Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fYQ78smuX4wGD3Ir9DESI9PELnY.roa
File: fYQ78smuX4wGD3Ir9DESI9PELnY.roa (raw, json)
Hash identifier: leMvmOLbMrPAwqWZkl0vvPVZtpxrihOFTDjB7za5oNA=
Subject key identifier: 7D:84:3B:F2:C9:AE:5F:8C:06:0F:72:2B:F4:31:12:23:D3:C4:2E:76
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01987C16DEB11F7733076693E2A441A26B71
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fYQ78smuX4wGD3Ir9DESI9PELnY.roa
Signing time: Tue 05 Aug 2025 21:15:30 +0000
ROA not before: Tue 05 Aug 2025 21:15:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215310
IP address blocks: 2a11:f080::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:16:de:b1:1f:77:33:07:66:93:e2:a4:41:a2:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 21:15:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d843bf2c9ae5f8c060f722bf4311223d3c42e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:65:65:fa:6a:30:15:06:35:37:a8:81:9a:
d0:a8:9a:3b:46:85:5d:3b:97:16:cb:9a:3e:36:a4:
d7:21:37:a3:bc:5a:24:e9:56:05:bf:32:b4:d7:09:
b3:d0:e6:c2:a4:74:37:55:fa:94:53:4e:71:1d:71:
96:61:af:f1:47:2c:81:fd:bf:cc:ce:6c:7d:91:04:
1d:37:32:5b:c6:95:d4:07:87:80:c1:07:c7:94:7c:
35:ea:bf:64:ee:fd:0f:c7:56:b9:8a:62:a2:f7:a7:
44:51:48:5e:b5:d8:33:98:ba:bb:e6:6d:42:23:26:
5e:4b:9c:55:cb:9c:6e:93:56:04:34:01:12:6f:b5:
b7:32:6b:76:07:03:f1:03:64:76:6f:6b:10:f8:9d:
65:f7:ff:af:f5:75:75:40:46:01:b1:a9:f4:32:4e:
d8:e2:ec:d1:d7:64:88:b9:b3:de:a6:cf:fd:38:a2:
70:e0:7f:61:10:13:a4:be:aa:38:c6:07:65:ac:ec:
c9:87:c2:6d:39:75:6a:15:ca:8b:93:5f:8e:04:a7:
03:a6:e3:e8:22:06:a3:b7:f9:39:cc:63:28:b2:f2:
09:cd:eb:d9:c0:c8:9b:33:61:19:42:d3:4c:0d:e7:
5e:39:19:a6:74:5a:68:46:c6:84:bc:a5:b6:8f:07:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:3B:F2:C9:AE:5F:8C:06:0F:72:2B:F4:31:12:23:D3:C4:2E:76
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fYQ78smuX4wGD3Ir9DESI9PELnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f080::/32
Signature Algorithm: sha256WithRSAEncryption
0a:24:37:6c:d4:42:cd:c6:78:f9:7d:2d:cb:88:36:8a:73:49:
eb:83:97:9a:b1:68:8a:57:c2:20:ee:47:6f:7d:99:b5:a9:17:
95:ba:2b:68:45:4f:d4:c1:01:c5:51:0b:34:3c:7d:f0:9d:20:
7e:47:8d:f1:d5:12:09:b9:fa:50:f7:4f:70:1d:11:dd:a4:9e:
3f:f8:23:0e:2a:78:62:50:7b:16:7b:87:34:26:cc:27:c6:c6:
62:bf:42:33:28:bc:84:12:d4:69:ee:53:e2:aa:66:01:2c:32:
34:ab:c1:98:17:1e:a3:8f:5f:67:05:e4:42:8a:10:79:51:4e:
ce:7d:60:61:c5:7c:7e:05:35:f1:fa:e3:e8:6e:d0:af:4e:48:
72:12:cf:16:a2:44:40:9e:a9:cb:8b:ee:fb:05:26:f4:17:e3:
99:19:14:d4:f8:ab:cb:59:b7:1e:35:5d:6d:05:44:79:d8:d2:
88:17:e8:1d:78:56:6d:28:ce:42:87:2a:0a:f8:ce:7c:63:ec:
7c:5e:d1:61:5d:8d:37:c0:ee:4e:b9:0c:ec:a9:3c:6b:8e:1c:
c6:fc:0a:e6:5e:cb:b4:f6:36:cd:05:df:13:53:42:71:5f:40:
0c:0b:51:3b:2a:45:a4:b6:fc:1d:3b:08:bc:2f:0d:aa:7d:5a:
08:45:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:48 2025 by rpki-client