Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/6ytibQXjOjv-ZANwibgbWAzZG2U.roa
File: 6ytibQXjOjv-ZANwibgbWAzZG2U.roa (raw, json)
Hash identifier: Y/Z/9OvD6QNjfuwrTmUdgOamFL52z6ksqnz9FZTa6JU=
Subject key identifier: EB:2B:62:6D:05:E3:3A:3B:FE:64:03:70:89:B8:1B:58:0C:D9:1B:65
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 019A0B1E3FA4F9D8A32B9CDC07863ABF26D9
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/6ytibQXjOjv-ZANwibgbWAzZG2U.roa
Signing time: Wed 22 Oct 2025 08:52:03 +0000
ROA not before: Wed 22 Oct 2025 08:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16200
IP address blocks: 2a0e:6480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:1e:3f:a4:f9:d8:a3:2b:9c:dc:07:86:3a:bf:26:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 22 08:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb2b626d05e33a3bfe64037089b81b580cd91b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:0d:63:4d:66:f6:cf:15:8e:3a:d6:21:6c:
e7:b1:77:ab:4c:1f:fa:1c:31:be:a1:cf:35:ad:cf:
34:13:46:6c:25:e2:a7:60:b7:dc:66:ab:cc:15:a6:
bf:c6:92:8c:ef:cd:e4:87:9f:7a:6e:bb:7b:08:00:
3c:d3:0b:bf:3e:83:c0:a5:2d:45:3e:39:7d:20:cd:
48:46:09:53:03:ae:67:43:45:d9:1d:68:27:76:b0:
bb:1b:db:17:70:6a:02:c0:f7:4e:7c:b1:b7:1a:a3:
6c:3e:da:ef:a0:38:36:94:f8:a1:dc:fa:42:d9:bd:
96:d4:7c:19:16:98:30:55:bc:63:26:1f:2e:92:f3:
ac:02:04:2b:75:c2:49:11:82:b6:a0:bb:f0:45:cd:
c2:d9:51:df:dc:4d:0e:8f:42:67:34:1b:cb:39:f4:
f2:4c:03:e6:f4:ea:c6:64:6a:b8:c1:7b:38:28:30:
ab:90:8b:fb:0b:f6:3e:39:fc:18:3a:60:18:5f:7d:
9b:61:c4:29:0f:0a:ee:a2:75:d5:22:c6:33:a5:c9:
fd:d8:8e:ec:9d:cf:6b:43:15:d3:a5:99:5f:52:93:
12:d9:24:82:d4:ac:d8:46:38:2d:92:4f:09:8d:a1:
9e:8f:3b:82:83:30:08:b6:ad:e5:38:7b:30:04:0b:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2B:62:6D:05:E3:3A:3B:FE:64:03:70:89:B8:1B:58:0C:D9:1B:65
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/6ytibQXjOjv-ZANwibgbWAzZG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6480::/29
Signature Algorithm: sha256WithRSAEncryption
58:07:6e:33:ea:48:45:1c:c9:61:fd:e0:39:fa:07:8e:10:2b:
39:8e:d9:ff:46:64:42:51:ea:52:07:b6:d0:6d:80:2e:be:94:
87:f1:5c:93:ae:27:1c:e2:f5:16:70:ab:7f:35:55:87:40:13:
59:61:ff:0a:0f:96:3c:bd:9e:72:2e:8a:aa:45:34:34:ab:97:
df:36:83:20:d7:45:b1:66:cf:e6:f1:da:61:ec:c3:94:b4:8f:
d4:ca:4e:16:98:10:01:14:fb:15:54:44:6a:88:83:c1:d6:40:
75:8f:6d:33:fe:bf:fb:cc:06:c0:99:35:e6:ed:47:3c:dc:b3:
06:c8:ac:7d:dd:92:a8:f2:38:a4:71:7b:e1:0c:54:52:94:a2:
2c:4a:d8:a3:e6:a2:78:3b:3d:bf:32:c7:52:1c:65:6a:3e:92:
ea:07:e4:43:50:cc:54:d6:de:5a:6f:87:99:39:80:2d:dc:1c:
b6:44:b5:51:94:9b:2d:93:39:21:7d:77:54:19:b0:d0:4c:d4:
96:70:7b:0b:59:59:9d:08:37:36:bb:34:d5:97:eb:ae:e2:a7:
19:9a:17:f4:a9:f5:ab:03:11:af:3a:26:51:a9:dd:c3:56:2f:
54:17:82:22:1e:6b:4b:cb:2e:0b:ca:c7:c0:4f:73:cb:13:a7:
32:bc:ea:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:56 2025 by rpki-client