Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hjm6vd35l6Y3cqQEZm9hJ2_ABJQ.roa
File: hjm6vd35l6Y3cqQEZm9hJ2_ABJQ.roa (raw, json)
Hash identifier: Gd7c+PkudYP1J1WpK9G1NICSRvpV2yqNXJBq8mT9Cvg=
Subject key identifier: 86:39:BA:BD:DD:F9:97:A6:37:72:A4:04:66:6F:61:27:6F:C0:04:94
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01987C16DCB263A4ECDB22DCE2C12ABE8BC3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hjm6vd35l6Y3cqQEZm9hJ2_ABJQ.roa
Signing time: Tue 05 Aug 2025 21:15:29 +0000
ROA not before: Tue 05 Aug 2025 21:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a11:f085::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:16:dc:b2:63:a4:ec:db:22:dc:e2:c1:2a:be:8b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 21:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8639babdddf997a63772a404666f61276fc00494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:da:9a:16:cd:08:3a:97:76:1f:95:af:24:
bb:ef:6f:5e:c3:ba:d2:0c:64:eb:47:f6:90:ce:85:
db:96:08:63:86:c8:e4:cf:23:a6:3c:79:00:3d:0e:
8b:32:0c:6e:06:bd:19:5f:4c:12:05:10:4b:9f:aa:
04:63:b7:48:db:a1:7f:44:aa:f8:c5:e6:66:bc:26:
43:28:59:65:81:7f:11:cb:e9:40:84:58:a2:7d:ac:
49:b2:fc:3b:e0:7a:b6:46:f5:e9:eb:42:3f:b0:c7:
5a:2d:0c:09:99:89:ae:b7:f6:cb:81:e5:8d:44:cf:
be:31:06:40:c8:a2:77:9f:73:99:80:10:ae:10:9c:
46:e2:3e:c6:3d:7c:14:36:60:3b:28:ae:2c:86:93:
0f:2f:7e:bf:4f:91:1e:11:77:bd:da:f6:d9:b7:c0:
b6:a5:3b:93:27:bb:f8:c7:e2:7a:cd:e8:69:3f:77:
35:47:90:db:14:24:ef:65:2e:c0:4d:b2:95:c2:9b:
3f:3f:97:70:13:06:0a:46:aa:2e:e1:0b:22:a7:6f:
42:64:b5:ed:f4:b2:8c:1c:ce:a8:e5:a3:84:d5:81:
67:7d:28:5c:af:b5:bf:44:17:99:ac:e6:af:83:1e:
68:d2:b0:de:75:20:49:e7:29:42:4d:fa:99:51:20:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:BA:BD:DD:F9:97:A6:37:72:A4:04:66:6F:61:27:6F:C0:04:94
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hjm6vd35l6Y3cqQEZm9hJ2_ABJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f085::/32
Signature Algorithm: sha256WithRSAEncryption
cd:d5:76:66:68:95:e7:20:fb:1e:36:78:55:3a:5f:80:1c:22:
12:83:00:5c:08:c1:92:fe:97:63:25:b0:d7:94:34:23:78:d9:
27:a6:3b:69:31:c8:25:3f:24:fa:59:b2:f2:3b:4d:02:3b:15:
82:36:b7:00:9a:af:f3:eb:87:6b:78:5b:f2:2c:f0:43:27:49:
38:11:65:d8:4e:fc:9b:d3:13:73:db:0d:72:2b:a2:25:37:e6:
01:84:75:ac:50:f1:65:84:8d:23:26:7d:e1:5c:e0:c1:a3:61:
6e:aa:cd:70:3e:a9:1d:4b:f6:b5:ac:be:92:81:45:0f:16:50:
ff:7f:53:c4:32:95:d9:e4:27:82:04:9e:a3:73:e7:42:32:68:
02:b2:f6:05:f2:52:4b:e8:1d:30:9c:63:a8:c9:c3:fb:49:e9:
ce:23:4c:9e:8f:49:80:80:53:0a:bd:73:cb:e5:9d:d5:11:74:
55:59:12:9c:c3:35:c5:58:24:47:f6:bd:56:40:d8:b7:68:f5:
df:ff:36:2c:4d:b5:86:32:2a:87:42:b7:e3:e3:2d:a4:a7:46:
29:6d:de:5e:07:2d:6c:69:74:b0:0d:2d:49:9e:84:26:76:7e:
58:ee:81:ed:2e:e1:f1:ca:75:aa:75:a5:6e:a0:3d:cd:5c:0a:
5b:28:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:42 2025 by rpki-client