Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/rop6Si-gvflJGlaMTGjDBpHpYYI.roa
File: rop6Si-gvflJGlaMTGjDBpHpYYI.roa (raw, json)
Hash identifier: Vieoxx0CWOeDqKFomK10FvV28nAZrZf1I36QMg8NMrc=
Subject key identifier: AE:8A:7A:4A:2F:A0:BD:F9:49:1A:56:8C:4C:68:C3:06:91:E9:61:82
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01995416AA48E05CAF58C3DAE12E48EE4CB8
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/rop6Si-gvflJGlaMTGjDBpHpYYI.roa
Signing time: Tue 16 Sep 2025 19:53:15 +0000
ROA not before: Tue 16 Sep 2025 19:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a11:646::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:54:16:aa:48:e0:5c:af:58:c3:da:e1:2e:48:ee:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Sep 16 19:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae8a7a4a2fa0bdf9491a568c4c68c30691e96182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:87:b3:fa:b0:cc:82:23:09:ba:dd:2a:92:
8c:b1:d0:ca:a7:76:21:b5:42:b0:73:ba:a7:3e:b7:
99:02:ae:4e:77:0f:b3:07:b5:79:9b:32:96:c0:35:
6d:80:96:7f:ed:e2:fa:50:b2:6b:1c:5b:ed:0f:31:
9a:aa:ab:68:fb:6d:07:91:6c:12:71:14:d1:a2:57:
26:d7:19:6e:74:c5:1f:6c:f5:6c:28:11:7b:9e:1c:
36:6c:b3:4d:7a:bc:22:c0:12:af:62:52:3b:84:81:
fa:fa:41:06:3a:2a:34:ff:98:27:80:3a:8e:e4:34:
d4:a1:20:fc:9b:f1:c8:ee:b4:2b:a1:dd:e3:61:72:
52:a8:cc:a0:ea:0a:cb:89:18:fe:93:59:53:7d:45:
28:af:4d:94:c8:a0:0c:a7:e6:95:44:ed:11:6c:5c:
cc:19:39:12:fa:79:18:90:b6:68:a3:0c:bd:83:6a:
41:0c:2d:ff:d4:a3:2c:d9:7b:6b:c3:3f:e6:f8:44:
5d:0c:2a:38:cd:98:c4:e7:33:12:a6:da:87:0d:6c:
c7:28:03:af:e1:84:85:a1:45:9e:cc:81:59:12:6f:
77:c7:04:29:d7:22:82:4b:8e:00:4f:23:88:e0:14:
ef:43:ad:55:d2:69:37:7e:0b:89:e2:68:73:47:da:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:7A:4A:2F:A0:BD:F9:49:1A:56:8C:4C:68:C3:06:91:E9:61:82
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/rop6Si-gvflJGlaMTGjDBpHpYYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:646::/32
Signature Algorithm: sha256WithRSAEncryption
a6:24:5c:ca:09:32:86:d8:62:93:f4:93:38:9f:47:a2:63:6c:
c2:5a:de:d7:08:45:de:f6:24:1e:7a:b3:98:fb:96:94:39:e4:
70:f9:81:92:bd:12:be:12:fe:9d:d4:88:cd:c9:41:e8:02:f9:
8e:55:bb:d3:60:f3:27:7f:fe:5e:57:87:89:20:64:ce:32:4e:
01:92:56:f0:77:e1:5c:31:1b:24:23:71:43:a2:62:cc:c6:2c:
1c:23:d6:67:9f:71:4a:de:10:37:2c:f1:f8:37:61:08:df:0c:
92:4c:82:38:83:bb:f8:e9:92:e3:79:42:a5:e5:33:2d:fc:e9:
c4:30:3b:fc:5b:36:bb:47:b7:ff:21:d6:71:49:f2:13:8d:c6:
18:ac:e7:8c:bb:c3:b2:fe:ab:c5:3b:69:24:75:ff:00:46:1a:
3d:39:fe:c9:51:6f:e4:38:16:47:02:b5:fb:0a:c1:f8:fe:33:
ed:f8:8c:28:e4:dd:f9:e1:8d:df:84:96:8b:b2:a6:48:da:9b:
b8:0a:2e:0d:19:37:cb:3f:63:c7:24:f6:42:49:ae:4b:ea:ee:
34:46:de:e9:e0:a6:4f:b2:81:4d:a3:df:cd:78:dc:50:01:e5:
98:c3:0c:22:a4:52:8e:61:c9:be:5a:7b:a3:4e:bc:6e:91:ee:
9e:91:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:30 2025 by rpki-client