Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/uU44pG11DNdyipc4YD7btg_7gW0.roa
File: uU44pG11DNdyipc4YD7btg_7gW0.roa (raw, json)
Hash identifier: jHssSgmDD1Mu9OxQ3VCtCrFMT69Ds4egSnfu3YSEpXk=
Subject key identifier: B9:4E:38:A4:6D:75:0C:D7:72:8A:97:38:60:3E:DB:B6:0F:FB:81:6D
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 0198D34F450A5F3193AF4F5466E671B99370
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/uU44pG11DNdyipc4YD7btg_7gW0.roa
Signing time: Fri 22 Aug 2025 19:44:04 +0000
ROA not before: Fri 22 Aug 2025 19:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206174
IP address blocks: 2a12:1141::/32 maxlen: 32
2a12:3ac2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:4f:45:0a:5f:31:93:af:4f:54:66:e6:71:b9:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Aug 22 19:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b94e38a46d750cd7728a9738603edbb60ffb816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:bc:56:a5:17:85:c4:d8:ca:4a:73:b8:b2:
90:fb:c4:de:69:cf:0a:30:a3:b0:1e:c9:62:de:ec:
3b:32:14:35:26:db:ad:4d:5d:22:e5:f8:34:64:01:
fa:0f:91:55:fd:72:81:99:35:f4:e3:82:75:f2:e2:
97:6a:99:3d:10:9b:0a:06:c8:87:85:90:98:0e:63:
5d:67:30:b3:fa:ed:80:85:7b:c5:89:b5:cb:73:c5:
a9:46:47:5a:d9:b7:76:85:00:88:0d:ab:d7:11:61:
61:3c:16:f7:75:7c:4e:26:08:5a:97:ff:9b:ec:e9:
9a:ba:4e:f0:99:26:23:db:22:bd:95:20:9b:c0:21:
73:9d:39:85:d9:19:8a:c6:77:b0:be:4f:29:66:41:
5f:a3:bc:6f:a0:55:6b:8a:dd:50:b1:71:18:40:a9:
89:7f:e9:7b:17:90:b8:d7:da:b2:b4:b9:c8:39:83:
8c:90:18:df:63:88:1b:d7:7a:68:c7:11:17:e0:1d:
a6:a2:22:f2:41:b6:ac:c6:ab:83:13:88:96:66:5a:
8c:59:11:cd:ea:ff:f7:f1:95:10:a5:e5:ec:f7:15:
89:2c:c5:7a:e9:71:88:49:ca:ca:64:05:5f:4a:1f:
12:9f:e6:46:d7:49:c4:38:3e:a9:87:78:0f:ba:3a:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:38:A4:6D:75:0C:D7:72:8A:97:38:60:3E:DB:B6:0F:FB:81:6D
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/uU44pG11DNdyipc4YD7btg_7gW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1141::/32
2a12:3ac2::/32
Signature Algorithm: sha256WithRSAEncryption
44:38:a3:f8:70:08:04:90:c7:b3:e9:1e:eb:ad:2a:72:ff:30:
59:e5:d0:9d:28:65:35:a1:3a:26:8d:e2:1e:a2:36:e7:55:36:
a6:6e:4a:c1:11:6e:3f:69:6b:25:69:4e:0f:7c:a8:a6:08:b2:
74:9f:c4:e8:47:82:ff:41:cf:ca:ef:2b:29:71:5d:dd:93:c0:
91:1a:69:74:c7:54:a2:39:d6:48:01:57:e4:d6:99:e0:0a:69:
36:54:4b:17:4b:54:43:34:95:94:0c:09:a5:c2:47:20:85:cf:
cb:85:e3:2a:61:51:ce:05:94:24:55:81:6e:09:1f:69:48:d3:
9a:de:00:8e:72:21:31:ff:cc:24:11:c1:c0:1c:83:50:ca:6a:
fa:bd:19:ad:49:8b:b5:f2:30:97:c0:b0:c0:af:7e:aa:98:34:
6c:c2:36:6f:2e:92:44:6b:ff:92:5a:e4:34:83:98:97:9c:d5:
1b:17:1c:fa:46:4c:01:b4:96:cb:9a:1b:f9:9c:f9:99:5a:ad:
88:ed:7a:ea:d6:81:a0:d4:e5:e2:8d:31:3f:d3:c5:00:c2:19:
87:77:49:d5:b8:81:dc:7f:b5:71:21:b7:49:5e:75:c1:9f:a7:
1a:e8:36:71:0d:eb:a4:ba:60:b3:b9:34:02:ef:ce:8a:76:03:
d1:1a:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:16:36 2025 by rpki-client