Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Y7BRreYx7Ujkw5S_0IYXfKn7z8.roa
File: 2Y7BRreYx7Ujkw5S_0IYXfKn7z8.roa (raw, json)
Hash identifier: 4EWLw+PG7b+HToOcE60w5OrxsGhtjQs7At1oyW4vHgE=
Subject key identifier: D9:8E:C1:46:B7:98:C7:B5:23:93:0E:52:FF:42:18:5D:F2:A7:EF:3F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198612545793147A375DB0521FE255202D6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Y7BRreYx7Ujkw5S_0IYXfKn7z8.roa
Signing time: Thu 31 Jul 2025 15:41:29 +0000
ROA not before: Thu 31 Jul 2025 15:41:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213505
IP address blocks: 2a0c:d380::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1440::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:18c0::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:28c0::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
2a0f:9b00::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:6d40::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:25:45:79:31:47:a3:75:db:05:21:fe:25:52:02:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 15:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d98ec146b798c7b523930e52ff42185df2a7ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:28:b7:e6:ea:22:3b:10:a7:59:40:c5:88:
de:f0:21:35:17:d5:df:6d:b3:64:3c:56:42:1b:9a:
e6:e8:5d:a2:0e:01:ca:e1:6b:f0:cd:c9:42:84:68:
ae:8b:d6:0b:42:5d:5a:d4:8f:17:6c:24:26:cc:b6:
51:ac:f1:ef:7c:a1:0f:9b:70:f4:ec:58:74:04:e3:
43:78:1e:5a:78:f8:02:29:7b:c3:2f:8c:a5:8d:80:
cd:af:de:2a:28:14:92:7f:dc:d1:0b:fd:d4:20:a0:
08:bf:c1:fe:54:f6:d5:a1:89:f7:75:db:77:07:5c:
35:06:b4:52:9d:f3:38:da:37:20:16:e2:e8:61:54:
df:d3:1b:e5:92:bb:c5:ff:03:dd:77:1b:53:da:2f:
75:da:96:02:fd:7c:c0:27:a9:bd:ee:ec:4a:24:03:
36:c8:dd:5d:7a:b7:75:e4:16:f8:14:52:ae:c1:18:
1c:f1:b3:46:e0:d0:5f:19:24:43:f6:71:89:ec:ea:
bc:02:39:82:cf:a9:8d:b0:58:90:5d:ff:9c:5c:49:
66:89:bf:80:e3:6c:be:d0:49:79:35:a8:85:5f:27:
bc:b4:0f:84:56:30:88:de:b8:91:d2:9d:39:45:5e:
8b:eb:f8:e3:58:da:26:d8:e4:f5:0f:31:6d:87:56:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8E:C1:46:B7:98:C7:B5:23:93:0E:52:FF:42:18:5D:F2:A7:EF:3F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2Y7BRreYx7Ujkw5S_0IYXfKn7z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d380::/29
2a0e:e980::/29
2a0f:a00::/29
2a0f:1440::/29
2a0f:14c0::/29
2a0f:18c0::/29
2a0f:1fc0::/29
2a0f:28c0::/29
2a0f:39c0::/29
2a0f:9b00::/29
2a0f:da40::/29
2a0f:dfc0::/29
2a0f:e5c0::/29
2a0f:ee00::/29
2a11:1200::/29
2a11:6d40::/29
2a13:1940::/29
2a13:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
69:d9:b4:79:b8:95:38:7a:c4:e4:ac:f0:0b:f4:c8:53:09:bb:
fc:fb:a6:34:5f:6d:95:61:9a:56:12:82:c9:54:2f:5e:be:40:
06:b1:08:6b:3d:77:c4:66:97:a0:31:73:20:bd:3e:2e:8c:58:
98:d9:fa:7e:f3:af:b8:e0:5f:1b:5c:83:cd:1c:a4:c0:4b:75:
99:cf:3b:0f:38:ae:ec:a2:fe:9d:58:74:c2:10:3d:47:44:9d:
26:4c:c5:be:3a:77:36:d2:e7:76:5e:f6:ce:fc:b2:41:ca:ab:
b9:94:0d:04:8d:64:ea:10:4e:00:1a:33:4b:1d:3a:8f:bb:8a:
f0:a6:6c:48:a8:ca:b4:f4:e9:91:f4:6a:31:43:3d:8a:52:a9:
10:60:af:60:f0:c7:ff:de:0e:64:d8:d0:05:22:2e:fc:d3:38:
cb:15:8a:18:01:dd:85:28:b7:a3:b0:9c:be:e4:32:f5:92:30:
e1:d0:ab:ea:df:84:e5:2b:8e:ed:01:e5:b1:44:1f:21:e3:30:
cb:9f:01:f6:19:2c:5c:e0:17:f0:57:6b:de:d3:e4:4f:5d:89:
2b:6a:7a:5f:1e:16:5c:eb:1b:7c:05:3a:82:a6:68:91:f0:09:
75:0f:ab:c8:d6:df:84:53:b0:35:05:ff:eb:0f:00:c0:97:33:
fd:1b:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:29:17 2025 by rpki-client