Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/bfGAioHYnVCwURtmCUj955sCQiY.roa
File: bfGAioHYnVCwURtmCUj955sCQiY.roa (raw, json)
Hash identifier: LAys+jZEOLTjTbxBgUViTiDI40ywquJv6pzZYNrFeD0=
Subject key identifier: 6D:F1:80:8A:81:D8:9D:50:B0:51:1B:66:09:48:FD:E7:9B:02:42:26
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0199722D1EAA921ADA7627B87967C54AF964
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/bfGAioHYnVCwURtmCUj955sCQiY.roa
Signing time: Mon 22 Sep 2025 16:06:23 +0000
ROA not before: Mon 22 Sep 2025 16:06:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a11:1640::/29 maxlen: 29
2a11:3340::/29 maxlen: 29
2a12:4500::/29 maxlen: 29
2a12:5580::/29 maxlen: 29
2a12:9700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:72:2d:1e:aa:92:1a:da:76:27:b8:79:67:c5:4a:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Sep 22 16:06:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6df1808a81d89d50b0511b660948fde79b024226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:aa:e9:43:98:b5:7b:58:c0:9a:c1:7c:5c:
36:2e:54:6e:63:e2:e8:c2:27:f9:75:a1:de:85:59:
e3:3c:70:a7:84:e4:f0:f0:16:6c:76:f0:8c:03:be:
4b:31:c2:a8:a6:d0:7c:b1:76:02:4e:35:ca:f5:34:
11:0b:2e:ad:0b:c4:07:52:41:82:d9:4d:6f:98:91:
45:e2:92:83:1b:fa:e5:01:c9:f2:7b:e3:7a:02:af:
e4:a6:5a:64:94:b5:2f:e8:b6:f7:8c:5f:c2:a2:1d:
12:c1:e5:e9:bc:a1:f8:36:48:51:f7:67:b5:e4:02:
da:41:d7:04:4f:37:74:ab:a1:c3:a8:5c:1b:fe:2c:
21:37:b2:4d:c7:20:78:fe:8f:a3:92:40:d3:d0:4b:
1b:0b:cc:c6:f1:66:af:e6:f8:49:27:d8:52:f2:d7:
4b:4f:e7:11:2a:2b:05:b6:37:38:15:d5:74:3d:b9:
b5:62:78:7a:5d:dd:a3:b8:0b:ae:94:a0:d8:8a:84:
ac:ed:5f:ab:b6:9d:4e:ed:2a:7d:43:cb:e9:99:e9:
39:3f:77:2b:9f:7b:fa:6e:4a:ae:aa:c2:75:21:e4:
34:dd:ce:8a:1f:6b:ba:24:77:35:3e:91:5e:71:8d:
f9:ab:d8:f2:63:3f:1c:75:fb:11:bf:3b:63:f4:99:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:80:8A:81:D8:9D:50:B0:51:1B:66:09:48:FD:E7:9B:02:42:26
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/bfGAioHYnVCwURtmCUj955sCQiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1640::/29
2a11:3340::/29
2a12:4500::/29
2a12:5580::/29
2a12:9700::/29
Signature Algorithm: sha256WithRSAEncryption
14:23:78:f1:a3:3d:15:5c:3c:c6:ba:75:9c:fb:2b:0e:f4:e4:
78:e4:e2:42:0b:eb:c4:59:92:85:36:42:52:ea:8a:0d:58:e1:
20:93:55:0b:94:eb:48:b8:0b:a6:f3:86:b6:9a:52:2e:c8:d3:
8f:08:75:f8:48:54:9f:9e:5b:1b:77:11:02:0b:b0:96:cd:d1:
64:67:20:c6:2e:d3:59:68:d0:fa:98:45:4d:87:0c:39:4b:f6:
df:b2:c4:12:1c:28:22:d6:65:7b:6e:ff:99:90:b0:52:51:35:
ef:16:36:d0:9a:bb:10:08:e3:20:30:a1:27:42:90:39:9d:29:
3f:d4:6e:10:0b:17:2c:db:22:2c:e0:a7:ce:53:6b:0e:0f:22:
37:5d:b9:29:d0:f6:84:d6:97:1d:fe:7b:62:09:aa:15:60:00:
80:ce:ac:a0:3a:bf:dc:2a:e8:81:a9:b6:1a:fb:05:e1:62:3f:
f5:a0:1e:d0:35:52:a0:a4:01:2d:16:a1:c2:63:8e:61:10:a9:
3b:ae:8e:64:93:88:eb:f2:e3:c7:0a:41:8c:93:51:eb:8b:75:
9c:f1:5c:89:54:10:ae:42:98:51:40:4e:05:5f:c6:5b:d3:8a:
ff:64:d5:a5:e7:81:3b:d1:5f:92:45:32:fa:a3:35:5a:ed:9e:
88:4b:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:28 2025 by rpki-client