Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rrxHkQmVrvnEpLC0y1gl1dFmYJo.roa
File: rrxHkQmVrvnEpLC0y1gl1dFmYJo.roa (raw, json)
Hash identifier: sk2jo6O4szuz2/rFe/K5Ox5726GxYAc0qM+YGTiHZQk=
Subject key identifier: AE:BC:47:91:09:95:AE:F9:C4:A4:B0:B4:CB:58:25:D5:D1:66:60:9A
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01982E0FD2C651DD8BFC24BC335E39E3AD1E
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rrxHkQmVrvnEpLC0y1gl1dFmYJo.roa
Signing time: Mon 21 Jul 2025 17:37:25 +0000
ROA not before: Mon 21 Jul 2025 17:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50529
IP address blocks: 2a05:3d40::/29 maxlen: 29
2a05:b440::/29 maxlen: 29
2a05:c500::/29 maxlen: 29
2a06:5c00::/29 maxlen: 29
2a06:77c0::/29 maxlen: 29
2a06:b180::/29 maxlen: 29
2a07:3700::/29 maxlen: 29
2a07:bc40::/29 maxlen: 29
2a07:cc40::/29 maxlen: 29
2a09:a80::/29 maxlen: 29
2a09:1100::/29 maxlen: 29
2a09:1200::/29 maxlen: 29
2a09:1a00::/29 maxlen: 29
2a09:2380::/29 maxlen: 29
2a09:2a80::/29 maxlen: 29
2a09:2c80::/29 maxlen: 29
2a09:2d00::/29 maxlen: 29
2a09:3280::/29 maxlen: 29
2a09:3480::/29 maxlen: 29
2a09:3780::/29 maxlen: 29
2a09:3a80::/29 maxlen: 29
2a09:3f80::/29 maxlen: 29
2a09:4000::/29 maxlen: 29
2a09:4100::/29 maxlen: 29
2a09:4a00::/29 maxlen: 29
2a09:5200::/29 maxlen: 29
2a09:5280::/29 maxlen: 29
2a09:7980::/29 maxlen: 29
2a09:7c80::/29 maxlen: 29
2a09:8100::/29 maxlen: 29
2a09:8800::/29 maxlen: 29
2a09:8e00::/29 maxlen: 29
2a09:8f00::/29 maxlen: 29
2a09:8f40::/29 maxlen: 29
2a09:91c0::/29 maxlen: 29
2a09:9480::/29 maxlen: 29
2a09:9640::/29 maxlen: 29
2a09:9800::/29 maxlen: 29
2a09:9d80::/29 maxlen: 29
2a09:a880::/29 maxlen: 29
2a09:b980::/29 maxlen: 29
2a09:cb40::/29 maxlen: 29
2a09:d440::/29 maxlen: 29
2a09:e000::/29 maxlen: 29
2a09:ed00::/29 maxlen: 29
2a09:f500::/29 maxlen: 29
2a0a:6c0::/29 maxlen: 29
2a0a:780::/29 maxlen: 29
2a0a:1f80::/29 maxlen: 29
2a0a:c500::/29 maxlen: 29
2a0a:ebc0::/29 maxlen: 29
2a0b:5780::/29 maxlen: 29
2a0b:9c80::/29 maxlen: 29
2a0b:ac80::/29 maxlen: 29
2a0b:f340::/29 maxlen: 29
2a0c:3740::/29 maxlen: 29
2a0c:4a80::/29 maxlen: 29
2a0c:5580::/29 maxlen: 29
2a0c:8580::/29 maxlen: 29
2a0c:a280::/29 maxlen: 29
2a0d:1800::/29 maxlen: 29
2a0d:4840::/29 maxlen: 29
2a0d:64c0::/29 maxlen: 29
2a0d:8740::/29 maxlen: 29
2a0d:d2c0::/29 maxlen: 29
2a0d:e040::/29 maxlen: 29
2a0d:fac0::/29 maxlen: 29
2a0e:2340::/29 maxlen: 29
2a0e:2bc0::/29 maxlen: 29
2a0e:4e40::/29 maxlen: 29
2a0e:4ec0::/29 maxlen: 29
2a0e:5500::/29 maxlen: 29
2a0e:61c0::/29 maxlen: 29
2a0e:6d80::/29 maxlen: 29
