:1d:19:ba:a2:2a:a2:
0f:7f:f4:d6:87:a2:d3:85:eb:78:e8:f7:00:8e:97:
61:5e:96:8e:f5:21:0f:a9:f8:06:d9:15:7b:86:0e:
9f:af:a4:63:8c:5a:5d:71:c8:aa:c1:32:fb:b5:9b:
83:13:6e:2d:e2:3b:89:bc:7d:d8:8e:cb:63:d3:fe:
fc:7d:c0:51:ce:ca:0f:4d:f8:84:81:55:ed:83:f2:
52:60:9a:f2:ad:aa:65:d2:06:94:27:0c:58:46:e6:
ac:0a:a4:88:b2:4b:b2:a1:63:af:8d:4f:85:d5:04:
3a:93:7d:ef:0a:9a:5e:5b:28:a7:9a:66:f6:19:64:
a3:4f:1a:18:52:ac:d7:13:cc:11:54:34:cf:2e:d1:
7b:7f:e0:e9:69:17:fb:10:b3:98:fd:ef:5f:63:63:
ba:2d:69:9d:48:ad:e0:75:d1:26:4b:a9:dc:ac:06:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:05:BE:21:0D:87:C3:75:44:FD:44:F7:5E:9D:20:60:E9:B4:A8
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/JlsFviENh8N1RP1E916dIGDptKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6506::/32
2a11:7685::/32
2a11:8300::/32
2a11:b783::/32
2a11:c106::/32
2a11:c445::/32
2a11:cd00::/32
2a11:d084::/32
2a12:1147::/32
Signature Algorithm: sha256WithRSAEncryption
9b:69:18:d0:e9:9c:df:57:46:1e:d7:f6:cc:cf:6c:cb:93:d6:
c4:79:a7:7d:16:75:43:c3:38:ee:cd:e1:8a:58:80:6c:e5:69:
9a:2d:df:51:af:4b:5e:db:f4:a8:cc:2e:70:e5:c5:d8:61:18:
a3:72:dc:9d:6b:f3:db:22:94:b4:cb:20:e8:04:1e:f6:64:12:
b3:0f:aa:7d:e9:c3:6e:b4:cf:5c:0a:4a:89:27:e3:08:2c:6f:
7e:bf:7e:42:89:1e:0a:9c:f0:e5:b6:6f:ef:d3:67:0c:7a:d5:
ae:c1:b4:3f:a7:ba:5e:f9:ef:6e:5a:fc:b6:6e:e1:c8:9f:26:
a1:19:b3:11:f7:37:5c:f2:4d:b5:a7:e4:99:69:07:22:9e:cd:
4d:4c:32:8f:b6:90:1a:f2:0c:7a:bd:11:38:5f:d7:46:08:53:
cc:70:a8:14:bb:a9:fe:94:c4:a7:bd:46:9b:d4:00:20:06:b8:
62:6d:7a:c4:b8:d2:dd:d8:97:d3:37:fb:42:de:2d:df:b7:b4:
ce:f4:da:45:d0:11:14:d1:fd:f9:0f:df:dc:bd:d7:3c:07:30:
cd:24:a2:db:98:1c:4e:67:8c:7c:35:a9:e8:42:cb:55:82:4e:
4b:e2:18:03:05:85:47:06:ca:0c:80:71:72:ef:ff:f2:08:f2:
72:6a:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:52 2025 by rpki-client