Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1KOCrskOHSn9pLuHDoaTuDBjd-Y.roa
File: 1KOCrskOHSn9pLuHDoaTuDBjd-Y.roa (raw, json)
Hash identifier: vuN6WC/kTfh3Jer7EX88kOzgnvzcCDmZ4H8RKvWuly0=
Subject key identifier: D4:A3:82:AE:C9:0E:1D:29:FD:A4:BB:87:0E:86:93:B8:30:63:77:E6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A49159818198E6BBAE1664918AC3A969C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1KOCrskOHSn9pLuHDoaTuDBjd-Y.roa
Signing time: Mon 03 Nov 2025 09:39:03 +0000
ROA not before: Mon 03 Nov 2025 09:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209944
IP address blocks: 2a0f:31c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:15:98:18:19:8e:6b:ba:e1:66:49:18:ac:3a:96:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 09:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a382aec90e1d29fda4bb870e8693b8306377e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:75:d3:e3:78:f3:3c:e5:6b:4f:7d:11:d2:
44:5c:d1:c7:b2:43:d4:4c:d8:51:f3:68:e1:49:58:
56:8a:f1:d7:f4:0f:2a:cf:59:46:6f:37:8d:8a:15:
d8:8b:4d:f2:63:78:47:ee:8f:64:e6:a0:16:cb:c0:
4f:46:7f:2c:6a:24:32:09:cd:25:76:f6:e1:f0:d3:
bc:65:69:5c:ff:24:6f:96:97:d9:ae:61:42:ac:e8:
6c:96:7d:99:ad:fc:ea:70:76:94:96:9f:90:95:44:
57:81:9b:35:ab:f0:25:90:26:cc:73:fc:4e:ed:76:
d5:5d:fa:6e:a8:b9:59:f9:00:e2:70:32:58:e8:d4:
be:13:57:08:c5:95:85:3b:bb:b0:3a:4e:10:2c:3d:
ff:e8:7c:9f:f2:ae:76:62:1e:6f:f7:1e:ae:92:4f:
43:b0:5d:37:78:ab:52:3c:32:9b:2e:37:76:0f:80:
98:61:c2:1e:c7:79:8b:10:cf:c7:56:0a:3f:bd:e1:
c0:ec:93:2f:e0:d8:25:2f:f6:45:da:ab:f3:7a:e2:
28:26:09:68:06:05:f3:04:d4:a2:6c:58:62:ca:8b:
04:2f:3b:25:84:45:fa:eb:71:82:41:2e:d4:0a:89:
c9:a2:92:81:67:55:50:95:55:9f:3e:ac:2b:ba:6c:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:82:AE:C9:0E:1D:29:FD:A4:BB:87:0E:86:93:B8:30:63:77:E6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1KOCrskOHSn9pLuHDoaTuDBjd-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:31c2::/32
Signature Algorithm: sha256WithRSAEncryption
5f:58:f1:17:d4:86:de:de:40:83:cf:5f:97:8f:0d:7e:e0:09:
61:df:da:1f:5a:25:a8:49:18:dc:93:a3:24:f5:eb:e4:94:45:
79:a1:c6:26:8d:96:f5:e0:aa:8f:8f:be:7e:6c:0a:71:a1:9a:
bc:0b:71:36:c7:b4:4f:03:44:1a:53:60:77:94:55:35:88:9e:
06:58:c1:6f:ad:e8:86:bf:36:c1:bf:08:0b:9e:8f:c4:af:8d:
93:f6:c9:e3:e8:04:3a:a3:a3:ea:a1:c1:b8:4f:53:e2:8c:54:
a6:50:27:76:8a:77:63:4a:83:c8:78:ec:a2:85:1b:26:9c:51:
50:7a:fc:06:42:d2:eb:98:09:a1:b9:43:55:f6:53:b6:a8:4e:
bf:eb:98:64:98:00:c5:f8:a6:f2:19:98:5a:5b:fe:fa:0b:f0:
bf:46:08:6b:82:eb:82:e4:0a:b7:72:cf:f2:ac:6c:c0:7c:43:
d0:87:ab:b0:92:5b:6e:a5:32:67:92:6c:3a:28:33:7c:15:18:
5c:1f:21:7f:d7:8b:f2:e9:6e:be:42:01:7e:90:b3:92:bb:a7:
06:cf:7d:d7:61:07:19:df:14:2e:e1:22:74:16:fc:eb:e5:b1:
57:2d:ee:55:a2:31:31:58:eb:c1:b4:29:55:82:14:ae:85:b4:
18:85:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:51 2025 by rpki-client