Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l_9g3Du4hHizQDAhwWWUa5qFhwQ.roa
File: l_9g3Du4hHizQDAhwWWUa5qFhwQ.roa (raw, json)
Hash identifier: OfRzTM/q1j5+rFyoMMu+YFugDrDSmoVuyE+jWGM553U=
Subject key identifier: 97:FF:60:DC:3B:B8:84:78:B3:40:30:21:C1:65:94:6B:9A:85:87:04
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0198C3E9043D093D552E6A7CA53A61DF77BB
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l_9g3Du4hHizQDAhwWWUa5qFhwQ.roa
Signing time: Tue 19 Aug 2025 19:58:04 +0000
ROA not before: Tue 19 Aug 2025 19:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205828
IP address blocks: 2a11:85c0::/29 maxlen: 29
2a11:9fc0::/29 maxlen: 29
2a11:acc0::/29 maxlen: 29
2a12:3ac7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:e9:04:3d:09:3d:55:2e:6a:7c:a5:3a:61:df:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Aug 19 19:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ff60dc3bb88478b3403021c165946b9a858704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:c8:16:25:9a:55:79:60:e5:a9:54:67:5d:
1e:57:1d:50:6d:71:b7:8a:eb:05:3c:9f:dd:f7:cc:
3d:25:27:76:58:6a:18:00:fc:5b:79:6b:97:ca:dc:
37:0a:33:41:1d:b9:a1:d6:1b:8c:9d:a5:f8:c0:88:
d7:db:48:65:c5:cf:ce:52:1b:5c:8c:68:1d:a2:93:
25:1e:c4:06:8c:be:1f:75:a9:c4:99:af:01:55:d6:
94:19:54:ed:bc:a5:7a:52:4c:52:fe:d5:7d:f1:f2:
23:ef:88:5c:95:69:50:ce:96:f3:02:5f:c5:54:52:
ae:99:eb:7d:43:31:20:e0:33:bf:38:60:d2:e7:34:
39:73:3b:a5:9c:9a:af:e2:ca:94:b0:62:46:cf:e5:
88:a9:76:50:16:88:3c:33:e5:43:45:52:08:b8:61:
e3:a7:80:1c:54:fd:ae:20:97:ac:b8:1f:56:10:d5:
91:e1:72:58:4b:f5:45:9f:65:98:74:53:8a:e5:f8:
85:63:98:5d:9f:84:05:ea:41:db:44:e4:84:6c:d1:
f9:99:93:2e:13:cc:5c:cc:79:a7:02:b4:ec:67:73:
b8:4b:49:a1:b9:01:d9:f0:af:f8:cf:c9:f8:2a:c7:
40:8a:19:40:23:0c:92:36:57:0a:cf:c2:5a:73:b2:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:60:DC:3B:B8:84:78:B3:40:30:21:C1:65:94:6B:9A:85:87:04
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l_9g3Du4hHizQDAhwWWUa5qFhwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:85c0::/29
2a11:9fc0::/29
2a11:acc0::/29
2a12:3ac7::/32
Signature Algorithm: sha256WithRSAEncryption
a9:23:a8:9d:e9:a6:ee:49:25:9d:3f:12:75:cf:8c:d2:cd:81:
98:6c:eb:c2:d7:95:2d:01:f5:56:b0:69:7e:11:21:06:35:98:
a1:b5:62:88:58:42:f5:09:b7:13:80:81:91:eb:c3:dd:0f:93:
be:2b:93:9c:de:b7:43:b3:18:79:f5:b7:00:23:81:1f:77:f5:
f6:92:9d:2e:f6:e0:3d:58:c0:95:7d:92:a4:68:c7:41:81:3e:
ad:88:95:51:89:63:0f:bf:25:7f:2e:2c:55:f6:0a:65:95:aa:
bb:9d:d6:90:71:93:ff:4e:de:5f:42:40:9b:d5:b9:bd:16:a1:
ef:24:81:2b:51:33:8f:c0:36:e2:eb:e9:7c:e1:da:53:1a:f9:
48:19:39:1a:2a:03:16:bb:c6:63:cd:f0:90:0a:a4:13:c5:53:
9a:fe:ce:4c:f7:69:f4:29:ed:bc:11:cd:16:62:bc:2b:bd:af:
d6:2d:b7:83:55:a9:e3:09:cf:ae:57:1a:48:90:2f:51:1c:5e:
c0:2e:3a:7b:83:85:aa:ab:b8:81:fb:89:f0:07:a2:44:af:2a:
cf:31:33:a5:d9:2a:f3:4d:e4:2f:60:a8:51:1a:00:a8:36:4b:
54:e2:ca:3f:83:b1:f5:6d:1d:ef:e2:8a:d7:fb:e5:23:83:3d:
77:b3:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:28 2025 by rpki-client