Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4zNkm0pq_8mxaJFGkBfk3rcYLaI.roa
File: 4zNkm0pq_8mxaJFGkBfk3rcYLaI.roa (raw, json)
Hash identifier: h+AZanXC4AYFLXGT3JZVXQdC52s09kxvGDCimBVecUA=
Subject key identifier: E3:33:64:9B:4A:6A:FF:C9:B1:68:91:46:90:17:E4:DE:B7:18:2D:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A4E9204A8D94876C029D5A32601495026
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4zNkm0pq_8mxaJFGkBfk3rcYLaI.roa
Signing time: Tue 04 Nov 2025 11:13:03 +0000
ROA not before: Tue 04 Nov 2025 11:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26666
IP address blocks: 2a0f:1480::/29 maxlen: 29
2a0f:4f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:92:04:a8:d9:48:76:c0:29:d5:a3:26:01:49:50:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 4 11:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e333649b4a6affc9b16891469017e4deb7182da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:69:dd:8e:a3:94:3a:f4:da:5b:28:51:54:
a6:41:52:0a:69:fd:b3:b7:b4:58:9f:75:5c:6f:f3:
77:f9:33:f3:4d:a2:86:4f:87:01:a5:5d:9f:d4:a3:
82:2f:e9:53:9c:8f:7e:ed:c9:c3:ea:02:0d:eb:7c:
d9:6c:48:7c:d2:91:ec:61:ee:bc:27:24:f4:5f:78:
27:66:e1:74:86:b6:1a:26:d1:0c:0d:16:ee:25:8e:
2a:95:7a:03:80:8d:90:98:2b:ef:31:cf:4a:05:1e:
ed:75:b0:30:98:c1:1e:47:b7:30:9a:67:16:49:ba:
79:b4:10:29:05:df:e5:60:a6:65:50:17:ed:ba:bb:
3f:c0:56:60:d7:bd:2a:4f:2b:c3:95:17:15:2d:ca:
9f:13:7c:d1:29:00:70:d1:ec:24:11:6f:ad:8a:fc:
7b:47:e4:3e:31:00:1e:b5:67:26:53:20:95:8d:a9:
16:3e:77:d4:e1:6b:44:f0:7a:18:66:c4:95:8d:d7:
2b:75:80:c7:58:1a:b7:bd:98:2f:28:71:db:ef:b9:
84:11:f4:b9:03:a0:53:67:f9:2f:1d:52:1d:22:ba:
f5:33:be:32:38:f8:a5:96:4d:8a:1c:ee:23:30:b8:
02:03:ba:11:5e:fe:44:21:a7:9a:d3:5b:60:49:30:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:64:9B:4A:6A:FF:C9:B1:68:91:46:90:17:E4:DE:B7:18:2D:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4zNkm0pq_8mxaJFGkBfk3rcYLaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1480::/29
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
19:e0:50:50:f0:88:b2:1d:e6:a1:97:ae:62:a7:76:47:7a:61:
61:c2:d0:0f:65:03:b2:9e:cb:15:80:ba:f8:65:61:b3:13:71:
72:c3:c1:a9:1c:92:cc:74:53:38:cb:f8:cb:76:d4:d9:c5:db:
ce:32:9d:5c:fc:16:81:e1:66:1c:b5:72:35:e3:36:f3:da:0c:
62:14:77:dd:b2:f7:3e:25:be:41:1a:d1:fa:dd:f6:c7:68:14:
84:ef:04:c9:1a:13:9f:5b:72:83:f3:3d:a8:6d:8f:ec:15:e1:
22:15:81:3b:e7:02:39:40:d1:20:00:de:09:97:52:82:d0:1b:
89:7d:e4:18:fe:a8:2a:a3:2f:d4:29:aa:b6:c3:53:61:79:ab:
93:91:61:56:c2:4e:5e:ae:9a:23:65:fa:f6:e7:4f:74:9a:41:
19:3d:80:9d:8c:f1:22:c6:63:ad:65:e8:95:16:cf:1a:09:c8:
37:63:53:cb:a7:3e:bf:df:22:95:e7:26:31:56:f3:a2:bc:8d:
24:3d:49:d0:8a:45:6c:4b:31:ef:72:2b:7b:4b:34:e5:fd:04:
a0:94:5d:7b:cf:34:27:0a:84:5d:84:83:78:1f:01:32:e5:f3:
7e:8e:34:d6:4e:a2:34:4c:69:7a:aa:64:80:87:d2:01:ad:68:
6a:ad:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:45 2025 by rpki-client