2a0e:7840::/29 maxlen: 29
2a0e:7940::/29 maxlen: 29
2a0e:86c0::/29 maxlen: 29
2a0e:90c0::/29 maxlen: 29
2a0e:9600::/29 maxlen: 29
2a0e:a040::/29 maxlen: 29
2a0e:a340::/29 maxlen: 29
2a0e:a740::/29 maxlen: 29
2a0e:b840::/29 maxlen: 29
2a0e:bc80::/29 maxlen: 29
2a0e:bcc0::/29 maxlen: 29
2a0e:bd40::/29 maxlen: 29
2a0e:c540::/29 maxlen: 29
2a0e:c8c0::/29 maxlen: 29
2a0e:cc40::/29 maxlen: 29
2a0e:d900::/29 maxlen: 29
2a0e:da00::/29 maxlen: 29
2a0e:ea40::/29 maxlen: 29
2a0e:f740::/29 maxlen: 29
2a0e:fbc0::/29 maxlen: 29
2a0f:880::/29 maxlen: 29
2a0f:ec0::/29 maxlen: 29
2a0f:1280::/29 maxlen: 29
2a0f:26c0::/29 maxlen: 29
2a0f:4140::/29 maxlen: 29
2a0f:5600::/29 maxlen: 29
2a0f:5a00::/29 maxlen: 29
2a0f:65c0::/29 maxlen: 29
2a0f:9e40::/29 maxlen: 29
2a0f:aa00::/29 maxlen: 29
2a0f:b600::/29 maxlen: 29
2a0f:b800::/29 maxlen: 29
2a0f:c880::/29 maxlen: 29
2a12:3c0::/29 maxlen: 29
2a12:4bc0::/29 maxlen: 29
2a12:4cc0::/29 maxlen: 29
2a12:4d40::/29 maxlen: 29
2a12:4dc0::/29 maxlen: 29
2a12:4fc0::/29 maxlen: 29
2a12:55c0::/29 maxlen: 29
2a12:a880::/29 maxlen: 29
2a12:e700::/29 maxlen: 29
2a12:ed80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:0f:d2:c6:51:dd:8b:fc:24:bc:33:5e:39:e3:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 21 17:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aebc47910995aef9c4a4b0b4cb5825d5d166609a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:6b:9a:d6:0d:b3:3c:4b:f5:69:b4:b3:16:
15:59:e2:93:f4:f7:a0:1c:1f:0b:30:82:d3:1f:e1:
76:b4:fa:c2:5a:6a:bc:06:7a:52:94:af:c6:f4:a9:
0f:22:0f:e7:42:9d:2a:fc:0f:b4:3b:d0:19:5b:0e:
35:52:31:d5:2b:da:d0:39:5e:c1:4e:ff:77:09:d0:
cd:17:ea:7f:d0:dd:eb:ad:e8:12:ef:92:a5:bd:2f:
cd:3e:0d:48:77:0a:89:79:47:c9:ae:87:bb:0d:3d:
f5:e9:8e:f1:c9:6f:db:80:12:58:ef:a9:08:a8:bf:
42:8b:09:a7:bf:18:fb:ee:96:45:d7:19:b3:21:c8:
51:b4:a4:26:56:04:4a:ee:f2:c8:7d:44:36:44:a3:
65:3e:8d:f7:f7:99:91:65:84:66:e4:41:89:34:3e:
11:3d:e0:cc:e7:81:ec:25:0b:f5:54:13:87:36:39:
93:34:09:f9:8d:b6:a1:e1:41:9e:d0:3a:1b:8e:ec:
e9:85:13:12:2f:8f:6a:9c:2e:e8:9a:97:b7:14:dc:
01:aa:69:17:84:7d:fb:6e:37:92:7b:ed:96:df:9b:
2d:14:fe:da:dc:84:f0:5b:8e:64:af:43:f1:70:9f:
66:4c:fc:49:90:08:c6:fb:6d:df:83:69:f5:aa:d9:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:47:91:09:95:AE:F9:C4:A4:B0:B4:CB:58:25:D5:D1:66:60:9A
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rrxHkQmVrvnEpLC0y1gl1dFmYJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3d40::/29
2a05:b440::/29
2a05:c500::/29
2a06:5c00::/29
2a06:77c0::/29
2a06:b180::/29
2a07:3700::/29
2a07:bc40::/29
