Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/11HjICvBTUVp6WCPQL65fGsFtG8.roa
File: 11HjICvBTUVp6WCPQL65fGsFtG8.roa (raw, json)
Hash identifier: GV6pUaibXwx/rn2KRi652sZLZ9OIc3V/4l4spvvIHjQ=
Subject key identifier: D7:51:E3:20:2B:C1:4D:45:69:E9:60:8F:40:BE:B9:7C:6B:05:B4:6F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01987C16DF691ED10146B58123C9A6D35689
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/11HjICvBTUVp6WCPQL65fGsFtG8.roa
Signing time: Tue 05 Aug 2025 21:15:30 +0000
ROA not before: Tue 05 Aug 2025 21:15:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215462
IP address blocks: 2a11:f083::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:16:df:69:1e:d1:01:46:b5:81:23:c9:a6:d3:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 21:15:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d751e3202bc14d4569e9608f40beb97c6b05b46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:d1:9d:05:60:6e:f0:58:f3:34:b4:cd:6c:
e0:f6:a3:6e:af:49:8a:78:73:5c:05:f4:fd:99:b2:
1e:69:8a:2a:42:d7:e4:44:76:3b:8c:95:2b:ff:4d:
fe:59:51:d1:fb:ea:b2:da:2d:b9:b3:68:62:f6:12:
bc:9f:bf:51:84:40:00:53:db:91:27:7a:b0:13:28:
b7:94:ad:0c:56:9f:19:6b:02:54:d1:9f:37:45:0d:
1a:5a:2c:98:5d:94:ab:e0:af:19:56:02:d9:e1:d3:
68:c0:e9:83:42:e0:ce:b7:c6:8c:ae:53:d0:76:d5:
a6:ee:42:f1:59:15:45:1c:45:2e:df:8e:27:c3:81:
6d:fd:f2:78:5a:9e:37:e7:3d:c2:9d:e8:6f:54:2d:
22:63:0e:23:ef:ed:79:2f:20:50:9a:21:1d:7a:3f:
a0:88:1d:ce:36:09:13:9c:f4:a3:6d:bf:01:f6:f9:
ca:16:28:54:c5:c0:f6:d9:e4:7d:91:f4:93:57:6f:
53:3f:a1:21:b4:80:9c:db:43:04:16:57:72:1c:b9:
e0:28:1e:aa:76:dc:2b:99:84:42:ad:76:c4:76:c2:
9e:8e:b2:06:62:fb:c8:22:85:49:d5:c9:f3:d9:d4:
66:ce:f6:41:5f:ff:ca:72:87:63:84:f1:89:26:85:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:E3:20:2B:C1:4D:45:69:E9:60:8F:40:BE:B9:7C:6B:05:B4:6F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/11HjICvBTUVp6WCPQL65fGsFtG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f083::/32
Signature Algorithm: sha256WithRSAEncryption
d1:6a:51:a0:99:13:05:2b:84:81:dd:1e:f3:ca:9e:df:fe:f1:
41:0f:0d:7b:1e:4f:2d:e4:c3:e2:f0:fa:04:ad:b6:dc:88:68:
5f:93:4b:10:9a:38:4c:42:33:7a:86:41:ff:96:bc:37:8d:5b:
c0:77:3f:b5:88:32:b0:4e:74:b3:3b:f0:83:b2:74:57:fc:f6:
c1:bb:9b:c3:93:1c:8b:71:d8:a4:f0:d4:72:f5:e0:94:28:60:
e2:2f:ff:d7:8d:65:33:73:0f:da:3b:3c:33:fc:a4:e1:33:6d:
a6:9a:d3:59:37:ec:80:fe:d6:aa:90:33:c9:d4:9a:95:51:d5:
93:cd:e6:af:ea:02:4c:b6:25:e5:e4:7a:70:bb:1e:76:13:69:
b1:5c:4a:ba:f5:52:ad:73:b1:da:70:72:4e:9d:6a:a5:0e:cf:
22:ab:30:9a:26:68:26:1a:71:bb:d6:40:22:9b:b2:8c:9c:4a:
04:21:14:69:a6:c2:de:54:62:50:ba:0f:40:96:14:32:5d:b4:
aa:1c:74:e9:ab:45:5c:35:2d:41:c3:26:e5:e1:73:ff:70:39:
11:5d:df:4d:d5:8c:f9:ea:b0:5c:c2:8f:ed:4e:df:b5:4c:74:
22:9c:7c:66:02:12:a5:a3:5d:40:d0:f5:00:51:3a:4d:02:c1:
72:bd:c8:40
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZh8Ft9pHtEBRrWBI8mm01aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwODA1MjExNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzUxZTMyMDJiYzE0ZDQ1NjllOTYwOGY0MGJlYjk3YzZiMDViNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1nRnQVgbvBY8zS0zWzg9qNur0mK
eHNcBfT9mbIeaYoqQtfkRHY7jJUr/03+WVHR++qy2i25s2hi9hK8n79RhEAAU9uR
J3qwEyi3lK0MVp8ZawJU0Z83RQ0aWiyYXZSr4K8ZVgLZ4dNowOmDQuDOt8aMrlPQ
dtWm7kLxWRVFHEUu344nw4Ft/fJ4Wp435z3CnehvVC0iYw4j7+15LyBQmiEdej+g
iB3ONgkTnPSjbb8B9vnKFihUxcD22eR9kfSTV29TP6EhtICc20MEFldyHLngKB6q
dtwrmYRCrXbEdsKejrIGYvvIIoVJ1cnz2dRmzvZBX//KcodjhPGJJoWLYQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNdR4yArwU1Faelgj0C+uXxrBbRvMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMTFIaklDdkJUVVZwNldDUFFMNjVmR3NGdEc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHwgzAN
BgkqhkiG9w0BAQsFAAOCAQEA0WpRoJkTBSuEgd0e88qe3/7xQQ8Nex5PLeTD4vD6
BK223IhoX5NLEJo4TEIzeoZB/5a8N41bwHc/tYgysE50szvwg7J0V/z2wbubw5Mc
i3HYpPDUcvXglChg4i//141lM3MP2js8M/yk4TNtpprTWTfsgP7WqpAzydSalVHV
k83mr+oCTLYl5eR6cLsedhNpsVxKuvVSrXOx2nByTp1qpQ7PIqswmiZoJhpxu9ZA
IpuyjJxKBCEUaabC3lRiULoPQJYUMl20qhx06atFXDUtQcMm5eFz/3A5EV3fTdWM
+eqwXMKP7U7ftUx0Ipx8ZgISpaNdQND1AFE6TQLBcr3IQA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:24 2025 by rpki-client