Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c6b3C_tbi85sz_FGQ_v3ysJnlR4.roa
File: c6b3C_tbi85sz_FGQ_v3ysJnlR4.roa (raw, json)
Hash identifier: t8/enufQD5PDQvi+dOTTn80r/MdtGT4HEXOm97Znetg=
Subject key identifier: 73:A6:F7:0B:FB:5B:8B:CE:6C:CF:F1:46:43:FB:F7:CA:C2:67:95:1E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01987C16DC4B1705BC2C4D3808E5E3ACDD22
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c6b3C_tbi85sz_FGQ_v3ysJnlR4.roa
Signing time: Tue 05 Aug 2025 21:15:29 +0000
ROA not before: Tue 05 Aug 2025 21:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58285
IP address blocks: 2a11:f087::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:16:dc:4b:17:05:bc:2c:4d:38:08:e5:e3:ac:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 21:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a6f70bfb5b8bce6ccff14643fbf7cac267951e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:23:bf:f2:dd:67:96:05:7e:75:60:e5:50:
83:16:42:cd:29:00:55:17:64:08:73:a8:bf:4b:db:
d9:c0:3e:9d:37:a5:a4:6f:d7:c5:04:cf:e6:f4:1b:
a9:d9:b8:85:db:55:1b:84:9e:43:7b:0b:d7:9b:90:
71:76:8e:5c:1a:6a:25:50:23:ee:24:20:b3:60:0b:
29:09:db:ab:a6:9d:03:c8:b7:fa:85:f3:97:19:6a:
0a:e6:53:81:cb:e7:07:93:fc:c5:66:8f:0b:ea:24:
e3:3e:fd:fe:18:14:ca:55:c1:d6:91:27:32:37:a5:
d2:f7:e2:67:5c:c1:35:0d:e3:51:41:17:60:17:99:
73:a0:4d:9f:46:f9:3e:ac:d8:38:3f:fb:81:83:84:
66:a6:6c:af:4c:76:44:c5:77:8c:ef:ad:c2:36:19:
1a:19:a1:f1:46:1c:93:0d:f1:0d:9e:7e:4f:bd:bf:
3b:04:22:e6:82:5f:b8:64:06:ce:6c:88:09:3e:d6:
55:63:aa:e9:09:f3:ec:1d:83:43:7e:ae:76:67:dc:
76:85:07:d5:7a:c2:15:29:ce:17:bc:b7:7a:6e:11:
2d:db:95:d8:89:48:9c:37:00:a0:1a:de:b5:91:de:
6e:0a:f3:1f:b6:a1:d4:c2:e7:d0:a4:9a:e0:cd:78:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:F7:0B:FB:5B:8B:CE:6C:CF:F1:46:43:FB:F7:CA:C2:67:95:1E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/c6b3C_tbi85sz_FGQ_v3ysJnlR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f087::/32
Signature Algorithm: sha256WithRSAEncryption
cd:c8:ca:0b:44:94:c4:e5:0e:1b:72:fa:36:d2:3b:02:67:59:
dd:1b:dc:12:b9:e7:a3:14:ce:32:cc:72:fb:d9:2d:22:17:81:
16:45:82:14:b8:46:bc:68:ad:e5:55:1e:44:00:03:87:17:5f:
b7:ac:61:da:74:ab:62:d1:60:69:9c:71:78:c6:6d:0d:08:88:
68:bc:9d:4e:66:24:87:ed:1e:9b:2d:fd:aa:58:bb:3a:2f:ac:
cf:79:45:53:df:71:44:c0:ee:61:01:67:43:e2:b3:d1:fd:a5:
8b:ea:b9:d8:ba:9b:ad:aa:24:44:52:4f:09:b1:65:b5:bd:72:
36:e6:56:25:05:d5:50:4b:4c:1a:80:1d:30:c3:e4:30:d1:84:
2e:bf:3b:40:25:12:f2:a6:00:1a:47:e0:85:f0:05:e1:b5:bd:
c9:f7:e5:f0:03:30:dd:6c:43:22:c0:d2:59:1c:65:d0:68:99:
7e:ca:20:11:0d:73:9b:ba:4b:f1:5d:8f:9a:15:f2:b8:b1:60:
0a:a6:38:8f:c7:8c:38:8e:0c:a2:ec:73:20:fe:08:03:78:65:
37:b8:4d:2c:17:56:0d:ba:e0:ae:6a:c0:45:9f:4e:ac:e9:0d:
4e:c6:93:0d:05:89:69:96:df:57:2a:1c:a6:6c:97:e0:b0:a0:
cf:3c:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:10 2025 by rpki-client