Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/93Oyz0pSO1H1l9WZGP_aQZcBczg.roa
File: 93Oyz0pSO1H1l9WZGP_aQZcBczg.roa (raw, json)
Hash identifier: QrdmCN/LR8UCWtVrybqV61FID0dKf+hW9xyjNCNKxy8=
Subject key identifier: F7:73:B2:CF:4A:52:3B:51:F5:97:D5:99:18:FF:DA:41:97:01:73:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01984FAC8CF25FA456C029C6767CF84EAE18
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/93Oyz0pSO1H1l9WZGP_aQZcBczg.roa
Signing time: Mon 28 Jul 2025 06:16:05 +0000
ROA not before: Mon 28 Jul 2025 06:16:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212831
IP address blocks: 2a0e:15c1::/32 maxlen: 32
2a0f:e7c6:88::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:ac:8c:f2:5f:a4:56:c0:29:c6:76:7c:f8:4e:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 28 06:16:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f773b2cf4a523b51f597d59918ffda4197017338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:4b:33:51:0c:66:7a:c6:72:32:8f:2a:cb:
68:00:ac:6a:a5:17:f4:8d:3e:43:bc:53:f4:18:31:
18:0a:5e:7f:dc:bf:cf:ad:f1:af:51:22:7c:8f:6f:
0d:71:52:a2:61:23:7a:1e:b4:2d:6c:26:6a:01:55:
72:60:05:73:b9:35:0d:51:e5:dc:75:7e:49:5d:ee:
5f:34:62:cc:81:4c:43:aa:89:84:04:69:37:48:cf:
a4:41:d1:dc:c8:48:e7:d6:1f:1c:d4:de:8a:48:ad:
d1:b5:a5:67:39:b3:41:cb:5c:b0:4e:c5:0d:ac:47:
1b:0b:98:da:17:af:bc:5b:24:2a:ba:3d:f5:2e:10:
63:cd:7a:53:8f:12:5d:68:44:ea:72:f5:99:cd:f9:
a0:e8:f3:2b:c1:8f:1d:85:3d:4f:1a:ea:21:20:44:
4b:94:b2:05:a9:5e:ec:7f:d3:5b:1b:9b:0f:d6:ed:
1c:a1:a7:a5:f9:33:1f:46:75:48:7a:c0:8d:44:ca:
6d:1e:ab:53:db:56:a9:e2:e3:24:02:26:64:0c:cb:
bf:02:07:7c:1f:9b:7a:14:25:31:bf:f2:81:f6:1b:
3f:12:67:cd:29:bc:82:4b:f3:25:31:7d:89:96:de:
d9:21:58:37:05:47:07:6e:57:10:c7:c7:64:88:70:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:73:B2:CF:4A:52:3B:51:F5:97:D5:99:18:FF:DA:41:97:01:73:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/93Oyz0pSO1H1l9WZGP_aQZcBczg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c1::/32
2a0f:e7c6:88::/48
Signature Algorithm: sha256WithRSAEncryption
07:96:32:3e:78:32:69:48:18:ad:01:61:6e:b0:64:97:3b:e2:
b7:98:78:7f:1c:ea:2b:54:30:04:c9:4f:1f:42:db:ca:dd:3c:
b4:e8:5a:62:42:b5:e0:c8:37:dd:af:ba:fd:a6:6b:33:9c:2e:
ce:80:22:46:c3:15:9c:83:7c:11:c2:08:d7:66:b2:01:2b:35:
41:28:8b:61:a8:06:b2:68:19:64:77:0c:43:93:e0:b6:09:8f:
e2:91:04:e9:79:b5:5b:70:9a:27:8f:38:18:9a:0e:63:86:bf:
50:75:01:9a:50:be:4e:9c:5f:67:05:dc:12:a1:3c:e1:10:98:
58:9b:5f:fe:ab:f7:87:39:4b:86:e5:4c:2f:cb:7b:c8:58:38:
5c:a7:87:75:7d:85:c2:26:4e:24:81:52:59:d4:ff:9a:73:71:
2f:48:8b:f4:3b:7f:b8:04:5d:56:5c:08:be:f9:34:55:af:97:
29:f6:f1:53:e2:50:11:ec:dd:39:78:df:13:3b:72:c1:b7:b0:
58:d5:c8:52:95:10:51:62:68:08:8d:97:d8:b6:ef:a0:25:64:
e8:15:6a:fb:65:5c:1b:b5:ba:29:93:a2:bb:51:99:a9:ec:c6:
60:6d:e3:c7:03:9e:59:73:27:bb:86:b9:17:2c:cd:4b:13:aa:
eb:98:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:19:03 2025 by rpki-client