Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DGFUynz0obA4gg-SeiU1cBjKyxY.roa
File: DGFUynz0obA4gg-SeiU1cBjKyxY.roa (raw, json)
Hash identifier: HBcGeuAld2lraseYOmVZ99olab2JK/+ItFyP7xp66Co=
Subject key identifier: 0C:61:54:CA:7C:F4:A1:B0:38:82:0F:92:7A:25:35:70:18:CA:CB:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019765BD5BF1BB1F2CB9F2034DF8FEBFB29F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DGFUynz0obA4gg-SeiU1cBjKyxY.roa
Signing time: Thu 12 Jun 2025 20:03:17 +0000
ROA not before: Thu 12 Jun 2025 20:03:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213505
IP address blocks: 2a0e:e980::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:18c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 29
2a0f:9b00::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
2a13:fd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:bd:5b:f1:bb:1f:2c:b9:f2:03:4d:f8:fe:bf:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 12 20:03:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c6154ca7cf4a1b038820f927a25357018cacb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:63:ed:4a:f8:5f:49:17:25:ee:2c:94:78:cd:
45:4f:df:d8:93:b6:f7:93:99:d4:b7:95:aa:da:aa:
26:3a:30:93:73:25:7c:b9:cb:4d:b5:8b:6d:db:36:
b8:a1:e2:6e:bb:50:a6:0d:50:9f:43:13:1d:54:b2:
69:89:7d:47:5a:02:9a:fd:b7:e3:88:b6:9b:e5:84:
e3:7e:e9:2f:90:19:70:b1:80:93:ac:85:c6:74:92:
d6:04:10:9d:90:7a:e1:02:b6:04:b0:67:b2:77:5d:
45:6d:ec:76:69:a0:d3:b7:60:ff:80:c3:d0:2b:7d:
a5:13:c1:cb:a4:60:5a:75:09:62:df:91:5a:2a:2d:
78:d0:90:8f:8b:8c:9b:9d:3c:58:a8:c0:b8:5c:50:
7c:fd:52:89:01:d6:13:96:b1:d3:58:ae:be:6d:58:
4c:c9:09:e1:0b:8d:a5:bc:63:70:b6:a2:57:ff:ea:
b8:fe:40:f6:06:b3:e0:0d:ba:e5:f4:fa:cf:aa:01:
1d:ec:de:ee:db:fa:95:52:2d:44:07:aa:7c:00:3d:
b9:01:8e:31:00:4b:13:3d:7f:5a:c4:57:2c:6d:59:
73:ab:2f:6c:7e:4a:1b:78:af:eb:6e:ec:ef:bb:98:
45:fc:b1:c5:42:db:ec:9c:03:2f:da:83:9c:c0:a2:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:61:54:CA:7C:F4:A1:B0:38:82:0F:92:7A:25:35:70:18:CA:CB:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DGFUynz0obA4gg-SeiU1cBjKyxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e980::/29
2a0f:a00::/29
2a0f:14c0::/29
2a0f:1740::/29
2a0f:1840::/29
2a0f:18c0::/29
2a0f:1ac0::/29
2a0f:1fc0::/29
2a0f:2ec0::/29
2a0f:9b00::/29
2a0f:e140::/29
2a11:1200::/29
2a13:1940::/29
2a13:fa00::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
88:cd:ba:25:80:d1:26:aa:9e:fc:23:9a:23:c2:cb:e9:52:f5:
60:e2:0b:d5:19:a6:6f:27:de:7a:79:bf:28:65:d9:75:1a:ae:
5b:dd:96:b9:ac:7b:c9:ad:9f:cd:bb:91:e1:37:66:56:2f:1c:
1b:4f:a7:19:de:6a:a0:df:6c:27:fb:ad:78:f3:5c:a7:2c:dd:
6f:af:97:e6:2d:22:9b:28:57:61:ad:0c:ce:d8:97:04:39:c2:
79:01:63:e5:d7:57:3e:c9:82:c7:f0:5d:00:45:83:4b:f9:8a:
22:c6:53:eb:bc:5f:c3:7b:4a:c7:d5:49:7d:a6:8f:55:ba:8f:
ff:20:82:fe:b5:9a:e0:c9:d6:f1:bf:14:af:c6:16:7f:a5:e1:
1a:23:0e:d6:f3:cd:7f:fc:73:50:f7:09:f4:58:8d:00:06:90:
a5:cc:d6:f1:fc:79:cf:60:01:52:ba:8b:8b:e0:35:d7:32:cf:
e8:7b:41:c9:c1:88:f9:f3:2c:68:09:02:95:f9:7d:13:19:0b:
f8:06:c9:37:5f:4c:68:af:ab:be:6d:ca:09:30:d9:9b:b2:39:
03:ff:a2:99:b7:90:f6:19:fd:d1:2b:cc:bf:7c:a1:1b:c8:13:
a3:84:1e:26:75:7a:24:42:85:7f:c7:a5:d2:cb:cc:98:b7:92:
99:d2:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:01:54 2025 by rpki-client