Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/gWcMmmdsPAMAIxAc2B4OhrNWv5g.roa
File: gWcMmmdsPAMAIxAc2B4OhrNWv5g.roa (raw, json)
Hash identifier: IXbiRdiOEMX2uMKpJ9X6SWj6zCiLAW+kXNJrRmgozWw=
Subject key identifier: 81:67:0C:9A:67:6C:3C:03:00:23:10:1C:D8:1E:0E:86:B3:56:BF:98
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01986B6AAAF87BCD6EDAF2F06353F3A08219
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/gWcMmmdsPAMAIxAc2B4OhrNWv5g.roa
Signing time: Sat 02 Aug 2025 15:33:29 +0000
ROA not before: Sat 02 Aug 2025 15:33:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a11:4b41::/32 maxlen: 32
2a12:a340::/32 maxlen: 32
2a12:c304::/30 maxlen: 30
2a13:8580::/32 maxlen: 32
2a13:93c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:6a:aa:f8:7b:cd:6e:da:f2:f0:63:53:f3:a0:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 2 15:33:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81670c9a676c3c030023101cd81e0e86b356bf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:95:d5:01:f4:60:ce:72:35:e2:79:66:e0:
0d:db:d1:5f:05:04:ee:74:36:fa:68:a8:da:bd:0b:
87:6a:0a:f9:23:c5:09:f7:a1:61:19:6d:97:2b:b9:
8b:63:6d:4a:11:7c:51:dc:c1:3e:0f:2f:3e:9f:be:
ec:8d:76:24:d1:cd:9a:fd:a9:5f:34:63:de:26:9a:
2e:0d:94:c1:55:4f:e7:a6:de:d2:cf:03:6d:3d:94:
43:96:b2:1f:75:13:f9:73:06:e2:98:bc:19:d0:5e:
b5:82:bd:4a:04:c6:6d:14:2d:16:0e:3a:11:d9:b5:
65:68:b4:f6:34:73:1d:78:a6:59:ac:12:2e:aa:00:
a2:b0:8c:ec:58:b2:91:12:e2:3f:ce:18:18:c5:72:
96:48:80:4c:48:29:e6:4e:c5:66:8e:3f:10:9f:a5:
62:ca:1c:e9:f4:51:c0:d2:db:5b:3e:3d:95:d0:84:
8c:df:05:4d:66:fc:60:65:88:5d:9f:e9:4d:ed:54:
a6:af:43:30:2c:f3:cc:ff:8e:2c:41:ee:e8:24:26:
90:ff:8f:f0:80:97:b4:32:0f:71:ca:5a:e6:5b:ea:
f9:42:3a:77:4f:cc:0c:f6:2d:d4:5b:43:86:5f:a6:
11:b1:07:34:93:60:aa:bc:74:31:44:75:58:45:22:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:0C:9A:67:6C:3C:03:00:23:10:1C:D8:1E:0E:86:B3:56:BF:98
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/gWcMmmdsPAMAIxAc2B4OhrNWv5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b41::/32
2a12:a340::/32
2a12:c304::/30
2a13:8580::/32
2a13:93c1::/32
Signature Algorithm: sha256WithRSAEncryption
cf:c1:fe:db:57:45:70:11:e6:7a:fd:70:42:6c:5c:12:77:10:
0a:9f:9a:9a:05:b2:95:79:3b:05:6b:83:de:41:61:b1:99:41:
ae:ad:89:b8:ed:b7:a0:17:b4:04:14:64:a8:5f:4a:82:f8:c7:
e4:d0:09:9d:7c:f2:01:fb:54:a6:2e:8c:72:0f:f8:38:4c:3a:
ed:17:04:9e:3e:46:3c:34:65:b4:1c:f2:2e:e0:a6:e7:6a:b4:
f9:89:af:9a:50:4c:1d:d2:72:63:82:22:0b:a6:eb:17:95:d3:
46:31:ae:df:c1:35:e5:31:03:67:c4:68:e3:6d:9d:6a:1c:57:
fe:b4:f3:51:6a:2f:75:14:3f:83:73:27:d7:18:61:7d:ed:64:
68:eb:eb:b8:5a:82:40:ae:45:24:61:24:7b:05:1e:72:1a:7f:
c2:2c:6e:ff:b1:16:1d:f1:f5:38:c4:f0:47:25:9f:c8:29:88:
27:89:f5:0c:0f:33:0c:05:95:08:24:4b:e0:a2:e0:48:a8:d6:
5e:9a:12:8c:2c:bc:bf:7d:29:81:c5:6a:52:ae:48:a1:62:b0:
aa:5b:30:89:29:bd:62:0e:97:3d:a3:ae:8d:3a:12:07:99:c0:
55:94:96:da:93:8b:55:6a:0f:71:c3:a9:84:da:9c:37:37:dc:
45:2c:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:53 2025 by rpki-client