Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qvv1ulH0WGREAN-OsA28ZcMGMug.roa
File: Qvv1ulH0WGREAN-OsA28ZcMGMug.roa (raw, json)
Hash identifier: iR0yts0tW6sCGBJTavq5t/rWA+/7dWU3Iet3tCHeVII=
Subject key identifier: 42:FB:F5:BA:51:F4:58:64:44:00:DF:8E:B0:0D:BC:65:C3:06:32:E8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019A39A9D703B6CD09C504024CD05CCCC1C0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qvv1ulH0WGREAN-OsA28ZcMGMug.roa
Signing time: Fri 31 Oct 2025 09:47:03 +0000
ROA not before: Fri 31 Oct 2025 09:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41095
IP address blocks: 2a06:1180:10::/48 maxlen: 48
2a06:35c4:100::/48 maxlen: 48
2a06:dfc0::/29 maxlen: 32
2a07:bb40::/29 maxlen: 32
2a09:17c0:b19a::/48 maxlen: 48
2a0a:2d00:10::/48 maxlen: 48
2a0a:2d00:20::/48 maxlen: 48
2a0c:7881:100::/48 maxlen: 48
2a0e:15c0:6::/48 maxlen: 48
2a0e:1a83:1::/48 maxlen: 48
2a0e:f600:2::/48 maxlen: 48
2a0f:1200:11::/48 maxlen: 48
2a0f:1200:100::/48 maxlen: 48
2a0f:1581:10::/48 maxlen: 48
2a0f:2d82:100::/48 maxlen: 48
2a0f:31c3:100::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a0f:7d00:10::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 32
2a0f:df46:100::/48 maxlen: 48
2a0f:e1c0:acab::/48 maxlen: 48
2a0f:e202:fc06::/48 maxlen: 48
2a0f:e6c2:100::/48 maxlen: 48
2a0f:e7c4:22::/48 maxlen: 48
2a0f:e842:100::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 32
2a0f:ea43:10::/48 maxlen: 48
2a10:30c0::/29 maxlen: 32
2a10:6400::/29 maxlen: 32
2a10:67c2:1::/48 maxlen: 48
2a12:ac43:acab::/48 maxlen: 48
2a12:ecc4:2213::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:9282:100::/48 maxlen: 48
2a13:9d00::/29 maxlen: 32
2a13:c500::/29 maxlen: 32
2a13:c900:44::/48 maxlen: 48
2a13:c900:55::/48 maxlen: 48
2a13:e102:10::/48 maxlen: 48
2a13:fd00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:a9:d7:03:b6:cd:09:c5:04:02:4c:d0:5c:cc:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 31 09:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42fbf5ba51f458644400df8eb00dbc65c30632e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:56:09:9a:bb:7d:aa:77:d9:0a:c4:e0:24:
52:36:d6:70:d1:f6:aa:d3:65:c1:ba:69:bd:4d:80:
68:bb:47:fb:c5:08:32:a5:5f:55:14:41:fe:e8:52:
3e:0e:8a:d4:79:2b:dc:97:ba:69:eb:50:db:a2:8d:
5c:47:96:7c:f8:0b:8c:c8:e8:28:73:88:5b:de:8b:
6e:dd:0c:56:5e:ef:6f:6a:d1:50:97:89:5a:dc:d6:
ec:66:74:da:93:17:71:58:ee:30:97:1e:e2:f3:c5:
b1:a3:dc:56:30:33:0f:1d:dc:71:fa:46:b3:24:00:
ea:8c:df:87:39:10:ea:e7:9c:46:ae:09:9f:e1:84:
26:a2:a4:ab:17:00:78:91:58:1b:80:e5:55:f5:eb:
d5:65:e1:b1:9a:e6:e0:31:fd:24:3f:e1:97:e7:62:
3d:11:fc:6b:99:75:33:19:cf:c7:04:ce:07:95:4f:
7c:e8:65:3c:d9:3e:f2:2d:1b:f3:63:71:fb:57:56:
c1:3a:b1:55:0e:0e:7d:ef:c5:cd:37:05:10:a2:c6:
67:ef:d6:a2:d2:f0:01:21:b8:75:4e:e0:3d:fb:fc:
65:d9:be:71:d4:50:d4:56:0e:4d:1a:79:98:4e:f1:
d7:e6:01:bf:6d:99:f7:f6:46:f6:00:a4:c7:3f:c8:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:F5:BA:51:F4:58:64:44:00:DF:8E:B0:0D:BC:65:C3:06:32:E8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Qvv1ulH0WGREAN-OsA28ZcMGMug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:10::/48
2a06:35c4:100::/48
2a06:dfc0::/29
2a07:bb40::/29
2a09:17c0:b19a::/48
2a0a:2d00:10::/48
2a0a:2d00:20::/48
2a0c:7881:100::/48
2a0e:15c0:6::/48
2a0e:1a83:1::/48
2a0e:f600:2::/48
2a0f:1200:11::/48
2a0f:1200:100::/48
2a0f:1581:10::/48
2a0f:2d82:100::/48
2a0f:31c3:100::/48
2a0f:3d80:2::/48
2a0f:7d00:10::/48
2a0f:dd40::/29
2a0f:df46:100::/48
2a0f:e1c0:acab::/48
2a0f:e202:fc06::/48
2a0f:e6c2:100::/48
2a0f:e7c4:22::/48
2a0f:e842:100::/48
2a0f:ea00::/29
2a0f:ea43:10::/48
2a10:30c0::/29
2a10:6400::/29
2a10:67c2:1::/48
2a12:ac43:acab::/48
2a12:ecc4:2213::/48
2a13:18c6:99::/48
2a13:8c86:140::/48
2a13:9282:100::/48
2a13:9d00::/29
2a13:c500::/29
2a13:c900:44::/48
2a13:c900:55::/48
2a13:e102:10::/48
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:75:90:8d:56:0a:70:80:ae:18:d0:8e:65:8e:59:90:ec:73:
fa:77:5e:7e:e4:bc:d2:57:f3:87:e2:40:c7:51:b9:69:6a:bf:
10:1e:4e:f7:73:14:c3:70:af:50:fd:89:b7:93:59:9f:8a:db:
22:95:07:42:e8:5c:21:e0:9b:34:a1:f9:9e:fe:ac:ad:6c:97:
6b:45:66:67:54:57:a4:cf:6e:1f:fb:37:61:db:05:b1:36:24:
4b:fb:e6:07:da:a5:86:d0:8d:8f:d4:ce:7e:c0:18:e1:6e:30:
82:3f:5d:81:ee:1b:a8:a0:8d:42:cf:44:3a:1b:6b:06:0a:27:
ca:1e:9b:1d:89:fb:db:15:f3:31:dc:c9:5a:df:59:9a:76:97:
f1:ec:c3:8e:67:7c:d1:d8:83:f8:5a:b3:88:90:e7:e0:3d:d1:
fb:d0:83:f6:75:75:43:00:dd:76:a2:24:1c:27:68:74:98:cf:
e6:76:fd:68:ae:4b:c8:19:96:95:bf:2b:11:9d:1f:b9:2d:d3:
81:d9:ae:52:55:82:0f:c9:bc:89:71:3c:ed:f8:08:77:79:dd:
b2:7e:67:d1:fb:b4:bc:0e:7e:b1:22:0e:b4:08:86:fa:94:09:
fa:fe:e3:e4:bc:1a:ea:eb:52:ea:18:d9:55:e5:67:d8:b2:ae:
35:0d:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:51 2025 by rpki-client