Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9BdM1-7NXLiX3QDXgKxTydQSiic.roa
File: 9BdM1-7NXLiX3QDXgKxTydQSiic.roa (raw, json)
Hash identifier: WrEpnvweDcnz/mm78BJClpVoUQkBR2uc9QCsGaUfEko=
Subject key identifier: F4:17:4C:D7:EE:CD:5C:B8:97:DD:00:D7:80:AC:53:C9:D4:12:8A:27
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A4AAA419F9C0FE4CB8D2E858F34AE20E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9BdM1-7NXLiX3QDXgKxTydQSiic.roa
Signing time: Mon 03 Nov 2025 17:01:03 +0000
ROA not before: Mon 03 Nov 2025 17:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c0::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:7d00:100::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e202:33::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a11:5200::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:aa:41:9f:9c:0f:e4:cb:8d:2e:85:8f:34:ae:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 3 17:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4174cd7eecd5cb897dd00d780ac53c9d4128a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:a7:a6:7b:8d:64:35:e3:6f:7c:f2:ba:fa:
9c:93:aa:d4:99:4a:83:a9:37:d6:13:72:ed:11:cf:
60:f2:5e:7a:a1:1c:ff:1a:28:b5:35:fe:a1:0a:78:
95:64:d4:23:cf:78:0f:d5:a0:4e:85:f5:82:06:60:
79:b7:1c:7a:1f:64:da:9b:83:9a:de:76:40:19:9f:
82:d6:04:38:46:48:c5:5e:8a:c7:5c:24:1b:01:3e:
ba:d0:fc:d7:c0:89:09:0e:43:7d:a1:c1:a6:b0:9f:
ad:94:7e:61:18:f2:fb:2e:b5:73:f7:82:9f:1c:c6:
67:f6:51:9b:67:9d:b0:47:33:f3:4c:89:68:62:c0:
47:4f:78:42:66:8c:87:e8:a4:f0:8c:88:1f:2b:40:
22:20:27:ac:19:2a:aa:32:30:b7:a3:a0:9d:b5:01:
7e:6f:19:76:55:25:11:dd:db:80:f3:c6:6c:94:30:
5f:ff:93:dd:c1:26:11:8e:57:70:a5:c1:fb:b6:49:
52:17:f0:d8:b9:77:4f:74:1a:1a:ee:7f:74:c4:ab:
0b:21:98:0f:6d:13:4f:07:8e:26:2f:0f:82:d1:06:
82:55:71:96:d9:98:38:71:8a:bd:66:08:57:c9:cf:
3b:f2:d2:c5:5d:3d:68:a8:8a:63:51:0e:c3:0c:a3:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:17:4C:D7:EE:CD:5C:B8:97:DD:00:D7:80:AC:53:C9:D4:12:8A:27
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9BdM1-7NXLiX3QDXgKxTydQSiic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:1e80:1986::/48
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c0::/32
2a0f:3d80:1312::/48
2a0f:7d00:100::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e202:33::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a11:5200::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:e9:d7:a2:5a:01:f7:c8:b8:ad:53:b9:d9:b5:3f:ce:52:f7:
05:49:f9:98:4f:cf:cd:83:57:14:10:ea:69:00:c8:66:d5:0c:
8f:34:41:25:26:6f:43:b1:8e:00:3e:c0:6f:d5:74:b5:f5:e1:
80:62:2e:d5:a0:27:4e:33:85:d9:cb:84:c5:04:db:67:5f:5a:
8b:fa:4b:de:57:e9:c5:cf:6e:f1:8e:3a:33:8d:31:f4:4c:04:
09:a1:e7:da:ed:f6:29:28:cd:43:d4:1e:3c:3a:27:37:79:e8:
ce:9d:14:29:5d:67:fc:d2:e6:09:33:11:9a:6e:d7:63:12:4c:
66:0e:f2:d6:ad:3c:1f:a7:48:c9:fa:9b:f9:cb:22:e7:61:b9:
5c:3b:a5:18:45:f6:0e:7f:f1:eb:cc:dd:4e:b5:d0:44:76:db:
60:6b:81:46:f4:fa:76:7e:c4:17:11:df:39:aa:4b:44:dc:7a:
e3:78:e1:b6:19:06:66:15:45:9c:eb:89:90:fd:40:ae:5b:d0:
bb:da:79:d3:98:fa:b2:0f:78:24:8f:df:60:0e:04:7f:23:1d:
50:1e:cf:5b:ef:96:28:40:e6:71:03:3c:76:f5:b5:e0:73:8c:
bf:62:e5:ca:23:1e:57:c7:e2:19:3b:63:57:fe:1b:70:b2:1c:
00:aa:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:15 2025 by rpki-client