Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BI7zXT0b_f0TpZPGaLAjpFzRZ48.roa
File: BI7zXT0b_f0TpZPGaLAjpFzRZ48.roa (raw, json)
Hash identifier: ZxS4+OLxmN6RMTCK6Jgl7mryeVvtEfXPhsA5QJAJpFc=
Subject key identifier: 04:8E:F3:5D:3D:1B:FD:FD:13:A5:93:C6:68:B0:23:A4:5C:D1:67:8F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3A2E972FA6A55F360B3C97A4C2AF88A2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BI7zXT0b_f0TpZPGaLAjpFzRZ48.roa
Signing time: Fri 31 Oct 2025 12:12:03 +0000
ROA not before: Fri 31 Oct 2025 12:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25159
IP address blocks: 2a06:1186::/32 maxlen: 32
2a07:7880::/29 maxlen: 29
2a09:17c0:1312::/48 maxlen: 48
2a09:17c0:fbad::/48 maxlen: 48
2a09:4900::/29 maxlen: 29
2a0a:2d01::/32 maxlen: 32
2a0e:1a86::/32 maxlen: 32
2a0e:f602::/32 maxlen: 32
2a0f:2d83::/32 maxlen: 32
2a0f:3d80:b::/48 maxlen: 48
2a0f:3d85::/32 maxlen: 32
2a0f:3d86:1::/48 maxlen: 48
2a0f:3d86:11::/48 maxlen: 48
2a12:5e00::/29 maxlen: 29
2a12:ecc5::/32 maxlen: 32
2a13:18c0:100::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:9380::/29 maxlen: 29
2a13:9f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:2e:97:2f:a6:a5:5f:36:0b:3c:97:a4:c2:af:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 12:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048ef35d3d1bfdfd13a593c668b023a45cd1678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:39:a3:c3:78:04:5f:62:85:0f:c2:a3:92:
81:f8:43:75:92:76:20:09:6a:db:17:05:d1:0b:ec:
75:fb:66:84:ef:8c:68:87:79:c7:49:bd:b3:56:b3:
5b:fd:68:ba:68:c5:03:1a:6a:6a:1c:84:47:d8:64:
9b:24:04:53:2d:2a:76:b9:f6:93:40:fb:6c:50:6d:
3a:16:b2:4a:dc:7d:02:cf:1c:bd:46:19:ed:6b:7e:
77:55:b0:0e:3b:98:45:c5:12:aa:38:3a:c3:61:ca:
7f:40:35:04:8e:6e:53:e5:bc:d3:94:23:1b:7d:ec:
a1:3c:cf:07:d1:8a:f3:f9:36:2b:05:64:1e:be:46:
58:a6:f8:f7:93:b3:5e:60:4d:1e:75:d3:f1:6e:5e:
1d:e3:0c:60:93:45:49:22:bf:9f:77:e2:e0:88:58:
c5:9d:cd:f5:bd:db:07:3e:25:10:92:aa:7b:21:55:
16:ec:c2:fe:8a:e3:74:dd:0b:2c:f5:cf:d9:d1:d6:
66:4a:e9:e0:20:4b:04:f6:b2:9a:dc:1f:6b:20:07:
f7:28:b4:0a:d1:39:3d:0e:c9:cd:0e:e3:0a:15:7d:
34:99:aa:9b:6e:f3:86:e0:22:de:d1:6f:95:5a:c8:
27:33:00:7c:48:ff:46:4f:7a:09:ae:76:3d:10:e9:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:F3:5D:3D:1B:FD:FD:13:A5:93:C6:68:B0:23:A4:5C:D1:67:8F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BI7zXT0b_f0TpZPGaLAjpFzRZ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1186::/32
2a07:7880::/29
2a09:17c0:1312::/48
2a09:17c0:fbad::/48
2a09:4900::/29
2a0a:2d01::/32
2a0e:1a86::/32
2a0e:f602::/32
