Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QGLzJuDW0dCRQ5jrjydfWx7Y9qE.roa
File: QGLzJuDW0dCRQ5jrjydfWx7Y9qE.roa (raw, json)
Hash identifier: breMggXxURddDbYPO5b98RMi3n5j/OMP248pyxpw4K0=
Subject key identifier: 40:62:F3:26:E0:D6:D1:D0:91:43:98:EB:8F:27:5F:5B:1E:D8:F6:A1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01987C16DF36C99727C5406685C5BB05A03F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QGLzJuDW0dCRQ5jrjydfWx7Y9qE.roa
Signing time: Tue 05 Aug 2025 21:15:30 +0000
ROA not before: Tue 05 Aug 2025 21:15:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215420
IP address blocks: 2a11:f081::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:16:df:36:c9:97:27:c5:40:66:85:c5:bb:05:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 21:15:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4062f326e0d6d1d0914398eb8f275f5b1ed8f6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:11:3c:9a:02:e9:83:ab:c4:1f:fc:25:64:
62:ad:72:a5:a5:e9:af:4d:c3:49:ea:4c:93:7f:69:
5c:00:e6:e5:d7:d8:e0:c4:aa:fa:72:00:52:47:2d:
fa:9d:37:6d:eb:4f:5c:ba:f2:69:f6:aa:44:94:06:
bb:1b:10:a6:89:5d:35:4a:6c:3f:92:85:2f:8f:66:
d1:d3:1e:63:95:fb:6c:28:7e:df:4a:9c:08:75:f6:
4f:27:ff:11:e1:60:42:2a:54:b2:e4:2a:16:a6:cd:
ed:83:d0:e0:e1:c0:c7:26:e9:fc:d0:0a:7d:4b:ee:
da:18:1d:1a:ac:46:1c:73:ed:d0:5f:62:87:a2:a1:
97:91:f6:e3:b3:c9:05:41:0d:e8:cc:0b:d4:0a:80:
02:4c:58:bc:f1:bd:90:e4:a8:6f:af:a2:ba:3e:3b:
58:3b:1a:63:2c:e6:9c:d5:f0:b1:1f:88:a0:26:18:
d4:08:8d:5d:f5:46:99:e2:f5:f3:64:a4:e0:63:fc:
9f:04:5f:56:d3:e4:6c:aa:fe:07:9d:38:a8:40:56:
99:6c:31:04:dd:fa:43:b9:f4:64:36:f5:13:59:33:
7e:28:30:92:e3:e7:dd:fc:48:29:de:c3:27:8c:9f:
75:f2:88:95:ee:63:42:0e:e7:51:c1:ea:94:21:af:
a0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:F3:26:E0:D6:D1:D0:91:43:98:EB:8F:27:5F:5B:1E:D8:F6:A1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QGLzJuDW0dCRQ5jrjydfWx7Y9qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f081::/32
Signature Algorithm: sha256WithRSAEncryption
bb:23:59:2f:62:b7:e6:a3:6c:76:dd:67:35:55:8d:18:18:c8:
6f:7e:fc:c1:9a:b4:fd:e4:33:73:e0:05:a1:05:2d:d4:29:d0:
2c:c6:9c:16:3c:a0:2e:b4:bd:9b:d5:46:22:03:42:f5:af:64:
d7:3a:9c:22:63:81:1e:40:1b:ea:e7:d4:0a:25:1d:ae:dd:80:
df:b7:8c:78:84:3b:82:ba:6d:2f:7c:13:e0:ab:92:fb:82:50:
3b:f9:7b:ef:18:76:9b:48:68:fa:16:17:70:b5:b7:b5:24:63:
86:b1:81:93:b7:7b:30:c9:cc:79:68:94:1e:1c:50:60:8b:17:
b1:cd:d5:8a:05:25:67:5f:4a:4f:38:e5:06:13:0b:f0:95:4a:
94:24:41:e7:12:66:b1:0d:8a:05:70:ce:3b:6a:9f:ae:e6:30:
2a:cc:88:f8:c1:19:fb:22:6e:c1:b8:d5:b3:8e:1e:cb:aa:61:
01:8e:b0:ed:0c:0f:6b:64:a0:dc:8f:bc:62:df:5a:17:29:35:
c0:6c:e7:a6:b0:d3:48:0c:dc:31:98:d4:53:77:5a:1c:0a:ee:
60:16:06:58:75:bd:57:c8:f7:bc:9e:76:f4:78:38:30:88:cd:
a1:a3:44:6c:bd:ee:de:e7:9b:9f:6e:01:49:7c:4a:85:f6:61:
0d:6f:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:51 2025 by rpki-client