2a07:cc40::/29
2a09:a80::/29
2a09:1100::/29
2a09:1200::/29
2a09:1a00::/29
2a09:2380::/29
2a09:2a80::/29
2a09:2c80::/29
2a09:2d00::/29
2a09:3280::/29
2a09:3480::/29
2a09:3780::/29
2a09:3a80::/29
2a09:3f80::/29
2a09:4000::/29
2a09:4100::/29
2a09:4a00::/29
2a09:5200::/29
2a09:5280::/29
2a09:7980::/29
2a09:7c80::/29
2a09:8100::/29
2a09:8800::/29
2a09:8e00::/29
2a09:8f00::/29
2a09:8f40::/29
2a09:91c0::/29
2a09:9480::/29
2a09:9640::/29
2a09:9800::/29
2a09:9d80::/29
2a09:a880::/29
2a09:b980::/29
2a09:cb40::/29
2a09:d440::/29
2a09:e000::/29
2a09:ed00::/29
2a09:f500::/29
2a0a:6c0::/29
2a0a:780::/29
2a0a:1f80::/29
2a0a:c500::/29
2a0a:ebc0::/29
2a0b:5780::/29
2a0b:9c80::/29
2a0b:ac80::/29
2a0b:f340::/29
2a0c:3740::/29
2a0c:4a80::/29
2a0c:5580::/29
2a0c:8580::/29
2a0c:a280::/29
2a0d:1800::/29
2a0d:4840::/29
2a0d:64c0::/29
2a0d:8740::/29
2a0d:d2c0::/29
2a0d:e040::/29
2a0d:fac0::/29
2a0e:2340::/29
2a0e:2bc0::/29
2a0e:4e40::/29
2a0e:4ec0::/29
2a0e:5500::/29
2a0e:61c0::/29
2a0e:6d80::/29
2a0e:7840::/29
2a0e:7940::/29
2a0e:86c0::/29
2a0e:90c0::/29
2a0e:9600::/29
2a0e:a040::/29
2a0e:a340::/29
2a0e:a740::/29
2a0e:b840::/29
2a0e:bc80::/29
2a0e:bcc0::/29
2a0e:bd40::/29
2a0e:c540::/29
2a0e:c8c0::/29
2a0e:cc40::/29
2a0e:d900::/29
2a0e:da00::/29
2a0e:ea40::/29
2a0e:f740::/29
2a0e:fbc0::/29
2a0f:880::/29
2a0f:ec0::/29
2a0f:1280::/29
2a0f:26c0::/29
2a0f:4140::/29
2a0f:5600::/29
2a0f:5a00::/29
2a0f:65c0::/29
2a0f:9e40::/29
2a0f:aa00::/29
2a0f:b600::/29
2a0f:b800::/29
2a0f:c880::/29
2a12:3c0::/29
2a12:4bc0::/29
2a12:4cc0::/29
2a12:4d40::/29
2a12:4dc0::/29
2a12:4fc0::/29
2a12:55c0::/29
2a12:a880::/29
2a12:e700::/29
2a12:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
94:ed:12:6a:91:1d:33:8b:fd:8a:ed:cc:ed:14:00:8e:2f:79:
f2:65:a1:80:81:fc:ca:08:0f:aa:19:ff:58:a8:25:99:a0:90:
2e:7a:7c:11:38:ca:24:a5:e3:62:66:dd:aa:34:b9:ae:bc:af:
98:77:ee:ce:5d:18:ec:41:ff:33:5f:46:1c:ec:f8:a1:7b:84:
9a:4d:99:de:7c:80:44:27:c4:b3:11:e4:64:d8:0a:f8:c3:f0:
c5:f0:26:02:76:9e:98:d3:34:10:ba:7f:84:b3:b4:be:73:c9:
c1:32:9d:54:9c:89:3e:b6:f2:38:42:ca:7e:3f:87:00:d6:e4:
de:6b:59:92:b7:34:40:84:ad:b2:b5:6d:94:07:c3:77:4b:7e:
6a:4d:4b:26:a5:35:d6:18:ed:b3:ad:52:c0:16:c0:ae:ac:9c:
01:83:9e:cc:8a:66:fc:d2:b5:f2:ae:49:bc:63:f0:4e:71:5f:
49:f2:23:2c:2e:1c:fa:f0:99:5d:e2:31:31:e1:e6:bc:11:8d:
61:c5:77:e7:38:c4:9d:81:ea:f2:e8:8c:52:9b:2e:2e:0d:42:
e4:56:70:48:90:2c:d2:20:b9:14:4f:1d:b3:b7:1a:26:be:73:
d9:e8:a7:7e:12:88:2d:9f:2a:6c:3d:7c:ae:30:1f:cf:38:29:
13:64:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:11 2025 by rpki-client