Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JB7W5DsEtHmZSfzvqG1oDdsh1iQ.roa
File: JB7W5DsEtHmZSfzvqG1oDdsh1iQ.roa (raw, json)
Hash identifier: P7nHMf2oGdWEkXiIb1ULmbb9j0FmuAOstxSmBrmOYXI=
Subject key identifier: 24:1E:D6:E4:3B:04:B4:79:99:49:FC:EF:A8:6D:68:0D:DB:21:D6:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A3A6CDAEDAB12B47C7B925DCE088FC0AA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JB7W5DsEtHmZSfzvqG1oDdsh1iQ.roa
Signing time: Fri 31 Oct 2025 13:20:03 +0000
ROA not before: Fri 31 Oct 2025 13:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a10:34c0::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:ac43:1312::/48 maxlen: 48
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc6:1312::/48 maxlen: 48
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
2a13:9180::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:6c:da:ed:ab:12:b4:7c:7b:92:5d:ce:08:8f:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 13:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=241ed6e43b04b4799949fcefa86d680ddb21d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:35:f5:9e:92:e5:00:ac:d4:24:de:c3:09:
ec:9b:e8:12:77:96:64:a8:11:44:fa:ec:c9:93:40:
ce:2d:01:27:44:56:68:1a:d5:26:84:b5:6b:b0:7d:
92:66:87:0a:31:52:a3:08:2b:4c:d9:f2:c4:86:94:
cf:c6:ac:60:8d:5c:1f:51:8e:47:86:5f:06:23:13:
0b:fe:1f:a8:d2:1b:80:9d:43:d5:b7:b6:1b:1f:97:
a9:55:96:7e:8c:5f:2c:27:f8:00:18:89:b6:1a:c0:
03:54:03:ca:15:04:85:d8:fa:47:b9:b5:87:2f:92:
a7:ff:6f:ba:92:94:17:94:3b:b1:c9:2f:d9:1d:ef:
01:e9:ed:a7:23:10:95:73:65:84:b0:c0:a5:f5:36:
c0:31:84:56:10:69:32:44:72:f8:ae:cf:d5:68:c5:
ef:7d:b8:22:e7:9c:b2:ef:8b:97:d7:7b:9e:2c:da:
6d:ea:04:b4:d1:79:cf:6e:30:d3:f9:8f:62:34:7d:
2e:8b:22:23:19:59:7f:12:c7:c0:17:e5:28:a9:69:
b6:89:59:90:b8:24:27:c1:2f:bc:ff:cf:d8:2a:78:
ae:e9:06:df:4a:af:60:a9:44:3a:bf:c1:2c:54:fa:
65:51:04:ac:11:ac:8e:5b:2c:e4:a3:60:eb:d1:2b:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1E:D6:E4:3B:04:B4:79:99:49:FC:EF:A8:6D:68:0D:DB:21:D6:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JB7W5DsEtHmZSfzvqG1oDdsh1iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/47
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:7f00::/29
2a0f:d200::/29
2a0f:db40::/29
2a10:34c0::/29
2a10:6b00::/29
2a11:8880::/29
2a12:ac43:1312::/48
2a12:ecc0:158::/48
2a12:ecc6:1312::/48
2a13:1380::/29
2a13:18c6:66::/48
2a13:18c6:88::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:9080::/29
2a13:9180::/29
2a13:9680::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:ab:39:f1:4f:a4:44:2b:a1:3b:d4:4f:df:aa:31:95:b6:05:
23:42:95:aa:22:f5:36:a0:df:25:3e:0e:60:b6:3d:35:3d:4a:
0e:bf:28:7b:5c:13:a2:5b:45:74:37:7f:ce:18:aa:67:b2:0f:
9d:f4:3c:d8:e3:88:8a:89:f1:a2:9b:4a:80:ed:a0:59:8e:d8:
06:de:d3:d7:de:45:cc:e2:4e:0d:d4:c3:76:41:94:95:7a:92:
64:bc:35:31:9a:80:8a:23:fb:bf:83:bb:1e:d4:b5:7a:d4:2b:
62:61:6d:10:68:7d:d2:0c:0e:96:53:3d:23:60:c9:ae:27:1f:
b3:7f:04:bb:49:23:aa:79:06:a6:bd:12:5a:ec:a5:e9:20:f3:
85:e6:7e:6a:51:15:cc:dd:67:85:07:c9:d3:f4:6e:98:5f:d0:
85:e7:d4:54:98:d5:88:2f:8e:2d:9f:60:57:0d:f7:88:ce:8c:
f1:7b:f2:b7:27:04:0d:d4:bd:1e:80:5a:e7:5c:e2:3b:4f:2b:
1c:9e:c4:25:3a:96:73:cf:e0:82:8b:73:e1:55:8e:58:7d:78:
8e:02:49:c8:30:da:cc:ea:0c:b8:58:bf:e6:98:c2:87:02:f2:
f1:8d:d0:e9:4f:73:3a:ee:0e:2b:94:3a:9a:af:e8:a9:f2:27:
11:10:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:27 2025 by rpki-client