Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PxgM2IOFP01uMI6ay2CywlX5OpI.roa
File: PxgM2IOFP01uMI6ay2CywlX5OpI.roa (raw, json)
Hash identifier: 4tWRmOCCFsLhFcZLlBPSM/DOZGdBjQ2RYfdiSN4qg0Y=
Subject key identifier: 3F:18:0C:D8:83:85:3F:4D:6E:30:8E:9A:CB:60:B2:C2:55:F9:3A:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01984659C58C0B4FAB757317629914BB4D44
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PxgM2IOFP01uMI6ay2CywlX5OpI.roa
Signing time: Sat 26 Jul 2025 10:49:05 +0000
ROA not before: Sat 26 Jul 2025 10:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 193.8.127.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:7b00::/29 maxlen: 29
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0f:17c0::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a12:ecc0:158::/48 maxlen: 48
2a12:f5c0::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a13:18c6:66::/48 maxlen: 48
2a13:2cc0::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:5b80::/29 maxlen: 29
2a13:7400::/29 maxlen: 29
2a13:7900::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
2a13:9180::/29 maxlen: 29
2a13:9580::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:d700::/29 maxlen: 29
2a13:d900::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
2a13:fb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:59:c5:8c:0b:4f:ab:75:73:17:62:99:14:bb:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 26 10:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f180cd883853f4d6e308e9acb60b2c255f93a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:1a:a3:15:51:ac:e4:60:f1:b9:38:5c:cb:
28:a9:75:bd:ef:f6:15:03:d4:d4:7b:2b:38:6d:6b:
26:0c:9f:8a:86:eb:72:5d:52:c4:de:35:33:b4:26:
61:07:6d:d2:5a:05:2b:01:bc:a7:26:3c:94:b3:42:
c7:fd:cb:0a:1b:4a:da:c8:ef:09:c8:a7:54:a4:a3:
3c:66:ee:b9:96:c2:f1:18:4e:34:82:c9:ec:e9:68:
e5:45:29:e1:e8:9f:1c:1d:d7:07:ae:2a:58:fb:c7:
eb:c3:c7:bc:1a:93:eb:5f:82:18:dc:5f:d4:16:8b:
09:1b:db:f0:1f:c3:2a:0d:5f:c8:5a:b9:8c:0b:a1:
69:58:68:ad:b8:29:57:84:e8:91:0f:cc:f0:e2:d9:
2f:a6:4e:84:d0:d1:ea:44:3a:6e:73:19:f5:b7:a0:
ab:d7:41:31:51:53:c6:11:de:93:65:aa:1b:e0:1e:
18:57:e9:52:8c:b0:0a:58:d2:d6:b6:e4:78:9a:c9:
c8:06:27:0f:0d:28:fe:7a:93:83:14:a4:6f:21:d9:
e1:71:bc:05:f6:06:99:be:5c:16:63:15:c7:f9:9c:
19:45:4e:42:59:03:b8:77:e5:a6:1b:57:21:04:af:
d0:a1:ec:6b:de:c5:a7:b3:59:0b:9f:49:55:bd:5a:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:0C:D8:83:85:3F:4D:6E:30:8E:9A:CB:60:B2:C2:55:F9:3A:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PxgM2IOFP01uMI6ay2CywlX5OpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.127.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:7b00::/29
2a0a:2d06:102::/47
2a0a:7d00::/29
2a0c:4880::/29
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:99::/48
2a0f:17c0::/29
2a0f:2500::/29
2a0f:d200::/29
2a0f:db40::/29
2a11:8880::/29
2a12:d5c0::/29
2a12:ecc0:158::/48
2a12:f5c0::/29
2a13:1380::/29
2a13:18c6:66::/48
2a13:2cc0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2e40::/29
2a13:3380::/29
2a13:4900::/29
2a13:5b80::/29
2a13:7400::/29
2a13:7900::/29
2a13:7d80::/29
2a13:8200::/29
2a13:9080::/29
2a13:9180::/29
2a13:9580::/29
2a13:9680::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:f900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
57:44:f6:a1:89:e8:69:bd:9f:8b:47:75:f2:74:a1:81:9f:1f:
ee:27:02:24:0b:76:e3:d2:31:fe:9b:0d:57:f5:0c:95:65:a8:
12:ee:ba:f6:09:03:c2:d6:b4:88:16:94:4d:94:d1:86:73:95:
60:e8:fb:6e:6e:20:b9:b6:15:43:53:6a:44:8d:77:3e:f1:0e:
e0:43:97:98:03:9c:ed:22:18:9b:d2:e7:d5:11:53:3e:36:05:
71:75:84:3d:13:27:7a:9b:8b:1c:5c:03:4d:08:d0:37:b8:35:
3c:b7:50:f1:42:3f:3a:4a:0d:a7:8f:93:a2:67:70:0a:49:ff:
fd:6f:cc:25:e3:ca:17:8a:4a:2c:fc:34:70:e9:29:72:41:fc:
f3:09:44:43:a2:f1:45:fa:29:6b:fb:9f:97:f0:0d:31:c7:b8:
8d:0d:ab:cc:13:e3:0a:33:82:65:f8:a9:f7:d4:25:e1:ee:c1:
e1:6d:1b:67:e4:bc:4b:13:6a:8d:f7:e1:2e:b0:d1:78:3b:09:
72:c8:96:4e:74:44:55:5f:bc:c1:5c:1e:23:5f:37:56:11:d3:
88:a5:c5:c1:d6:91:fb:c7:35:d6:8a:3a:5c:49:9f:2f:98:ba:
b8:f6:67:89:88:12:58:d8:b1:f1:b7:d7:d1:42:4c:dc:ea:11:
62:c4:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:57 2025 by rpki-client