Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hhDHzkrMVVbokSjH1SVKHFrsO0c.roa
File: hhDHzkrMVVbokSjH1SVKHFrsO0c.roa (raw, json)
Hash identifier: yrHMKjnkF7z7nStfqS9Bo+Jc8S+1fe5OyNtcfeCEtMM=
Subject key identifier: 86:10:C7:CE:4A:CC:55:56:E8:91:28:C7:D5:25:4A:1C:5A:EC:3B:47
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019A4912D83671EBB30EBC4F02177E34CABA
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hhDHzkrMVVbokSjH1SVKHFrsO0c.roa
Signing time: Mon 03 Nov 2025 09:36:03 +0000
ROA not before: Mon 03 Nov 2025 09:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1031::/48 maxlen: 48
2a07:3501:1032::/47 maxlen: 48
2a07:3501:1050::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:10e0::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
2a07:3502:1210::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:12:d8:36:71:eb:b3:0e:bc:4f:02:17:7e:34:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Nov 3 09:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8610c7ce4acc5556e89128c7d5254a1c5aec3b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:c1:d7:6c:4b:1c:e4:c1:82:eb:c8:18:a8:
55:ba:f7:93:bc:7f:40:6e:04:30:a5:21:23:36:cf:
b3:c5:d0:e7:9a:17:5f:96:d6:46:a1:32:82:6a:9b:
7d:08:34:78:17:8a:bd:3a:93:e0:72:9c:07:37:a5:
14:b9:70:4a:2e:3c:c6:d7:73:a5:df:1b:db:69:ba:
68:ee:66:e9:b0:24:24:e2:30:9a:b4:f2:1f:ec:8f:
f7:3b:c4:ac:52:22:d0:f8:48:7b:c8:a8:cd:02:b8:
69:36:a3:d7:c0:7f:2e:82:b3:4b:6c:e4:70:a8:ac:
a5:97:26:3a:a8:84:f0:95:45:08:dc:fb:5f:bf:c9:
59:19:3a:27:99:4e:da:16:52:31:1e:1e:2f:0f:97:
54:67:e3:d8:37:6b:e2:e8:c4:29:18:e6:86:79:58:
37:f0:9b:5f:c5:34:f9:a2:15:f3:da:76:93:66:cd:
2f:0e:3e:62:fa:10:83:db:0b:e8:74:cd:d9:de:f1:
8a:01:12:36:8f:1b:17:7d:9e:fd:2f:70:37:11:a6:
88:74:6c:ac:4c:1f:03:b2:fa:04:e8:45:a9:00:1a:
e0:b7:8c:bf:20:f1:86:22:3f:f7:e4:58:47:ec:85:
5a:aa:80:af:87:bb:9e:a4:c6:8d:05:aa:7b:d6:ac:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:C7:CE:4A:CC:55:56:E8:91:28:C7:D5:25:4A:1C:5A:EC:3B:47
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/hhDHzkrMVVbokSjH1SVKHFrsO0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1031::-2a07:3501:1033:ffff:ffff:ffff:ffff:ffff
2a07:3501:1050::/48
2a07:3501:1060::/48
2a07:3502:10e0::/48
2a07:3502:11c0::/48
2a07:3502:1210::/46
Signature Algorithm: sha256WithRSAEncryption
55:e5:ae:35:34:4b:62:47:82:f2:f6:22:67:27:52:30:e5:bc:
6d:8a:e2:d0:f5:95:79:ab:89:5c:b9:bf:70:ef:14:c5:46:f8:
5f:2b:f5:5e:94:3d:3a:15:99:dc:04:9f:20:df:98:06:76:7d:
68:e0:6f:db:53:5e:43:6c:b0:57:1e:ad:bc:af:6c:bf:96:2d:
df:ce:5c:a0:e7:8d:d5:59:b1:97:af:a6:79:75:ae:d8:9b:7c:
2e:1c:98:97:84:3a:d5:e8:53:15:30:f3:01:82:e1:4f:13:d7:
ea:a9:f5:dd:d7:42:9b:b4:c7:67:49:05:85:40:36:4e:44:9b:
bb:d3:80:91:2e:c3:21:20:12:b4:33:7b:6b:c6:e3:27:3b:22:
10:b1:83:0f:69:38:6c:c3:b4:01:7f:66:42:a6:77:6a:ed:ae:
4f:28:76:f0:4e:5b:ab:85:44:28:72:27:2d:4b:fa:27:f6:7f:
a3:2e:27:c4:d6:2b:60:a3:aa:df:93:4f:04:ae:95:3e:b8:60:
d0:01:19:a3:76:fd:eb:1e:43:ff:2e:0d:fd:9a:82:4c:f5:7f:
45:a8:53:fb:9b:d1:8b:35:8a:ce:8d:96:a8:bd:85:e1:c6:bb:
a0:69:9c:eb:bc:1a:a4:b7:8e:69:a4:59:db:71:0b:ab:23:82:
fe:77:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:06:32 2025 by rpki-client