2a0f:2d83::/32
2a0f:3d80:b::/48
2a0f:3d85::/32
2a0f:3d86:1::/48
2a0f:3d86:11::/48
2a12:5e00::/29
2a12:ecc5::/32
2a13:18c0:100::/48
2a13:9280::/32
2a13:9380::/29
2a13:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
b1:b6:34:16:2f:10:c1:2e:31:9e:a7:94:52:90:eb:5c:aa:97:
ff:2f:9b:04:a9:a1:6a:18:c6:0e:73:5d:18:d1:d1:47:75:c3:
0f:4b:f1:19:b2:f8:e3:a3:d7:ee:c3:4b:28:ac:08:f3:33:a0:
c1:18:83:61:89:3f:e1:f9:dd:ad:9a:77:73:24:dc:d8:b2:2b:
6c:3f:a1:b3:ba:03:34:59:5d:65:00:57:81:2b:40:d5:3d:6c:
1b:71:af:c1:a9:9c:99:58:68:8d:2c:4b:1e:ce:24:65:0e:d8:
3e:a7:1b:78:26:7e:72:5f:0f:06:6e:20:b7:25:3e:f3:14:b9:
e4:42:73:8c:20:80:e3:41:d4:7c:e7:8c:e8:aa:8d:b9:35:3c:
ee:d3:4a:1f:8b:0a:1b:9d:2a:99:cc:61:f2:0b:28:73:41:76:
74:cb:de:7b:95:6d:a6:e7:79:04:1a:83:5b:40:d5:69:11:57:
94:ff:52:20:13:81:33:55:6e:3b:1c:2a:a3:3d:07:82:d0:8e:
9e:e1:c3:14:a2:20:21:b5:7c:ea:90:85:9a:25:9f:6b:7e:35:
89:8e:dc:44:ad:3a:6a:ea:de:cb:98:4d:0c:6c:e0:6f:2c:32:
2a:ad:c9:66:e4:21:c6:d2:26:61:3b:11:f2:cd:d5:27:a3:11:
61:5d:85:7c
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZo6LpcvpqVfNgs8l6TCr4iiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMDMxMTIxMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDhlZjM1ZDNkMWJmZGZkMTNhNTkzYzY2OGIwMjNhNDVjZDE2NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhE5o8N4BF9ihQ/Co5KB+EN1knYg
CWrbFwXRC+x1+2aE74xoh3nHSb2zVrNb/Wi6aMUDGmpqHIRH2GSbJARTLSp2ufaT
QPtsUG06FrJK3H0Czxy9Rhnta353VbAOO5hFxRKqODrDYcp/QDUEjm5T5bzTlCMb
feyhPM8H0Yrz+TYrBWQevkZYpvj3k7NeYE0eddPxbl4d4wxgk0VJIr+fd+LgiFjF
nc31vdsHPiUQkqp7IVUW7ML+iuN03Qss9c/Z0dZmSungIEsE9rKa3B9rIAf3KLQK
0Tk9DsnNDuMKFX00maqbbvOG4CLe0W+VWsgnMwB8SP9GT3oJrnY9EOlzAwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFASO8109G/39E6WTxmiwI6Rc0WePMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQkk3elhUMGJfZjBUcFpQR2FMQWpwRnpSWjQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGuBggrBgEFBQcBBwEB/wSBnjCBmzCBmAQCAAIwgZEDBQAq
BhGGAwUDKgd4gAMHACoJF8ATEgMHACoJF8D7rQMFAyoJSQADBQAqCi0BAwUAKg4a
hgMFACoO9gIDBQAqDy2DAwcAKg89gAALAwUAKg89hQMHACoPPYYAAQMHACoPPYYA
EQMFAyoSXgADBQAqEuzFAwcAKhMYwAEAAwUAKhOSgAMFAyoTk4ADBQMqE58AMA0G
CSqGSIb3DQEBCwUAA4IBAQCxtjQWLxDBLjGep5RSkOtcqpf/L5sEqaFqGMYOc10Y
0dFHdcMPS/EZsvjjo9fuw0sorAjzM6DBGINhiT/h+d2tmndzJNzYsitsP6GzugM0
WV1lAFeBK0DVPWwbca/BqZyZWGiNLEseziRlDtg+pxt4Jn5yXw8GbiC3JT7zFLnk
QnOMIIDjQdR854zoqo25NTzu00ofiwobnSqZzGHyCyhzQXZ0y957lW2m53kEGoNb
QNVpEVeU/1IgE4EzVW47HCqjPQeC0I6e4cMUoiAhtXzqkIWaJZ9rfjWJjtxErTpq
6t7LmE0MbOBvLDIqrclm5CHG0iZhOxHyzdUnoxFhXYV8
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:43 2025 by rpki-client