Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IjKfHz1ePWjYcMDiLiEp6DHwJlE.roa
File: IjKfHz1ePWjYcMDiLiEp6DHwJlE.roa (raw, json)
Hash identifier: 2vgAiTm99ek39L+T5UTYwjcHMuSgeEZiSlsxiGAUOaw=
Subject key identifier: 22:32:9F:1F:3D:5E:3D:68:D8:70:C0:E2:2E:21:29:E8:31:F0:26:51
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3C3C1A7AE0E682B428CF53DD52A25E78
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IjKfHz1ePWjYcMDiLiEp6DHwJlE.roa
Signing time: Fri 31 Oct 2025 21:46:03 +0000
ROA not before: Fri 31 Oct 2025 21:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a09:17c3::/32 maxlen: 32
2a0c:d380::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:3d86:11::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:ee00::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:67c0::/32 maxlen: 32
2a11:4e80::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3c:3c:1a:7a:e0:e6:82:b4:28:cf:53:dd:52:a2:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 21:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22329f1f3d5e3d68d870c0e22e2129e831f02651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:a5:9c:88:ff:2e:92:a2:63:61:c1:4b:39:
fb:a0:81:10:4f:f6:91:df:06:f9:53:df:69:e4:5b:
05:19:70:73:c9:09:ef:7c:af:7d:08:2e:75:ed:73:
6a:de:8a:b7:98:9a:20:32:3c:bb:9a:14:89:1f:04:
62:69:2e:79:cc:4b:3b:ee:e5:e0:a7:2b:1d:0c:51:
76:52:85:ee:66:55:c6:43:f6:89:3d:2f:cf:88:46:
08:92:65:e1:51:cb:da:77:ca:98:f3:58:91:25:f9:
a2:c3:0f:3a:94:5d:a4:d8:c6:a1:aa:19:3c:ed:2e:
fb:d9:1d:13:d4:e5:48:4e:57:dc:25:8c:51:fb:11:
c9:94:37:b3:65:9d:4b:df:cf:f3:05:70:61:d6:67:
9f:4c:40:c5:99:db:f7:71:b4:0f:43:c5:bb:29:91:
69:41:07:8d:f7:08:cc:6e:3f:fa:bf:27:b4:a7:1c:
86:d6:b5:71:d7:8c:45:bf:95:6f:86:53:7c:e5:12:
69:62:20:7f:1e:14:b5:c7:83:04:b2:6d:f8:90:e5:
37:9f:52:cf:d5:05:4c:22:fa:18:d3:80:23:19:d8:
30:73:5a:c3:b8:1d:56:05:9c:02:d9:6d:1a:48:19:
b0:43:aa:8a:57:c5:a5:31:b6:73:ee:1f:f0:1f:ff:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:9F:1F:3D:5E:3D:68:D8:70:C0:E2:2E:21:29:E8:31:F0:26:51
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IjKfHz1ePWjYcMDiLiEp6DHwJlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:bf40::/29
2a07:95c0::/29
2a09:17c3::/32
2a0c:d380::/29
2a0d:8f80::/29
2a0e:2440::/29
2a0f:3d83::/32
2a0f:3d86:11::/48
2a0f:7d01::/32
2a0f:ee00::/29
2a10:3140::/29
2a10:67c0::/32
2a11:4e80::/29
2a12:d100::/29
2a13:2bc0::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:f9:1c:a7:09:8e:44:1f:9c:ab:df:ef:9b:a1:77:11:81:58:
de:38:91:a6:e3:f1:97:81:8d:6a:e4:3a:cd:cd:b0:12:0e:db:
cb:db:d7:80:32:38:ba:11:91:89:47:ac:65:45:d9:93:f2:ce:
a0:f2:56:79:0e:1b:48:b8:00:2a:95:4c:a8:d6:69:94:f7:23:
ad:e2:4a:b4:19:fe:d2:95:e3:e7:27:71:46:8e:a8:2b:09:ef:
4b:83:68:a0:f2:16:0f:a6:94:5a:3b:30:4b:9f:1e:7e:9b:6a:
c3:4a:f4:b9:4b:5d:f8:9c:0f:c9:06:ad:7a:17:3c:bb:d2:45:
b9:3f:df:17:4e:4e:69:dd:17:91:52:76:88:4e:83:c7:49:9a:
d1:ad:64:22:f2:51:3f:c1:73:37:3b:18:78:3c:49:a6:71:c7:
4d:32:e9:ed:e8:6e:7f:e0:1c:0f:b4:bb:09:ce:8a:24:26:49:
e6:c5:ee:97:e3:80:a3:d5:0c:2b:10:0d:3c:60:1d:66:fd:32:
4a:b8:56:05:ef:ac:cd:13:a7:20:a8:73:90:de:a6:75:39:3d:
40:f3:44:61:ac:88:84:a3:0e:5f:3e:ba:8a:bd:7d:59:70:1e:
86:b9:67:2e:bf:b0:be:84:d5:ca:17:a9:36:c5:e8:1d:01:c4:
f8:45:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:25 2025 by rpki-client