Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/RcvJDa-cbOmIaa4og35Ma3bmLs4.roa
File: RcvJDa-cbOmIaa4og35Ma3bmLs4.roa (raw, json)
Hash identifier: GGKEWRmYEZ5B7wJ/8LINfgpwU0+7mRGdZ5NWQrU75S4=
Subject key identifier: 45:CB:C9:0D:AF:9C:6C:E9:88:69:AE:28:83:7E:4C:6B:76:E6:2E:CE
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0199F38AB5C465278B70AC74CDC0738D56AF
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/RcvJDa-cbOmIaa4og35Ma3bmLs4.roa
Signing time: Fri 17 Oct 2025 18:59:38 +0000
ROA not before: Fri 17 Oct 2025 18:59:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211009
IP address blocks: 2a11:65c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:8a:b5:c4:65:27:8b:70:ac:74:cd:c0:73:8d:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Oct 17 18:59:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45cbc90daf9c6ce98869ae28837e4c6b76e62ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:18:6d:54:65:f5:69:58:31:47:d2:0c:56:
c2:b7:26:6c:01:67:7d:ab:99:38:c3:69:29:2c:1d:
be:61:86:20:98:f2:ff:e4:30:98:ce:bc:fb:c9:74:
f0:6f:41:03:0b:d9:11:88:fd:d9:d5:7c:f4:5e:7e:
70:3f:2a:2a:85:ec:64:db:82:bb:85:ca:e1:19:91:
4e:45:70:9d:ad:72:08:ed:5f:7a:ab:a6:eb:31:f8:
9d:d3:dd:f8:62:cf:ab:e9:7f:47:09:a3:df:d4:08:
c2:c2:23:e4:60:71:45:4c:5c:21:c9:e7:23:d4:1d:
0e:c6:95:31:76:39:ba:59:09:63:80:82:a5:01:63:
7f:b2:24:6e:dd:05:9d:34:0e:81:ea:90:2d:e8:ed:
ad:bb:d4:48:f2:d2:ca:40:5b:94:8e:e4:67:19:88:
59:8e:fc:44:10:13:a5:0f:50:84:71:c8:8a:f3:74:
c3:f9:31:0c:f0:f3:5f:02:3f:7e:c6:76:d8:e3:cb:
c8:3f:b3:32:54:1a:04:0a:8e:fe:7a:cb:bc:1a:bb:
41:e8:41:1b:41:b2:13:94:0a:22:a7:18:94:d0:ec:
e0:fc:e7:e0:94:51:a8:43:2b:08:1c:80:51:13:c0:
71:d4:5a:78:04:54:a7:50:b4:e7:d3:91:b8:3d:c3:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:C9:0D:AF:9C:6C:E9:88:69:AE:28:83:7E:4C:6B:76:E6:2E:CE
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/RcvJDa-cbOmIaa4og35Ma3bmLs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:1e:fd:51:18:9e:36:21:eb:c3:19:c9:79:6f:49:68:35:29:
00:fb:c4:91:0e:0a:14:57:be:e4:1a:9b:b0:97:0c:f9:8c:1f:
49:a9:c2:ec:c6:d5:32:de:44:c3:b3:55:cb:8e:da:1f:05:ea:
7b:35:e5:d0:89:07:91:86:7d:10:db:b2:ae:33:c7:45:21:01:
d8:6e:61:d7:35:a2:d6:32:6c:e4:7f:2d:18:66:2f:31:0e:b0:
97:58:a9:78:ba:5b:bb:45:99:dc:19:b2:76:ab:c6:47:25:0e:
3e:0c:61:88:db:f3:98:ce:c5:a5:5f:ea:b8:65:5e:7f:81:c7:
a7:9e:c9:42:31:bf:db:36:b3:53:30:a9:98:e8:c4:cb:95:b7:
0f:9d:b6:f5:7d:44:ea:18:01:94:a7:b7:1a:72:0a:8d:47:2c:
7a:ab:3c:b0:e6:84:19:4d:38:05:de:b1:0f:dd:40:9c:27:b4:
7e:c0:35:a9:bf:21:c1:ad:ee:17:85:50:91:e3:29:f8:9d:b2:
41:73:99:76:c3:d4:b6:ea:6a:f5:bc:66:0f:a2:87:d3:de:5b:
6b:c6:25:20:88:a8:72:62:ec:b1:86:87:7b:b4:86:73:1f:70:
ee:a2:53:9f:75:63:52:88:3c:5c:27:36:4f:69:f2:23:b1:20:
ca:aa:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:50 2025 by rpki-client