Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UIff_Xu3zQ1v1xc47xjTPyN24_w.roa
File: UIff_Xu3zQ1v1xc47xjTPyN24_w.roa (raw, json)
Hash identifier: UE8RjAOGKNeu8KNv0lDKxfMxZQaPL+xJ71BlEtCej9c=
Subject key identifier: 50:87:DF:FD:7B:B7:CD:0D:6F:D7:17:38:EF:18:D3:3F:23:76:E3:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019884DD7DBE746829A0328AAD2A7BDB8F7A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UIff_Xu3zQ1v1xc47xjTPyN24_w.roa
Signing time: Thu 07 Aug 2025 14:09:24 +0000
ROA not before: Thu 07 Aug 2025 14:09:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209375
IP address blocks: 2a0f:dd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:dd:7d:be:74:68:29:a0:32:8a:ad:2a:7b:db:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 7 14:09:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5087dffd7bb7cd0d6fd71738ef18d33f2376e3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:da:a8:8d:74:54:8d:27:cf:7c:1d:b9:33:
00:95:8b:04:72:e9:e3:d8:b2:da:25:27:c4:d5:9f:
2b:ad:9e:12:7b:cc:de:2b:13:c2:a1:b0:0c:93:bf:
8f:25:7b:69:53:8c:5d:78:8d:a3:6b:f7:5b:28:70:
73:9e:60:87:a9:dc:f6:2d:7b:4b:17:ed:bf:fc:46:
ff:5a:c8:dc:bc:4f:80:f8:23:58:41:54:9a:86:3b:
02:54:de:60:81:63:6c:72:8a:46:b9:27:12:02:35:
da:1c:77:f8:9d:14:11:03:a1:07:40:fa:8d:7b:f6:
19:0e:b4:39:0d:92:82:92:0c:0f:1e:4e:f6:7f:b1:
10:82:40:72:1d:45:4c:a5:96:44:99:e6:b3:61:d2:
bb:aa:d7:ef:58:66:aa:4d:bf:da:67:e2:4f:d6:5f:
fe:07:20:87:52:4f:bc:ff:b6:84:61:ec:e9:51:01:
06:aa:0f:85:05:b1:b0:5b:b2:32:89:cb:9f:07:b2:
f9:ad:3b:f7:ad:0b:ef:ed:88:65:00:28:7a:32:30:
f9:36:7a:73:6a:9a:b4:dc:9e:6d:8a:ec:9e:c7:6c:
6d:9b:6d:9c:ce:da:fe:09:df:db:85:3d:61:01:cc:
d5:87:99:80:f3:99:c5:89:0b:0a:31:2e:54:fe:16:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:DF:FD:7B:B7:CD:0D:6F:D7:17:38:EF:18:D3:3F:23:76:E3:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UIff_Xu3zQ1v1xc47xjTPyN24_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
c9:17:f2:42:b9:38:88:b0:06:ed:de:da:30:9c:4b:e4:07:16:
b4:77:74:fa:00:e0:0c:42:18:10:c0:f7:d8:98:92:22:53:d0:
bf:7b:bf:af:69:51:a2:fd:85:8d:19:b1:e0:79:c3:02:5b:13:
a6:99:76:7a:65:a3:6a:00:f4:c8:8d:a8:37:32:ce:22:59:6a:
aa:8b:ed:31:79:8f:97:ff:14:56:2e:5f:0b:5f:31:f5:d0:f5:
b7:5d:5a:c5:d1:02:bc:ea:da:df:81:40:53:6d:11:82:2f:71:
a7:78:ec:7f:4f:d3:ea:cf:c5:58:a6:b0:3f:9c:c2:e6:d8:fd:
2a:05:a0:88:b9:f9:1e:56:c5:d3:91:dd:93:aa:b5:e6:af:7b:
c2:9e:64:6a:99:c3:8f:b5:98:61:48:ca:0c:2d:df:35:6b:6e:
ea:f7:c3:b3:61:c7:a2:58:ff:b2:70:68:84:23:1e:f1:1d:4c:
5d:22:a3:96:06:3b:82:1c:92:df:d5:16:04:5e:4e:ca:31:c9:
d2:bf:2d:34:28:3c:94:a5:e3:5c:b3:66:52:4a:2a:bc:01:ab:
d8:79:fa:e2:39:39:84:26:4e:f8:2b:60:90:7c:42:5f:d4:6e:
7e:38:06:7d:b0:2a:b5:79:04:4a:97:db:d9:d7:fb:a1:1e:9e:
0c:6c:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:35 2025 by rpki-client