Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/ER6oQtEXqP_62NwtBzB64kGBFm8.roa
File: ER6oQtEXqP_62NwtBzB64kGBFm8.roa (raw, json)
Hash identifier: a6eBV83coWmtEFcR5p1CrcxpJU5DJ/NA6zQjNaGxlPU=
Subject key identifier: 11:1E:A8:42:D1:17:A8:FF:FA:D8:DC:2D:07:30:7A:E2:41:81:16:6F
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0199DF074078B259E648E484BFB2FAF5FEE3
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/ER6oQtEXqP_62NwtBzB64kGBFm8.roa
Signing time: Mon 13 Oct 2025 19:23:38 +0000
ROA not before: Mon 13 Oct 2025 19:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215290
IP address blocks: 2a11:34c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:07:40:78:b2:59:e6:48:e4:84:bf:b2:fa:f5:fe:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Oct 13 19:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=111ea842d117a8fffad8dc2d07307ae24181166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:97:5e:f0:2a:ec:f8:05:9b:69:54:50:67:
53:94:f9:2e:7f:2c:34:7a:9e:3e:23:cb:ad:14:d6:
d1:ed:e6:98:b9:e7:ae:f4:62:b3:44:30:6e:46:d0:
a1:a1:c8:47:50:f4:84:4d:2a:37:57:90:e5:c2:a8:
f1:b3:4a:19:e4:f2:f9:3a:04:d2:b0:97:6a:bc:ed:
87:f8:0d:7d:b9:84:14:3e:21:95:ce:0d:8d:2e:5a:
a4:6c:c7:6a:48:7e:0b:28:a6:c6:06:cb:f2:d1:7e:
6e:cd:34:7d:f2:98:f3:11:cf:0f:04:4d:21:95:8a:
45:63:2f:4d:04:f7:93:22:c6:83:4c:7e:10:78:f6:
92:0a:a2:23:cb:38:d6:7a:b2:4a:dd:f6:21:2a:dd:
d3:1c:db:c7:8f:0b:19:ae:db:e2:78:3e:fd:63:7c:
b9:5e:35:f9:6a:c4:c3:bc:a6:0a:8e:ad:e7:98:ef:
36:af:9d:c7:c6:ed:53:56:58:f0:a6:e2:0e:9f:c3:
45:3b:27:9e:35:28:20:74:6d:eb:e0:24:0d:7b:56:
0b:51:4a:df:f6:be:e4:15:ef:09:1d:22:60:36:8b:
d8:28:59:69:55:49:99:70:08:80:82:fa:89:cf:4c:
45:98:77:e4:ff:a5:58:80:80:8b:ed:a8:6e:41:30:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:A8:42:D1:17:A8:FF:FA:D8:DC:2D:07:30:7A:E2:41:81:16:6F
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/ER6oQtEXqP_62NwtBzB64kGBFm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
12:53:ce:85:5d:d4:21:1d:0c:f1:c8:c1:7f:89:38:3c:fe:07:
2a:fe:60:09:d8:4c:7f:73:f3:d1:08:ab:f9:6e:ec:12:ba:8e:
25:9b:6a:b8:16:cb:be:ed:31:aa:73:7b:19:37:70:ec:3f:13:
b6:e5:1f:bf:22:14:e8:5e:17:66:88:bc:a2:d0:fd:b6:ea:1f:
d8:b3:d9:b2:a5:3c:c5:65:92:3d:02:a0:a0:5c:8d:dc:23:50:
48:21:31:a9:7d:24:4a:59:05:6c:1a:c9:fd:57:fb:5d:e2:42:
9c:ae:9a:1f:3f:ac:07:81:94:70:b9:c2:dd:cc:78:7a:b6:45:
56:73:9c:0b:b4:6f:7c:99:32:11:97:57:01:a1:1d:bf:d9:9e:
b5:a2:5d:df:c9:8d:41:ff:9f:d8:a7:7e:a3:c6:df:4d:68:b4:
88:0d:6b:2e:1a:c6:bb:c2:6b:e8:6c:b4:c8:22:57:cd:30:7a:
73:9f:5f:02:68:a1:d2:4a:ed:d2:0c:65:a4:c4:54:72:60:72:
23:e5:2a:67:e8:47:86:af:1f:11:7f:45:b0:11:09:29:63:06:
f0:40:a7:13:9c:88:6b:fb:3b:d4:04:c0:ad:cf:f4:ed:a4:04:
97:52:cb:5e:3c:7f:b5:b0:2f:39:71:3f:22:ff:a0:94:13:bf:
eb:f6:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:17 2025 by rpki-client