Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdzzVZ9xBCuan_Z4tFsQaQ0KFnI.roa
File: FdzzVZ9xBCuan_Z4tFsQaQ0KFnI.roa (raw, json)
Hash identifier: t7mK04kxqXNaYgCRLSm2HXwiw2ybbvktwUXvRaZqk3s=
Subject key identifier: 15:DC:F3:55:9F:71:04:2B:9A:9F:F6:78:B4:5B:10:69:0D:0A:16:72
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01975A311FA26C990BBA2CB9128351E4692B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdzzVZ9xBCuan_Z4tFsQaQ0KFnI.roa
Signing time: Tue 10 Jun 2025 14:14:18 +0000
ROA not before: Tue 10 Jun 2025 14:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:31:1f:a2:6c:99:0b:ba:2c:b9:12:83:51:e4:69:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 10 14:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15dcf3559f71042b9a9ff678b45b10690d0a1672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:7f:5e:da:53:d2:07:e4:fd:70:5f:cc:ce:
9e:d3:e7:b1:84:b4:9b:9b:ed:b0:44:d4:3b:6a:54:
40:72:f1:d2:3d:4e:e7:93:61:09:8e:e8:3d:71:66:
1c:f8:eb:41:e0:c9:85:71:4c:66:36:6f:0d:a5:17:
16:ed:10:ad:0a:d4:2b:33:99:1c:ff:0d:c6:79:23:
b1:a1:8b:c6:02:c7:37:c1:46:25:db:03:a5:7e:8b:
70:62:ac:ef:91:7f:ad:36:a8:c5:33:58:b4:2b:65:
24:c9:e9:a9:de:0e:00:c9:b6:78:4d:9e:8d:67:eb:
61:fb:15:c1:96:2a:48:41:48:5a:46:5e:ca:95:4f:
df:9a:a8:8e:89:6e:b4:ed:1e:61:2d:c5:eb:c3:34:
76:fd:39:3e:62:56:6d:0c:db:0c:fd:1c:5f:c5:eb:
eb:55:40:fc:0d:37:a8:5b:30:bd:4e:a0:bd:2f:f9:
80:eb:4a:cb:fc:20:79:02:01:00:4a:46:6a:55:21:
cb:6c:be:3b:6b:da:57:b0:39:6f:3e:2c:a4:fa:f3:
67:9a:8c:6e:75:b2:7e:ff:48:3c:c7:0b:14:91:4c:
1d:31:6b:fd:32:64:f5:74:a4:9a:4e:64:b5:75:60:
55:13:02:da:96:d0:dd:a8:0e:0c:37:5a:b7:93:dc:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:F3:55:9F:71:04:2B:9A:9F:F6:78:B4:5B:10:69:0D:0A:16:72
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FdzzVZ9xBCuan_Z4tFsQaQ0KFnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
45.9.122.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:140::/29
2a0f:2500::/29
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e4c0::/29
2a0f:fc00::/29
2a12:ecc0:158::/48
2a13:18c6:66::/48
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
c7:6f:32:83:f2:9c:e7:2f:ba:77:17:b1:5e:e4:b9:6e:b3:2f:
16:9d:c9:a5:64:09:85:7a:37:39:4b:62:c0:ac:59:45:83:45:
ce:48:ef:22:04:ab:97:46:c0:d9:5c:42:7e:dd:dc:62:c3:99:
b8:e6:4d:dc:4f:71:f3:76:4e:ce:43:a5:08:9e:87:35:8f:ca:
21:4b:4a:6e:3e:46:9c:3a:d8:7c:2c:37:24:74:a0:88:20:fc:
df:13:a4:4d:fa:11:d1:b6:11:cf:cf:96:f5:42:88:3a:56:85:
ce:a9:b9:5e:cf:03:4e:01:03:47:dc:29:ab:72:21:4d:4d:fa:
92:41:4a:96:c4:a8:98:d9:3b:73:d0:33:77:93:9f:31:90:df:
ea:d9:a8:e1:1d:1e:50:8d:e1:80:bf:52:57:80:93:ae:07:f9:
8f:7e:66:6f:80:49:2c:0a:c5:8c:a1:64:b6:34:a5:09:52:95:
b7:9b:12:cc:f7:3d:0f:75:47:bf:e3:17:8c:ec:3a:23:33:82:
aa:d1:ce:48:fd:d8:02:b7:8c:9a:17:66:8b:eb:42:55:22:29:
43:d9:8c:53:e0:ea:8b:1b:69:19:9d:ea:a0:86:4c:59:fb:94:
17:81:19:9a:27:9b:a2:4b:cc:a8:75:a4:68:59:36:a6:82:30:
3b:04:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:15:02 2025 by rpki-client