Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Q6M_DditreIZKw03X4QOmgHGwg.roa
File: 7Q6M_DditreIZKw03X4QOmgHGwg.roa (raw, json)
Hash identifier: lCWWNKiShtEJP2D6FK349taqNd9cvbX5MtfozI/pITI=
Subject key identifier: ED:0E:8C:FC:37:62:B6:B7:88:64:AC:34:DD:7E:10:3A:68:07:1B:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019842643A6E0D7A828F829894F243622300
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Q6M_DditreIZKw03X4QOmgHGwg.roa
Signing time: Fri 25 Jul 2025 16:22:01 +0000
ROA not before: Fri 25 Jul 2025 16:22:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3046:85::/48 maxlen: 48
2a0f:31c0::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:de40::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a10:36c0::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:8100::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:9285:100::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:64:3a:6e:0d:7a:82:8f:82:98:94:f2:43:62:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 25 16:22:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0e8cfc3762b6b78864ac34dd7e103a68071b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:8d:a8:04:b9:75:9f:f7:a4:f4:ed:c6:3d:
cf:d2:2e:20:df:2b:c8:3f:06:14:58:f6:66:8b:f2:
cf:90:9b:74:38:6a:f8:b2:12:ab:ff:6b:65:bc:fd:
68:a0:20:41:c0:ae:f0:c6:bd:5a:82:be:94:3b:a2:
62:bb:e6:ef:43:bb:08:8e:17:2a:c8:f3:ba:72:3d:
93:3a:c5:12:10:60:d8:dc:4e:8f:ed:55:f2:33:16:
1e:6d:47:f2:b7:a2:2d:37:04:a3:09:df:37:f6:73:
73:bb:fd:1b:39:de:4f:f8:c3:55:3a:c5:0c:a5:5c:
f5:ae:72:09:36:57:71:30:82:89:0f:4d:70:c3:38:
5e:97:24:dd:cb:98:8f:74:ef:96:cb:da:c3:a9:0a:
fe:9d:09:1a:18:d9:2d:2c:88:94:7b:7a:4a:07:8d:
49:8f:0f:0b:64:ea:fc:cf:8b:36:ef:74:6a:21:73:
71:a7:65:a6:bc:e9:d3:ee:3c:a9:4a:54:80:9a:94:
72:c8:46:12:57:b0:e9:83:4e:44:75:3f:cc:4a:40:
82:9a:8b:10:07:e3:60:56:b0:ff:02:91:13:74:52:
b4:ee:20:a5:b0:dd:d2:95:06:fd:f7:dd:0f:67:6b:
32:a4:73:79:f0:9b:03:92:85:c4:1d:1e:d7:ad:b3:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:8C:FC:37:62:B6:B7:88:64:AC:34:DD:7E:10:3A:68:07:1B:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7Q6M_DditreIZKw03X4QOmgHGwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:1e80:1986::/48
2a0f:3046:85::/48
2a0f:31c0::/32
2a0f:3d80:1312::/48
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:de40::/29
2a0f:dec0::/29
2a0f:e1c0:1312::/48
2a0f:e207:fd38::/48
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a10:36c0::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a13:18c5:11::/48
2a13:18c6:8512::/48
2a13:8100::/29
2a13:8c86:10a::/48
2a13:9285:100::/48
2a13:e100:323::/48
Signature Algorithm: sha256WithRSAEncryption
39:68:25:4d:75:e9:5d:59:e7:51:0c:05:d6:a8:d3:9e:2d:df:
a3:e2:0f:aa:81:8e:f5:ae:75:0c:74:ef:29:55:7d:ab:7a:9e:
85:1d:d0:76:b9:1f:92:cc:e0:4f:a0:4f:bc:6d:f1:b5:8f:6c:
ae:df:d3:65:3b:4a:6e:eb:ce:36:4f:28:de:64:31:46:7a:03:
f1:ca:f9:ed:ef:35:57:53:f3:b4:65:18:6f:a9:06:28:a7:05:
1b:b0:35:e5:45:7b:35:2b:bd:67:65:8f:81:63:6e:28:92:55:
28:44:7a:d6:63:0b:44:b4:0f:b0:6d:c5:f1:a1:2e:de:a7:e1:
51:90:96:7d:3c:3f:5b:b8:fe:2d:88:90:a3:2d:1e:92:bc:4e:
cc:fe:da:ab:fa:ea:eb:a8:82:d9:60:6a:4b:91:41:2a:13:d8:
be:b2:4b:34:d8:d4:02:53:ee:d8:35:90:e1:f7:c5:e7:b8:47:
87:e3:bf:4c:49:93:6a:d5:22:82:4b:ce:a2:64:55:a0:bc:b3:
a3:b2:cf:a4:53:8d:78:73:8e:f1:84:fd:48:55:45:4f:0f:35:
92:9d:0c:ea:3e:0a:eb:26:3d:e4:31:52:ca:7a:d2:c8:53:dd:
90:7b:3b:e1:23:d9:50:a4:35:80:ff:69:8a:03:db:83:87:73:
5d:b6:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:55 2025 by rpki-client